Privacy Policy
Last updated: March 3, 2026
1. Who We Are
This Privacy Policy explains how Flistoo ("Flistoo", "we", "our", "us") collects, uses, stores, and shares your information when you use our website, app, and related services (the "Service").
2. Information We Collect
We may collect:
- Account data: name, email, password hash, username, phone number, avatar.
- Profile and preference data: city, saved places, favorites lists, plans, follows.
- Content you submit: list names/descriptions, uploaded media, business claim details.
- Usage and technical data: device ID, app events, interactions, IP and browser/device metadata.
- Approximate location data when provided by your device/browser permissions.
3. How We Use Information
- Provide, operate, and improve the Service.
- Create and manage accounts, authentication, and security.
- Personalize discovery, feeds, and recommendations.
- Enable social features (sharing, list likes/copies, plans, follows).
- Moderate content, prevent abuse, and enforce our Terms.
- Respond to support, legal requests, and compliance obligations.
4. Legal Bases (Where Applicable)
Depending on your jurisdiction, we process personal data based on consent, contractual necessity, legitimate interests, and compliance with legal obligations.
5. Sharing of Information
We do not sell your personal data. We may share data with service providers (hosting, analytics, security, storage), with authorities when legally required, and in connection with business transfers (such as merger or acquisition), subject to applicable law.
6. Data Retention
We retain information for as long as needed to provide the Service, meet legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type and risk profile.
7. Security
We use reasonable technical and organizational safeguards to protect personal data. No system can be guaranteed 100% secure, and you use the Service at your own risk.
8. Your Rights
Depending on your location, you may have rights to access, correct, delete, restrict, object, or request portability of your personal data, and to withdraw consent where processing is based on consent.
9. Children
The Service is not intended for children under 13 (or higher minimum age required by local law). We do not knowingly collect personal data from children below the applicable minimum age.
10. International Transfers
Your information may be processed in countries other than your own. Where required, we use appropriate safeguards for cross-border transfers.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material updates will be posted with a new "Last updated" date.
13. Contact
For privacy requests or questions, use our Support page.