Privacy Policy

flito (flito.app) is the operator of this service. References to "flito", "we", "us" or "our" in this policy mean flito.

We are committed to protecting your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

Questions or requests: privacy@flito.app

We collect the following categories of personal information:

• Account information — display name or nickname, email address (optional for guest accounts), profile photo (if provided via Google).
• Location — suburb name and approximate coordinates (used to match you with a local swap pool). We do not track your precise location continuously.
• Object content — photos of items you list, chapter text and notes you write, and any story content you contribute to an object's passport.
• Swap and activity data — records of swaps, party participation, draw entries, follows, and notifications you interact with.
• Usage data — anonymised or pseudonymised analytics events (e.g. pages visited, features used) to help us understand how the app is used, recorded both in our own systems and via Google Analytics (see section 7). No third-party advertising trackers are active; we do not enable ads personalisation or advertising features in Google Analytics.
• Referral attribution — a pseudonymous referral code generated for your account, and, if you were referred, which account's code brought you to flito and what kind of shared content it was (see section 7).
• Technical data — IP address, device type, and browser type collected automatically when you use the app.
• Communications — messages you send to us (e.g. via the contact email).

If you sign in with Google, we receive your name, email address, and profile photo from Google in accordance with Google's Privacy Policy.

We use your personal information to:

• Create and manage your account and profile.
• Match you with a local swap pool based on your suburb.
• Display object passports and stories to other users.
• Generate AI-narrated story segments from content you provide (see section 6).
• Run café prize draws and notify winners by email.
• Send you notifications about swaps, object updates, and account activity.
• Detect and prevent fraud, abuse, and violations of our Terms.
• Measure which shared content (an object's journey, a party recap, impact stats, an invite link) brings new swappers to flito (see section 7).
• Improve and operate the flito service.
• Comply with our legal obligations.

We do not sell your personal information to third parties. We do not use your information for targeted advertising.

We share limited personal information with the following third-party providers who process data on our behalf:

• Google — sign-in and authentication (OAuth), and Google Analytics 4 for aggregate usage statistics (see section 7). Data may be processed in the United States and other countries outside Australia. Google Privacy Policy.
• Vercel — hosting, edge network, and file/image storage (currently Vercel Blob). Data may be stored on servers located in the United States or other regions. Vercel Privacy Policy.
• Resend — transactional email delivery (swap notifications, winner emails, etc.). Resend Privacy Policy.
• Ably — real-time messaging used for live party and swap features (connection metadata may be processed). Ably Privacy Policy.
• Anthropic — AI/LLM services used to generate object story narration from user-provided evidence (photos and notes). Content submitted for narration may be processed by Anthropic. Anthropic Privacy Policy.

We may update our service providers from time to time. Material changes will be reflected in an updated version of this policy.

Object passports are a core feature of flito: each object accumulates an immutable history of owners, transfers, and story chapters. Because these records are shared among all past and future owners of an object, individual passport entries cannot be deleted.

However, if you exercise your right to anonymisation (see section 8), your personal information within passport entries — your name, profile link, and any directly identifying details — will be replaced with “Anonymous”. The factual record of the transfer (date, suburb, story content) will remain.

flito uses AI to generate story narration for objects. Narration is produced only from evidence you provide — photos you upload or answers you select. We do not generate narration from nothing.

AI-generated story content is owned by flito (see our Terms of Service). Your underlying contributions — photos, notes, and chapter text — remain yours, and you retain the rights described in our Terms.

We use a single authentication cookie (flito_session) to keep you signed in. This cookie is strictly necessary for the service to function and cannot be opted out of while using an account.

We use Google Analytics 4 to understand aggregate usage of flito — for example, how many people visit, which pages are popular, and how visitors found us. Google Analytics sets cookies (_ga, _ga_*) and processes pseudonymous usage data; this data is processed by Google LLC, which may store and process it in the United States and other countries outside Australia. We do not enable Google Signals, ads personalisation, or any advertising features — Google Analytics is used for aggregate statistics only, and we do not send it your name, email, or other identifying information. See Google's Privacy Policy for how Google handles this data.

Referral attribution. If you share flito with someone (an object's journey, a party recap, your impact stats, or an invite link), the shared link carries a pseudonymous referral code — a random code tied to your account, never your name, email, or account ID. If someone visits using that link, we set a first-party flito_referral cookie recording the code and what kind of thing was shared, for up to 7 days (if you follow more than one referral link in that window, the most recent one is the one that counts — we do not stack credit across multiple links). If that visitor then creates a flito account within those 7 days, we record that your account referred theirs, and which kind of share brought them in. We use this only to measure which parts of flito are best at bringing in new swappers — there is currently no reward, discount, or benefit attached to referring someone, and this policy will be updated first if that ever changes. This is first-party measurement only; we do not share referral data with any third party, and it is never used for advertising.

We do not use advertising cookies or third-party advertising trackers. If we add further analytics or tracking tools in future, we will update this policy and display a notice in the app before activating them.

Under the Australian Privacy Principles, you have the right to:

• Access — request a copy of the personal information we hold about you.
• Correction — ask us to correct inaccurate or out-of-date information.
• Anonymisation — request that your account and all associated personal information be anonymised (“Go anonymous”). Your swap history and contributed content remain on object passports but your identifying details are replaced with “Anonymous”.
• Deletion — request full account deletion (“Delete account”). This permanently removes your account and profile. Note: content already contributed to object passports may be anonymised rather than deleted to preserve shared records (see section 5).
• Complaint — if you believe we have handled your information improperly, you may contact the Office of the Australian Information Commissioner (OAIC).

To exercise any of these rights, email privacy@flito.app. We will respond within 30 days.

We retain your personal information for as long as your account is active, or as long as we need it to provide the service. If you request anonymisation or deletion, we will action your request within 30 days.

Some information may be retained for longer periods where required by law or for legitimate business purposes (e.g. records relating to prize draws for NSW trade-promotion compliance).

flito is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you become aware that a minor has provided us with personal information, please contact us at privacy@flito.app and we will delete it promptly.

flito is marketed and operated primarily in Australia. If you access flito from the European Union, United Kingdom, or another jurisdiction with data-protection laws, the following applies:

• Lawful basis — we process your personal data on the basis of our legitimate interests in operating the flito service, or where necessary to perform our contract with you.
• Rights — in addition to the rights in section 8, EU/UK residents may also have rights to data portability and to object to processing. Contact us at privacy@flito.app.
• Transfers — your data may be transferred to and processed in countries outside the EU/UK (including Australia and the United States) by the service providers listed in section 4. We rely on standard contractual clauses or equivalent safeguards where applicable.

We may update this Privacy Policy from time to time. When we do, we will post the updated version at flito.app/privacy with a new effective date, and display a notice in the app. Continued use of flito after the effective date constitutes acceptance of the updated policy.

privacy@flito.app