Legal

Privacy Policy

Last updated: 3 August 2026

Your privacy, and your clients' privacy, matter to us. This policy explains what we collect, why, and the choices you have. In short: we host data in the European Union, we never sell it, and we do not put advertising trackers on you or your clients.

1. Who is responsible for your data

Flit is a brand of RCS (FZE), a free zone establishment registered in Sharjah, United Arab Emirates ("RCS", "we", "us"). For questions about privacy, contact support@flitapp.ai.

An important distinction: for the information a lash artist records about her own clients (their details, photos, notes, intake answers), the lash artist is the data controller and Flit acts as her processor, handling that data only on her instructions. If you are a client of a lash artist and want to see or delete your information, contact her; we will help her do it.

2. What this policy covers

It covers our website (flitapp.ai) and the Flit application.

3. What we collect

When you visit our website. We use Cloudflare Web Analytics, a privacy-first measurement tool that uses no cookies and does not track you across other sites. It only tells us aggregate things like how many people viewed a page. If you leave your email to join the waitlist, we keep that email to contact you about early access.

When you use the app. To create and run your account we process your name and email, your business details, and your subscription and billing information (handled by our payment partner, see below). We also store the content you enter to run your business: your clients, appointments, finances, photos and notes, including any health-related answers your clients give on an intake form.

4. Why we use it

• To provide Flit and keep you signed in.
• To send you the emails the service needs (booking requests, confirmations, reminders).
• To take payment for your subscription.
• To offer support and keep the service secure.
• To understand, in aggregate, how the product is used so we can improve it.

5. Our legal bases (GDPR)

Where the GDPR applies, we rely on: performance of our contract with you (to provide the app); our legitimate interests (to secure and improve the service); your consent where it is required; and compliance with legal obligations. For special-category information (see next section) we act on your instructions and on the consent you obtain from your clients.

6. Health-related information

An intake form may include health-related answers (for example allergies or a patch-test result). This is sensitive information. You collect it from your clients with their consent, and we process it only to provide Flit to you. We never use it for advertising or share it with data brokers.

7. Who we share data with

We use a small number of trusted providers, each only for what it does:

• Supabase — our database and file storage, hosted in the European Union.
• Cloudflare — website hosting and the cookieless analytics above.
• Resend — sending the transactional emails the service needs.
• Paddle — processing subscription payments as our Merchant of Record.
• Anthropic — only if you choose to import a paper client book, to read the text on the pages you upload. It is not used to train its models on your data.

We do not sell your data, and we do not share it with advertisers.

8. Where your data is stored

Your app data is hosted in the European Union. Some of our providers may process limited data (such as an email address for sending a message, or a payment detail) in other countries; where that happens, it is protected by appropriate safeguards.

9. How long we keep it

We keep your data for as long as your account is active. If you close your account, we delete or anonymise your data within a reasonable period, unless we must keep some records to meet a legal obligation. You can ask us to delete your data at any time.

10. Your rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal data, and to object or withdraw consent. To exercise these rights over your own account data, write to support@flitapp.ai. For data held about you by a lash artist, please contact her; as her processor, we will assist.

11. How we protect your data

Data is encrypted in transit, access is restricted, and the app serves its own fonts, detection model and libraries rather than calling third-party networks, so your visitors' and clients' details are not exposed to outside trackers.

12. Cookies

Our website uses no tracking or advertising cookies, and our analytics is cookieless. The app uses only the essential storage needed to keep you signed in and to work offline.

13. Children

Flit is for professionals aged 18 or over. It is not directed at children.

14. Changes to this policy

We may update this policy. If we make an important change, we will let you know. The date at the top shows when it was last revised.

15. Contact

For any privacy question, write to support@flitapp.ai.