Privacy policy
In force since 24 August 2026
Who handles your data
The data controller is Sufyan Arif. For any request: clashroyal54321bs@gmail.com.
What data we collect
- Account: email address, username, display name, and whatever you add to your profile (bio, pronouns, link, photo).
- Content: the videos you post, the thumbnails your phone generates, the captions, the comments and direct messages.
- Interactions: likes, saves, follows, views and shares.
- App usage: watch time and skipped videos, in aggregate, to work out what to show in the feed.
We don't collect your location, we don't read your contacts and we don't use third-party advertising trackers.
Why we process them
To let you use the app (performance of the contract), to keep the platform safe and moderate abuse (legal obligation and legitimate interest), and to order the feed sensibly (legitimate interest).
Where they're kept
On Supabase, in a European Union data centre (Ireland, eu-west-1). We never see passwords: the authentication system keeps them encrypted. Videos are on publicly readable storage: anyone with the link can open them even without the app.
For how long
As long as you keep the account. When you delete it, profile, videos, files, comments, messages and interactions are removed straight away. Abuse reports may be kept longer, without your name, to protect the platform and its users.
Copyright reports
When we receive a copyright infringement report we process the reporter's data (name, contact details, the work claimed and the title on which they hold it), the identifier of the reported content and the outcome of the check. We tell whoever published the content the reason for its removal; if they reply, we pass the reply and their contact details on to the reporter, because a dispute over rights is settled between the two parties.
Established infringements stay recorded on the account so that the rule on repeated infringement can be applied: they are kept for 24 months from the last one, or for as long as the account exists if it was closed for this reason. The legal basis is legal obligation and the legitimate interest in defending the platform and rightsholders.
Your rights
You can request access, rectification, erasure, restriction and portability of your data, and object to processing. You can carry out erasure yourself, right away, from Settings → Delete account. For anything else write to clashroyal54321bs@gmail.com. You may also contact your data protection authority.
Minors
FlipTok is not for anyone under 14. If we find out an account belongs to someone younger, we close it.