Privacy Policy

Who we are

Flashr ("Flashr," "we," "us") provides an editorially-maintained map of Canadian traffic-enforcement cameras and a companion app that alerts you as you approach them. This policy covers the Flashr iOS app and this website.

Information we collect

• Account information. When you create an account we store your email address and an authentication identifier from your sign-in provider (email, Apple, or Google).
• Preferences and profile. Your alert distance, notification settings, home location (if you set one), reputation score, and report history.
• Location. While the app is in use or running in the background for alerts, your device uses your GPS location to determine which cameras are nearby and in your direction of travel. This processing happens on your device. We receive your home location only if you choose to save one, and approximate report locations when you submit a community report.
• Community reports. If you report a camera, we store the location, type, any photo you attach, and the time of the report, linked to your account for reputation and accuracy scoring.
• Push token. If you enable notifications, we store a push token so we can send alerts (for example, a new camera near your home).
• Usage analytics. We collect events about how features are used, so we can improve them — for example opening the app, viewing the upgrade screen, or submitting a report. When you're signed in, these events are linked to your account by an internal user identifier. They never include your location, your email, or the contents of anything you write.
• Purchase and subscription data. If you subscribe to Flashr Pro, our subscription management provider (RevenueCat) shares your subscription status, the product purchased, and transaction history with us so we can unlock Pro features on your account. Payment itself is processed by Apple through the App Store — we never receive or store your card details.

How we use your information

• To deliver the core service — warning you about nearby cameras and syncing your preferences across devices.
• To send notifications you've opted into.
• To score the accuracy and reputation of community reports and keep the map clean.
• To understand usage in aggregate and improve features, performance, and coverage.
• To protect the service against abuse and to comply with the law.
• To send transactional emails only — such as account confirmation or security alerts. We do not send marketing email without your explicit opt-in consent, and you can unsubscribe at any time.

How your location is handled

The alert engine runs on your device. Your continuous GPS trail is used locally to fire alerts and is not streamed to or stored by us. We only receive location data that you deliberately share — a saved home location, or the location attached to a camera report you submit.

Service providers

We share data with a small number of processors strictly to operate the service:

• Supabase — hosts our database and authentication.
• PostHog — privacy-focused product analytics.
• Apple / Google — sign-in and push-notification delivery.
• Mapbox — map rendering and location services.
• RevenueCat — subscription and in-app purchase management for Flashr Pro.

These providers process data on our behalf under their own security and privacy commitments. We do not sell your personal information.

Some of our service providers are located outside Canada, including in the United States. Personal information transferred to these providers may be subject to the laws of that jurisdiction. We have executed Data Processing Agreements (DPAs) with Supabase, PostHog, and Mapbox to ensure your information is handled with appropriate safeguards.

Data retention

We keep your account data while your account is active. Community reports decay and expire automatically over time. When you delete your account, we delete or anonymize your personal data, except where we must retain it to meet a legal obligation.

Security & breach notification

We use industry-standard technical and organizational measures to protect your personal information. In the event of a data breach that creates a real risk of significant harm, we will notify affected individuals and report to the Office of the Privacy Commissioner of Canada (OPC) and, where applicable, the Commission d'accès à l'information du Québec (CAI), as soon as feasible after the breach is identified. We maintain a record of all security incidents for a minimum of 24 months as required by PIPEDA.

Your rights

Depending on where you live, you may have the right to access, correct, export, port, or delete your personal information, and to withdraw consent. Canadian users are protected under PIPEDA. Quebec residents have additional rights under Quebec's Law 25, including the right to data portability, the right to de-indexing, and the right to be informed about any automated decision-making or profiling technology that affects them. To make a request, contact us at privacy@flashr.app. You can also delete your account from within the app. We will respond to requests within 30 days.

Quebec residents

Quebec's Act respecting the protection of personal information in the private sector (Law 25) applies to Quebec residents who use Flashr. In addition to the rights above: your personal information is processed with privacy-protective settings by default; before transferring your data to our US-based service providers, we have conducted a Privacy Impact Assessment (PIA) confirming adequate protection is in place, and have executed contractual safeguards with each provider; you have the right to be informed about any technology that identifies, locates, or profiles you. The person responsible for the protection of personal information at Flashr can be reached at privacy@flashr.app.

Children

Flashr is intended for licensed drivers. We do not knowingly collect personal information from anyone under 13. Quebec residents under the age of 14 require parental or guardian consent before creating an account or using Flashr. If we become aware that a user under the applicable age threshold has registered without consent, we will delete their account and associated data.

Tracking & analytics transparency

We use PostHog for product analytics. These events record which features were used — not where you were or what you wrote. We never attach GPS coordinates, your email, or the text of your reports to them. When you're signed in, events are linked to your account by an internal user identifier so we can tell one person's usage from another's; that identifier means nothing outside Flashr. We do not use your data for cross-app or cross-site advertising and we do not share it with data brokers. If Apple's App Tracking Transparency (ATT) applies to any future feature, we will request your permission before any cross-app tracking occurs.

Changes to this policy

We may update this policy as the app evolves. We'll revise the "last updated" date above and, for material changes, provide a more prominent notice.

Contact

Questions about your privacy? Email privacy@flashr.app. See also our Terms of Service.