Privacy policy
This policy explains how Flagful (the “app”), this website and the invitation list and optional Flagful news subscription handle information. Flagful is developed by Marie Joe Chahine, an individual developer based in Dubai, United Arab Emirates using the name Latitude Layers Studio. Marie Joe Chahine is the data controller responsible for the personal information described here (“we”, “us”). You can reach us at support@flagful.app.
1 What the app does not collect
You can play without giving us your name, email address or date of birth. The app has:
- No account, username, password or sign-in
- No request for your location
- The app does not use your camera, microphone, photo library or contacts
- No advertising or advertising identifiers
- No collection of biometric, payment or financial details
- No chat, messaging or drawing-sharing feature
- Flag search stays on your device. Search filters the country list locally. Neither your search words nor search activity are sent to us.
Analytics and error reporting
Flagful does not collect gameplay analytics or automatically send crash or performance reports through third-party reporting services. This applies to everyone, including children. Gameplay events are not saved for later transmission to those services.
Your operating system or app store may separately collect diagnostics under its own privacy settings and policies. In particular, TestFlight automatically shares beta usage and crash information with the developer, as explained in section 3.5.
2 What stays on your device
The app saves the following on your device:
- The flags you have drawn and colored
- Your scores, stars, streaks and lesson progress
- Your settings, such as sound, music, haptics and language
The app does not upload these to us. Depending on your device settings, they may be included in a Google, iCloud or computer backup. We cannot access those backups. Deleting the app removes its local data; a backup copy may remain until you delete it separately.
3 Information sent outside the app
3.1 App update checks
Flagful uses Expo’s update service to receive fixes and content updates. When the app checks for an update, it sends technical information such as the platform, app runtime version, project identifier and a random installation token. Expo also receives the network request, including the connecting IP address. These requests do not include your drawings, scores, lesson activity or search words. See Expo’s privacy explanation.
3.2 When you contact us
If you email us for support or make a privacy request, we receive your email address, your message and any attachments you choose to send. We use them to respond and handle your request. Contacting us does not subscribe you to beta invitations or Flagful news. The app’s “Send feedback” option opens a draft in your own email app with the app version filled in; you can edit or remove it before sending, and nothing is sent until you send it. Please send only what is needed to explain the problem. Parents and guardians can contact us on a child’s behalf. Feedback is currently collected through email. Support correspondence is handled by Marie Joe Chahine; we do not share mailbox access with support staff or collaborators.
3.3 Visiting this website
This website has no advertising, third-party analytics scripts or tracking cookies added by us. Our hosting provider, Cloudflare, receives technical information such as your IP address when your browser requests pages and assets. We use the hosting service to deliver the website and protect it against abuse. Cloudflare privacy policy
The drawing demo runs entirely in your browser. Your painting is not sent to us or saved; it disappears when you reload or close the page. Your sound preference is saved in your browser. After a successful invitation list submission, a timestamp remembers that submission for up to 24 hours; your email address is not saved in browser storage. “Change email or try again” clears the reminder. We also remember your selected beta platform (Android, iOS or Both) in your browser so the confirmation page can show the relevant instructions. Clearing this website’s browser storage removes that preference.
3.4 Joining the invitation list
If you join the invitation list, we send your email address and selected beta platform (Android, iOS or Both) to Kit to manage the list and send a confirmation email, beta invitations, installation instructions and updates about testing Flagful. Signing up does not create an app account.
You can separately choose to receive occasional Flagful news, including launch announcements, new features and major updates after the beta. This choice is optional and is not required to join the beta. It covers Flagful only, not other apps or products from Latitude Layers Studio. We record your choice and the signup wording associated with it. An existing beta-only signup is not treated as permission for ongoing news.
Kit handles subscription and email-delivery records. Emails sent through Kit may include a small invisible image that records when an email is opened, and tracked links that record which links are clicked. These records are associated with your email subscription and help us understand how our emails are used. Email services and security scanners can cause these records to be inaccurate. We keep Kit’s optional subscriber-ID, hashed-email and automatic campaign-tracking link parameters switched off.
You can unsubscribe using the link in our emails, use the email-preferences link to stop optional Flagful news, or contact us to change your preferences or request deletion. The invitation list and news subscription are for adults; children should ask a parent or guardian to sign up on their behalf.
3.5 Taking part in the beta
The current closed beta is for adult testers only and is not open to children.
For Android testing, you join a Google Group using your Google Account. Group administrators can access membership information such as your account email and display name. We use membership to manage access to the Google Play closed test, not to subscribe you to Flagful news. Joining or leaving the group is separate from your Kit email subscription. See Google’s privacy policy.
If you test an iPhone or iPad version through TestFlight, Apple automatically collects beta usage and crash information and shares it with us. Feedback you submit through TestFlight is also shared with us. Public-link testers’ names and email addresses are not shown to us unless included in feedback. We use testing information to diagnose problems and improve Flagful. See TestFlight and privacy. This is separate from analytics or crash-reporting SDKs added to the app.
4 Service providers
Expo (650 Industries, Inc.) delivers app updates. Cloudflare hosts this website. Kit handles beta invitations and optional Flagful news subscriptions and emails; see Kit’s privacy policy and data processing addendum. Spacemail, provided by Spaceship, Inc., handles our support email; see Spaceship’s privacy policy, Spacemail’s terms and data processing addendum. Google provides the Android tester group and Google Play distribution; Apple provides TestFlight for iPhone and iPad testing. Device backups are managed separately by you and your backup provider. We do not sell personal information or share it for behavioral advertising.
Spacemail automatically scans email content for security threats and may use trusted AI services for that screening.
5 Legal bases (EU / UK users)
| Purpose | Legal basis |
|---|---|
| App update delivery (section 3.1) | Legitimate interests: keeping the app working and secure by delivering fixes |
| Support correspondence (section 3.2) | Legitimate interests: responding to questions and resolving problems |
| Handling statutory privacy requests (section 3.2) | Compliance with our legal obligations |
| Website delivery and security (section 3.3) | Legitimate interests: providing the website and preventing abuse. |
| Beta invitation and testing emails (section 3.4) | Consent, which you can withdraw by unsubscribing. |
| Optional ongoing Flagful news (section 3.4) | Separate consent, which you can withdraw at any time. |
| Beta eligibility and technical testing records (section 3.5) | Legitimate interests: managing beta access and resolving technical problems. |
| Records needed to respect opt-outs and meet statutory requirements | Compliance with our legal obligations. |
Our hosting provider describes its processing of website visitor information in its privacy policy referenced in section 3.3.
6 Children
Flagful is intended for children and adults. The current closed beta is for adult testers only. The same privacy protections apply to everyone. We do not ask players for their age or require an account. Gameplay analytics and third-party crash and performance reporting are off for all players. There are no ads or in-app sharing controls.
Drawings, progress and search words are not uploaded to us. Device backups and technical update requests work as described in sections 2 and 3.
Before making Flagful available to children, we will review the child-specific privacy protections and consent requirements for that release and update this policy to explain any changes. Joining the adult email invitation list does not provide consent for processing a child’s personal information.
Parents and guardians: you can contact us about your child’s privacy or ask us to delete personal information you or your child have sent to us. Write to support@flagful.app. You do not need to send your child’s drawings or other unnecessary personal details.
7 How long data is kept
- Drawings, progress and settings: stored on your device until removed or the app is deleted. Backup copies follow your backup settings and your provider’s retention rules.
- Support correspondence: kept while needed to handle your enquiry, provide related follow-up support, resolve disputes or meet applicable legal obligations. When no longer needed for these purposes, messages and attachments are deleted or anonymized. Support messages are not used to build a marketing list. Deleted messages may remain in Spacemail’s server backups for up to four weeks, as described in its terms.
- Privacy-request records: we retain only the information needed to handle your request and demonstrate compliance with applicable legal obligations. These records are deleted or anonymized when no longer needed.
- Technical update records: the app does not send update requests to a server operated by us. Expo handles update-service records under its privacy policy. Its published information does not specify a single fixed retention period for EAS Update request logs; we do not promise a deletion date for them.
- Website request information: this static website does not implement a separate visitor-log database. Cloudflare handles request information to provide and secure its services. Its retention depends on the services used, processing purposes and legal requirements described in its privacy policy.
- Beta invitation information: kept while you are on the beta invitation list. When you unsubscribe or the beta ends, information no longer needed for another purpose described in this policy is deleted or anonymized without unnecessary delay.
- Optional Flagful news: kept while your subscription is active. The beta ending does not end a news subscription you separately chose. We do not require you to reply to remain subscribed. When you unsubscribe, sending stops and information no longer needed is deleted or anonymized without unnecessary delay.
- Email delivery and engagement records: kept while needed to manage email delivery, investigate sending problems and understand how our emails are used. Records no longer needed for these purposes are deleted or anonymized through Kit’s available controls; backup copies follow its data processing terms.
- Beta-platform records: information we access through Google Groups or TestFlight is used while needed to manage access and resolve testing issues. Unneeded records are removed or anonymized when testing ends, subject to applicable legal obligations. Google and Apple separately apply their own retention practices.
- Consent and opt-out records: we may keep a minimal record of your email address, consent and opt-out to demonstrate compliance and prevent unwanted emails. These records are not used for marketing and are deleted when no longer needed. Unsubscribing is separate from a request to delete your data. Kit may retain isolated backup copies under its data processing terms.
8 Your rights
Depending on where you live, you may have the right to access, correct, delete, receive a portable copy of, restrict or object to the processing of your personal data, and to complain to a data protection authority.
- To delete local app data: delete the app. Remove any backup copy separately through your device or backup provider.
- For information we or our service providers hold: contact support@flagful.app. We will respond within the time limits required by applicable law. We may need limited information to verify and locate your request.
You can withdraw consent to beta emails or optional Flagful news at any time without affecting the lawfulness of earlier processing. You can complain to the relevant data protection authority. UK users can contact the Information Commissioner’s Office; EU users can find their authority through the European Data Protection Board.
We cannot view or remotely delete drawings and progress stored on your device or in your own backups.
9 International transfers
Expo, Kit and Spaceship are based in the United States. Cloudflare serves this website from data centers around the world, usually the one nearest to you. Information handled by our service providers may therefore be processed outside your country. Support correspondence may also be accessed by Marie Joe Chahine in the United Arab Emirates. Kit’s data processing addendum and Cloudflare’s data processing addendum describe EU Standard Contractual Clauses and UK transfer provisions. Spaceship’s data processing addendum includes EU Standard Contractual Clauses. Expo describes transfer safeguards in its privacy policy. Google and Apple describe their processing locations and safeguards in their respective privacy notices. You can contact support@flagful.app for more information about international processing and the safeguards described by these providers.
10 Security
App update requests and access to this website use HTTPS. Your drawings and progress remain in your device’s app storage, subject to your backup settings. Please avoid sending sensitive information in a support email unless it is needed to resolve your request.
11 Changes to this policy
If we change how we handle information, we will update this page and its “last updated” date before the change takes effect. Where required, we will also notify you and obtain your consent, or a parent’s or guardian’s consent, before starting the new collection.
12 Contact
Questions about this policy, requests about your data, and parental requests about a child’s data all go to support@flagful.app.