Privacy Policy

Who we are

Flashr ("Flashr," "we," "us") provides an editorially-maintained map of Canadian traffic-enforcement cameras and a companion app that alerts you as you approach them. This policy covers the Flashr iOS app and this website.

Information we collect

• Account information. When you create an account we store your email address and an authentication identifier from your sign-in provider (email, Apple, or Google).
• Preferences and profile. Your alert distance, notification settings, home location (if you set one), reputation score, and report history.
• Location. While the app is in use or running in the background for alerts, your device uses your GPS location to determine which cameras are nearby and in your direction of travel. This processing happens on your device. We receive your home location only if you choose to save one, and approximate report locations when you submit a community report.
• Community reports. If you report a camera, we store the location, type, any photo you attach, and the time of the report, linked to your account for reputation and accuracy scoring.
• Push token. If you enable notifications, we store a push token so we can send alerts (for example, a new camera near your home).
• Usage analytics. We collect anonymized, aggregated events about how features are used to improve the app — for example, alert interactions, feature usage, and screen views. No personal identifiers are attached to these events. You can opt out of analytics in app settings.

How we use your information

• To deliver the core service — warning you about nearby cameras and syncing your preferences across devices.
• To send notifications you've opted into.
• To score the accuracy and reputation of community reports and keep the map clean.
• To understand usage in aggregate and improve features, performance, and coverage.
• To protect the service against abuse and to comply with the law.
• To send transactional emails only — such as account confirmation or security alerts. We do not send marketing email without your explicit opt-in consent, and you can unsubscribe at any time.

How your location is handled

The alert engine runs on your device. Your continuous GPS trail is used locally to fire alerts and is not streamed to or stored by us. We only receive location data that you deliberately share — a saved home location, or the location attached to a camera report you submit.

Service providers

We share data with a small number of processors strictly to operate the service:

• Supabase — hosts our database and authentication.
• PostHog — privacy-focused product analytics.
• Apple / Google — sign-in and push-notification delivery.
• Mapbox — map rendering and location services.

These providers process data on our behalf under their own security and privacy commitments. We do not sell your personal information.

Some of our service providers are located outside Canada, including in the United States. Personal information transferred to these providers may be subject to the laws of that jurisdiction. We have executed Data Processing Agreements (DPAs) with Supabase, PostHog, and Mapbox to ensure your information is handled with appropriate safeguards.

Data retention

We keep your account data while your account is active. Community reports decay and expire automatically over time. When you delete your account, we delete or anonymize your personal data, except where we must retain it to meet a legal obligation.

Security & breach notification

We use industry-standard technical and organizational measures to protect your personal information. In the event of a data breach that creates a real risk of significant harm, we will notify affected individuals and report to the Office of the Privacy Commissioner of Canada (OPC) and, where applicable, the Commission d'accès à l'information du Québec (CAI), as soon as feasible after the breach is identified. We maintain a record of all security incidents for a minimum of 24 months as required by PIPEDA.

Your rights

Depending on where you live, you may have the right to access, correct, export, port, or delete your personal information, and to withdraw consent. Canadian users are protected under PIPEDA. Quebec residents have additional rights under Quebec's Law 25, including the right to data portability, the right to de-indexing, and the right to be informed about any automated decision-making or profiling technology that affects them. To make a request, contact us at privacy@flashr.app. You can also delete your account from within the app. We will respond to requests within 30 days.

Quebec residents

Quebec's Act respecting the protection of personal information in the private sector (Law 25) applies to Quebec residents who use Flashr. In addition to the rights above: your personal information is processed with privacy-protective settings by default; before transferring your data to our US-based service providers, we have conducted a Privacy Impact Assessment (PIA) confirming adequate protection is in place, and have executed contractual safeguards with each provider; you have the right to be informed about any technology that identifies, locates, or profiles you. The person responsible for the protection of personal information at Flashr can be reached at privacy@flashr.app.

Children

Flashr is intended for licensed drivers. We do not knowingly collect personal information from anyone under 13. Quebec residents under the age of 14 require parental or guardian consent before creating an account or using Flashr. If we become aware that a user under the applicable age threshold has registered without consent, we will delete their account and associated data.

Tracking & analytics transparency

We use PostHog for privacy-focused product analytics. PostHog receives anonymized usage events only — no personal identifiers are attached. If Apple's App Tracking Transparency (ATT) applies to any future feature, we will request your permission before any cross-app tracking occurs. We do not currently use your data for cross-app or cross-site advertising.

Changes to this policy

We may update this policy as the app evolves. We'll revise the "last updated" date above and, for material changes, provide a more prominent notice.

Contact

Questions about your privacy? Email privacy@flashr.app. See also our Terms of Service.