Privacy Policy

This policy explains what data PromptFlip collects, why, and what control you have over it. It's written in plain language on purpose — if anything is unclear, email us and we'll clarify it.

Who we are

PromptFlip is operated by Enzo Turletti, an independent developer based in Rosario, Argentina. For any privacy question or request, contact [email protected].

What we collect

Account information — your email address and name, from Google sign-in or the email you enter.
Your content — the prompts, versions, and experiments you create in PromptFlip.
Usage data — API calls, agent usage, and request timestamps, used to enforce your plan's limits and keep the service reliable.
Billing information — handled entirely by our payment processor, Polar; we never see or store your card details.
Technical data — IP address and request logs, used for rate limiting and abuse prevention.

Cookies

PromptFlip sets three cookies, all strictly necessary for the service to work — none of them are for tracking or advertising:

An authentication cookie that keeps you signed in.
A short-lived cookie used only during Google sign-in, to prevent cross-site request forgery.
A preference cookie that remembers your light/dark theme.

We don't use any analytics, advertising, or third-party tracking cookies, so there's nothing beyond these three to consent to.

How we use your data

We use it to operate the service you've signed up for: authenticating you, running your prompts, enforcing your plan's usage limits, processing payments, sending transactional emails (like sign-in codes and workspace invites — never marketing), and preventing abuse.

Who we share it with

We don't sell your data. A small number of infrastructure providers process it on our behalf, strictly to run the service:

Neon — our database, hosted in the EU.
Hetzner — our application server, hosted in the EU (Germany).
Cloudflare — DNS, and encrypted database backups.
Resend — transactional email delivery, EU region.
Polar — payment processing for paid plans.
Your chosen AI provider — when you run or test a prompt, its content is sent to whichever model provider your account is configured to use (by default Groq; you can configure OpenAI, Gemini, or others instead). That provider processes the prompt to generate a response. If you configure a provider located outside the EU, this means your prompt content is transferred there for that purpose.

How long we keep it

We keep your data for as long as your account is active. If you delete your account, it's permanently removed (see below) — we don't retain it afterward except where we're legally required to (for example, financial records tied to a payment).

Your rights

You can export or delete your own data at any time, yourself, no need to ask us — go to Settings → General in the app:

Export data downloads a copy of your account, workspaces, and API keys as a file.
Delete accountpermanently deletes your account and everything in it. This can't be undone.

If you're in the EU/EEA or California, this covers your rights to access, export, and erase your personal data under GDPR and CCPA. If you'd rather we handle a request manually, or you run into any trouble with the self-serve tools, email [email protected]and we'll take care of it directly.

Children's privacy

PromptFlip is a developer tool, not directed at children, and we don't knowingly collect data from anyone under 16.

Changes to this policy

If this policy changes in a meaningful way, we'll update the date above and, for significant changes, email registered users.

Contact

Questions about this policy or your data? Email [email protected].