We believe in transparency. Here's exactly what data we collect, how we use it, and how you stay in control.
When you use Flashthink, we collect the following categories of information:
| Category | Data Points | Required? |
|---|---|---|
| Account Info | Email address, username, full name, profile picture (avatar) | Yes |
| Content You Create | Prompts, titles, categories, media files you upload | To use core features |
| Social Activity | Likes, bookmarks, comments, follows | Optional |
| Authentication | OAuth tokens if you sign in via Google | If using Google Sign-In |
| Technical Data | App version, crash logs, device type (via Firebase) | Automatic |
We do not collect:
We use the information we collect solely to operate and improve Flashthink:
To provide the service: Your account data enables you to log in, create and publish prompts, follow other users, and interact with community content.
To personalise your experience: We use your activity (likes, bookmarks, follows) to surface relevant prompts in your feed and search results.
To send you important updates: We may email you about significant changes to the app or your account (e.g., password reset, email verification). We do not send marketing emails without your explicit consent.
To ensure safety and prevent abuse: We monitor for spam, inappropriate content, and policy violations to keep the community safe.
To improve reliability: Crash reports and usage metrics (via Firebase) help us identify and fix bugs and performance issues.
Flashthink uses the following trusted third-party infrastructure. Each provider has its own privacy policy and data handling practices:
| Service | Purpose | Data Shared |
|---|---|---|
| Supabase | Database, authentication, file storage | Account info, prompts, activity data |
| Google Firebase | Crash reporting, analytics, app updates | Device info, crash logs, app events |
| Google OAuth | Optional Google Sign-In | Email, name, profile picture (only if you choose Google Sign-In) |
We only share the minimum data necessary for each service to function. We do not share your data with advertising networks, social media trackers, or data analytics companies beyond those listed above.
Your data is stored securely on Supabase servers. Supabase uses industry-standard encryption (TLS in transit, AES-256 at rest) to protect your information.
Data retention: We retain your account data for as long as your account is active. If you delete your account, your personal data (email, full name, profile picture) will be removed within 30 days. Your public prompts may be retained in anonymised form to preserve community content integrity, unless you explicitly request full deletion.
Security measures: We implement access controls, authentication guards (via Supabase Row-Level Security), and encrypted communication to protect your data. However, no system is 100% secure — please use a strong, unique password for your account.
You have meaningful control over your data:
Access & Portability: You can view all the information associated with your account directly in the app. Contact us if you need a machine-readable export of your data.
Correction: You can update your username, full name, and profile picture at any time from your profile settings.
Deletion: You can delete individual prompts at any time. To delete your entire account and associated data, contact us at the address below and we will process your request within 30 days.
Opt-out of analytics: Firebase analytics can be limited by adjusting your device's advertising settings. Disabling analytics will not affect your ability to use Flashthink.
Withdraw consent: If you signed in via Google and wish to revoke access, you can remove Flashthink from your Google account's connected apps at any time via myaccount.google.com/permissions.
Flashthink is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13 years of age. If you believe a child has provided us with personal information, please contact us immediately and we will take steps to delete such information promptly.
If you are between 13 and 18 years old, please review this policy with a parent or guardian before using Flashthink.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:
Your continued use of Flashthink after changes are posted constitutes your acceptance of the revised policy. We encourage you to review this policy periodically.
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us. We aim to respond to all inquiries within 5 business days.
Our team is happy to answer any questions about your data and privacy.
web.flashthink@gmail.com