Flash — Privacy Policy

1. Introduction

• Flash ("the app") identifies movies and TV shows from a few seconds of audio recorded on your device, or from text you type. The app is built and run by an independent developer, who is the data controller for the purposes of this policy and can be contacted at flash.ai.support@gmail.com. It sets out what the app processes, why, and what you can ask for.

• By creating an account or using the app, you confirm you have read and understood this policy.

2. What Flash Collects

• Account information: an email address and a display name, both needed to create an account, and an age you can give if you want to. The display name is only ever shown back to you in the app.

• Content you create in the app: items you save to history or favorites, and anything you type into the search box. Typed searches are sent to third-party AI processing services to produce a result, in the same way audio is.

• Service analytics: pseudonymous records of identification attempts, what came back, and how you interacted with the result. These measure accuracy and catch failures. You can switch analytics off at any time in Settings.

• Audio: when you ask Flash to listen, it makes a short recording and sends it to the app's backend and on to third-party AI processing services. The recording is used to produce your result and nothing else. It is not kept afterwards, not stored anywhere it can be played back, not reviewed by a person, and — under the terms Flash holds with its processing providers — not used to train their models. Flash records only while you have asked it to and while the notification says it is listening.

• Approximate region: taken from your device's language and region settings so streaming availability makes sense where you are. No GPS, IP-based location or street-level data is collected.

3. What Flash Never Collects

• Precise or background location, GPS coordinates, or Wi-Fi/Bluetooth-based location.

• Contacts, photos, calendar entries, SMS, call logs, or files from your device.

• Persistent device identifiers such as IMEI, MAC address, or advertising ID.

• Microphone audio outside of an active identification request initiated by you.

• Browsing history or any activity you perform in other apps.

4. How That Information Is Used

• To provide the core identification service and return results to you.

• To maintain your account, authenticate you, and sync your history and favorites across sessions on the same account. Your display name is used to address you in the app, and an age you choose to give is stored on your account and shown back to you in Profile.

• To send you a notification containing the result of an identification you requested.

• To keep the service working: spotting errors, preventing abuse, and measuring how often results are right.

• To meet legal obligations and enforce the Terms of Use.

5. Legal Bases for Processing (EU/UK Users)

• Performance of a contract: processing necessary to provide the service you have signed up for (e.g., authentication, returning identification results).

• Legitimate interests: keeping the service secure, preventing abuse, and measuring accuracy so results improve. Service analytics run on this basis and are on by default; you can object at any time by switching them off in Settings, which stops the collection.

• Consent: where you have explicitly opted in to optional processing. You can withdraw it at any time, without affecting anything already done.

• Legal obligation: complying with applicable law and lawful requests from authorities.

6. Sub-processors and Third-Party Providers

• Flash uses third-party providers to run the service: cloud hosting, managed authentication and databases, AI processing, crash reporting, and public catalogues for titles, posters and ratings.

• They process data only on instruction and under their own privacy commitments. Which providers handle which step, and how the app arrives at an answer, is confidential.

• Some providers may process data outside your country of residence. Where applicable, transfers rely on lawful mechanisms such as the European Commission's standard contractual clauses. You can request a copy of the safeguards used by emailing flash.ai.support@gmail.com.

• Your personal information is never sold, and never shared for cross-context behavioural advertising.

7. Data Retention

• Account information and user-created content (history, favorites) are retained for as long as your account exists. You may delete individual items at any time from the app.

• When you delete your account, your personal data is deleted or irreversibly anonymised without undue delay, subject to limited retention required for legal, accounting, fraud prevention, or dispute resolution purposes.

• Recordings and typed searches sent for identification are not kept once the result has been produced.

• Analytics records tied to your account are kept while the account exists and are deleted with it. You can export a copy of your data, or delete individual history and favorites items, at any time from within the app.

• Records created before you signed in carry no account identifier, so they cannot be traced back to you and are not affected by account deletion. The same applies to aggregated statistics, which may be kept indefinitely.

8. Security

• All traffic between the app and its backend is transmitted over TLS/HTTPS.

• Authentication sessions are stored in encrypted storage on your device, keyed to the device's secure hardware where available.

• Server-side access controls restrict each account to its own data.

• Passwords are never stored in plaintext; authentication is handled by a managed identity provider.

• No system is perfectly secure. You are responsible for keeping your account credentials confidential and for using a strong, unique password.

9. Your Rights

• Access & portability: you can view your data in the app and request an export of your account data from the Profile screen.

• Rectification: you can edit your display name and age in Profile, and update your email and password from Profile/Settings.

• Erasure: you can delete individual history or favorites items, or permanently delete your entire account from the Profile screen. Account deletion removes your authentication record and the personal data associated with it.

• Restriction & objection: you can disable optional analytics in Settings, or email flash.ai.support@gmail.com to object to specific processing.

• Withdraw consent: where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

10. Children's Privacy

• The app is not directed to children under 13 (or the minimum age required by your jurisdiction, whichever is higher). It is not knowingly used to collect personal information from anyone below that age. If you believe a child has provided personal data, get in touch at flash.ai.support@gmail.com and it will be deleted promptly.

11. Automated Decisions

• Results come from automated systems, with no human review of your recording or query. They are informational only and have no legal or similarly significant effect on you.

12. Changes to This Policy

• This policy may be updated as the app or the law changes. Significant changes will be announced in the app or by email. Continuing to use Flash after the effective date means you accept the updated policy.

13. Contact

• Privacy questions, data requests and deletion requests: flash.ai.support@gmail.com