Flaro

Privacy Policy

Last updated: 18 October 2026

This Privacy Policy explains how Luke White, a sole trader trading as Flaro (ABN 53 305 439 140), Queensland, Australia ("Flaro", "we", "us", or "our") collects, uses, and protects your information when you use the Flaro mobile application (the "App"). By using the App, you agree to this policy.

1. Information we collect

We only collect what we need to run the App:

Information	Why we collect it
Phone number	To create your account and sign you in via a one-time SMS code.
Display name & username	To identify you to other members of your groups.
Profile photo (optional)	Shown on your profile and posts.
Proof content (photos, videos, captions)	The core feature — posted to your groups as proof you completed a challenge.
Group and challenge activity	Group memberships, challenges, completions, streaks, and XP, so the App can track progress and leaderboards.
Friends	Who you are friends with and friend requests you send or receive, so friends can see each other's proofs.
Contacts (optional)	Only if you allow it: the phone numbers in your contacts, kept in scrambled form, to suggest friends who are on Flaro. See section 1b.
Push notification token	To send reminders and notifications, if you enable them.
Step count from Apple Health (optional)	Read only if you connect Apple Health, so the App can tick off step-based goals automatically.
Crash and diagnostic data	If the App crashes or hits an error, a report is sent with technical details (device model, iOS version, App version and what the App was doing) so we can fix it. It does not include your name, phone number or account details.
Purchase records	If you buy something in the App, a record of what you bought and when, so we can give you what you paid for. Payment itself is handled entirely by Apple — we never see your card details.

We do not collect your precise location or payment details, and we do not use third-party advertising or tracking SDKs.

1a. Apple Health data

If you choose to connect Apple Health, Flaro reads one thing only: your step count for the current day. We use it for a single purpose — to tick off step-based goals in the App automatically, so you do not have to log them by hand.

Health data is never used for advertising or marketing, is never sold, and is never shared with third parties or with other users. Your step count is used on your device to work out whether a goal has been met; only the resulting completion — the fact that you finished a challenge — is stored on our servers, alongside your other challenge activity.

Connecting Apple Health is entirely optional and the App works fully without it. You can withdraw access at any time in the iPhone Settings app, under Privacy & Security → Health → Flaro, or from within Flaro's own Settings screen. Withdrawing access stops all further reads immediately.

1b. Contacts

Finding friends from your contacts is optional, and Flaro only reads your contacts if you allow it when asked. If you do, Flaro reads the phone numbers in your contacts only (not names, emails or anything else) and sends them securely to our server.

To suggest friends both ways — people in your contacts, and people who have you in theirs — we keep each number in scrambled form: it is turned into a one-way code (a salted cryptographic hash) and the original number is not kept. The codes can only be used to recognise a match with another Flaro account's phone number. While contacts are switched on, Flaro refreshes this at most once a day.

Your contacts are never shown or shared with other users or third parties, never used for marketing, and we never contact anyone in your contacts. Other users can only be suggested to you, or you to them, when one of you already has the other's phone number saved, or through things you share (mutual friends or groups).

You can delete Flaro's copy at any time with Stop using my contacts on the Friends screen, and it is deleted automatically if you delete your account. You can also withdraw access in the iPhone Settings app, under Privacy & Security → Contacts → Flaro.

2. How we use your information

• To create and secure your account;
• To provide core features — posting proof, groups, challenges, streaks, and leaderboards;
• To show your posts and profile to members of the groups you join and to your friends;
• To help you find people you know, through search, suggestions and (if you allow it) your contacts;
• To send notifications and reminders you've enabled;
• To keep the App safe, including reviewing reported content and enforcing our Terms.

3. How your information is shared

• With other members of your groups. Your name, username, profile photo, proof posts, and streaks are visible to members of groups you join. Don't post anything you wouldn't want your group to see.
• With your friends. When you accept a friend request (or someone accepts yours), you can both see each other's proof posts. You can remove a friend at any time.
• When people look for friends. Other Flaro users can find your name, username and profile photo by searching, and Flaro may suggest you to people you probably know — for example, people in a group with you, friends of your friends, people who have your number in their contacts, or people whose number is in yours. A suggestion may say why (such as “In your contacts” or “Friends with Lucy”). Nothing else about you is shown until you are friends.
• With our service providers. We use Supabase to host our database, authentication, and media storage, Sentry for crash and error reports, RevenueCat to manage in-app purchases, Expo to deliver App updates, and platform push services (Apple/Google) to deliver notifications. They process data only to provide these services to us.
• Competitions. If you enter a Flaro competition, we use your details to check eligibility, run the draw, and contact you if you win. A winner's display name may be announced publicly, as set out in that competition's terms.
• For legal reasons. If required by law or to protect the rights, safety, or property of Flaro or others.

We never sell your personal information.

4. Content moderation

The App lets users report posts and block other users. When content is reported, we may review it and the associated account to enforce our Terms of Service. Reports are stored so we can act on them.

5. Data retention and deletion

We keep your information for as long as your account is active. You can permanently delete your account and associated data at any time from Settings → Delete account. Some information may remain in routine backups for a limited period or where we're required to keep it by law.

6. Security

We use reputable infrastructure and reasonable technical measures to protect your information. No system is perfectly secure, but we work to keep your data safe and restrict access to it.

7. Children

The App is not intended for children under 13. We do not knowingly collect information from anyone under 13. If you believe a child under 13 has provided us information, contact us and we'll remove it.

8. Your rights

You can access and update your profile in the App, delete your account and data at any time, and contact us with any privacy request. Depending on where you live, you may have additional rights under local law (such as the Australian Privacy Principles), which we will honour.

9. International users

Flaro is operated from Australia, and your information may be stored and processed in Australia or other countries where our service providers operate. By using the App you consent to this.

10. Changes to this policy

We may update this policy from time to time. We'll update the "Last updated" date above and, where appropriate, notify you in the App.

11. Contact

Questions or privacy requests? Email us at info@flaro.net.au.