Privacy Policy

1. Information we collect

Flagged itself does not collect any personally identifiable information. We do not ask for your name, email, phone number, location, contacts, photos, or any other personal data. There is no account system, no login, and no profile.

To understand how the app is used and improve it, we collect a small amount of anonymous usage data through PostHog, a third-party analytics service. This is limited to product interaction events — for example, when the app is opened and when a round is started or completed.

PostHog automatically generates a random anonymous identifier for your device the first time the app runs. This identifier is stored locally on your device and is not linked to your name, email, Apple ID, IDFA, phone number, or any other personal information. PostHog also automatically collects standard technical metadata such as your iOS version, app version, device model class, language, and country (at country level only — not city or precise location).

We do not collect, store, or have access to:

• Your real-world identity
• Your precise location
• Your contacts or photos
• Any content you create
• Any cross-app or cross-device tracking signals

2. Third-party services

We use the following third-party services, each of which may receive limited data when you use the app:

• PostHog — anonymous product analytics. Data is processed in the United States by PostHog Inc. See PostHog’s Privacy Policy.
• flagcdn.com (Flagpedia) — serves flag images on demand. When the app loads a flag, your IP address and standard HTTP request headers are visible to flagcdn.com as part of normal internet traffic. We do not control flagcdn.com. See flagpedia.net Privacy Policy.

We do not use any advertising networks, attribution providers, crash reporting services beyond Apple’s built-in tools, social login providers, or sharing/communication SDKs.

3. How long we keep your data

PostHog retains anonymous event data for up to 7 years by default. Because the data is not linked to your identity, we cannot retrieve, modify, or delete data tied to a specific person on request. If you uninstall Flagged, your device’s anonymous identifier is removed; any future use of the app will generate a new identifier.

4. Your rights

Because we don’t collect personally identifiable information, traditional rights such as access, correction, and deletion don’t directly apply — there is nothing tied to your identity to access or delete. However:

• Opt out of analytics — you can prevent any new analytics events by turning off network access for Flagged in iOS Settings → Cellular / Wi-Fi, or by deleting the app.
• Reset your anonymous identifier — deleting and reinstalling Flagged will generate a fresh anonymous identifier.
• Questions or requests — email contact@blacksands.studio.

5. Children

Flagged is suitable for users of all ages and is rated 4+ on the App Store. We do not knowingly collect personal information from children, because we do not collect personal information from anyone. The anonymous analytics described above apply equally to all users regardless of age.

6. International data transfers

PostHog processes data in the United States. By using Flagged from outside the United States, you understand that anonymous usage data is transferred to and processed in the U.S. We have no other data transfers.

7. Changes

If we ever change how Flagged handles information, we will update this page and revise the date above.

8. Contact

Questions about this policy can be sent to contact@blacksands.studio.