Flipp Health Terms of Use and Privacy Policy

Draft version 0.1. Waiting for review by counsel.

The short version

Flipp is a free wellness tracker. It shows patterns. It is not medical care.
You must be 18 or older and live in the US.
Your check-ins stay on your phone. Optional backups go to your own Google Drive, only if you turn them on. Flipp never sees your health data.
Testing Flipp includes sharing anonymous usage counts (never your check-ins). That is how we show people use it.
We never sell your data, show ads, or use outside trackers.
If you may be in danger, call or text 988, or call 911.

Terms of Use

T1. Who we are. Flipp Health ("Flipp") is made by Xtainable LLC, an Ohio company in Cincinnati, Ohio ("we", "us"). These terms are an agreement between you and us. By tapping Accept, you agree to them. If you do not agree, do not use Flipp.

T2. Who can use Flipp. You must be at least 18 years old and live in the United States. You need one account, in your own name. Keep your password and 4-digit PIN to yourself. You are responsible for what happens under your account.

T3. Flipp is not medical care. Flipp is a wellness tracker. It shows patterns in what you log. It does not find, name or fix any health problem, and it is not a medical device. Scores, insights, meal estimates and "Questions worth asking" come from your own patterns. They are not medical advice. Always talk with a doctor or other qualified professional about your health, and never delay or ignore their advice because of something in Flipp. If you may be in danger or are thinking about harming yourself, call or text 988 (Suicide and Crisis Lifeline) or call 911 right away. Flipp does not watch for emergencies and cannot send help.

T4. Free for beta testers. Flipp's beta is free. Everyone who joins during the beta keeps free access to Flipp for life, with no conditions. If we ever add paid plans, they will not apply to beta testers.

T5. Your license and the rules. We give you a personal, non-transferable right to use Flipp for your own wellness tracking. You agree not to:

copy, sell, rent or resell Flipp or any part of it
reverse engineer, decompile or try to extract Flipp's code, scoring logic or rules, except where the law allows it
scrape Flipp, run bots against it, or overload or attack our servers
get around the app lock, sign-in, or any security feature
sign up for someone else, or use Flipp if you are under 18 or outside the US
use Flipp to break the law or to harm anyone

T6. Our property. Flipp's name, the Flipp character and face, the arrow circle logo, the app's design, code, scoring logic and written content belong to Xtainable LLC and are protected by law. These terms do not give you any rights in them beyond T5.

T7. Your check-ins and your feedback. Your check-ins, notes, photos and meals are yours. They stay on your phone (see the Privacy Policy). If you send us feedback, ideas or a Secure Screenshot, you let us use them to improve Flipp, free of charge, without owing you anything. We may credit an idea as "Idea from a tester" without your name.

T8. Early features. Flipp is in beta. Some features are marked "Early feature", including meal photo recognition and Oura, WHOOP and Fitbit sign-in. They may use more battery, make mistakes, change, or be removed. Device data from those services comes to your phone only. Your use of those services is also covered by their own terms.

T9. Ending your use. You can stop at any time. "Delete everything from app" removes Flipp's data from your phone and your anonymous ID. "Delete cloud backups" removes Flipp backups from your Google Drive. To close your account, use account settings or email us. We may pause new signups, or suspend or remove an account that breaks these terms or puts others at risk. Sections T3, T6, T7 and T10 to T13 still apply after your use ends.

T10. No promises. Flipp is provided "as is" and "as available". To the fullest extent the law allows, we make no warranties of any kind, including that Flipp will be accurate, always available, error free, or fit for a particular purpose. Your phone holds your data. If your phone is lost, reset, or clears web-app data (iPhone can do this after weeks without use), data not backed up may be lost.

T11. Limit of liability. To the fullest extent the law allows, Xtainable LLC is not liable for indirect, incidental, special, consequential or punitive damages, or for lost data, lost profits, or health decisions made using Flipp. Our total liability for any claim about Flipp is limited to US $100. Some states do not allow these limits, so some may not apply to you.

T12. Indemnity. If you break these terms or the law while using Flipp, and someone brings a claim against us because of it, you agree to cover our reasonable costs from that claim.

T13. Law and disputes. Ohio law governs these terms, without regard to conflict of law rules. Any dispute goes to the state or federal courts in Hamilton County, Ohio, and you and we agree to their jurisdiction. Either side may bring a claim in small claims court instead. Before filing, please email us so we can try to fix it within 30 days.

T14. Changes. We may update these terms. If a change matters, we will show it in What's new before it takes effect and ask you to accept the new version. Flipp records on your phone which version you accepted and when.

T15. Contact. Xtainable LLC, Cincinnati, Ohio. Email data_g@xtainable.com.

Privacy Policy

P1. The short version. Your check-ins stay on your phone. Optional backups go to your own Google Drive, only if you turn them on. Flipp never sees your health data. We do not sell data, show ads, or use outside trackers.

P2. Who we are. Xtainable LLC, Cincinnati, Ohio, makes Flipp Health and is responsible for this policy. Questions: data_g@xtainable.com.

P3. What stays on your phone. These live only on your phone, encrypted, and never reach our servers: check-ins, answers, notes (typed or spoken) and photos; meals, food groups, drinks and meal photos; what you track, your questions and reminder times; your birthday, name, language, accessibility and theme choices; your PIN (stored only as a scrambled hash) and Face ID or fingerprint setting; Flipp Score history, patterns, insights and badges; data from Oura, WHOOP or Fitbit, if you connect them. Meal photo recognition, when you turn it on, runs on your phone. Notes are checked on your phone for words that suggest you may be in crisis, so Flipp can show the 988 line. Nothing about that check is sent to us.

P4. What reaches our servers. Only what Flipp needs to work, kept in separate stores that are never joined. Account: email, sign-in method, scrambled password, signup date, email list choice. Reminders: a random device ID, push address, phone type, time zone, sleep hours, reminder times and a "checked in" signal, with no answers and no condition names. Anonymous counts: totals such as check-ins per day and setup steps finished, under a separate random ID never linked to your email or device. Crash reports: app version, phone type, screen name, error code and last screens visited, with no health content. Feedback: what you type, an optional Secure Screenshot with personal and health details blacked out on your phone, app version, screen, and your account email so we can reply. Reminder text on your lock screen never names a condition.

P5. What we never do. We never sell or rent your data. We never share it for ads or use ad trackers or outside analytics. We never use your data to train AI models. We never receive your health data.

P6. Backups and security. Backups are off until you turn them on. A backup is your full Flipp data, encrypted on your phone with a key made from your 4-digit PIN, then saved to your own Google Drive or to a file you keep (including iCloud through Files). We cannot open it. A 4-digit PIN has only 10,000 options, so we slow down every guess on purpose, but keep the file private. Lock your phone with a passcode, and back up often: iPhone can clear web-app data after weeks without use. No system is perfectly secure, and we will tell affected users as the law requires if a breach happens.

P7. Sharing while you test. Being a beta tester includes sharing anonymous usage counts: badges earned, check-in counts, how many questions a check-in has and how many you answered, rounded times for how long check-ins and screens take, and whether your Flipp Score is going up or down. These are totals only, never your answers, notes, photos or condition names, and they are not linked to your email or device. In setup you also tell us your age and state (required), and, if you choose, your gender, race and ethnicity, and veteran status (each optional, each with "Prefer not to say"). These are shared only as ranges and categories. Any group smaller than 5 people is shown only as "fewer than 5". If you do not want to share usage counts, you can stop testing at any time (T9).

P8. Who helps us run Flipp. Vercel hosts the app files and sees your IP address when you load the app. Our own server, reached through Cloudflare, stores the items in P4. Google provides sign-in, the Google Drive backups you choose, and sends our emails. Apple and Google deliver push reminders. Oura, WHOOP and Fitbit, only if you connect them; their data flows to your phone, not to us.

P9. Legal requests and company changes. We may disclose server data in P4 if the law requires it, or to protect someone's safety. We cannot hand over data we do not have, including your check-ins. If Xtainable LLC is sold or merged, P4 data may transfer, and this policy's promises go with it.

P10. How long we keep things. Account details: until you close your account. Reminder data: until you delete Flipp's data or stop using reminders for 90 days. Anonymous counts: raw events are dropped once added to daily totals. Crash reports: 90 days. Feedback: 2 years.

P11. Your choices. Delete everything from app. Delete cloud backups. Export an encrypted Flipp file. See and edit what Flipp knows about you in Transparent AI. Email us to close your account or ask what we hold; we answer within 30 days. Unsubscribe from emails in one tap and turn reminders off in Settings.

P12. Adults only. Flipp is for people 18 and older. Signup stops anyone who enters a birthday under 18.

P13. Where data lives. Server data in P4 is stored in the United States. Flipp is offered only to people in the US.

P14. US state privacy rights. Depending on your state, you may have the right to know, access, correct, delete and get a copy of your personal data, and to appeal our answer. We do not sell personal data or use it for targeted ads. Email us to use any right. We will not treat you differently for using them.

P15. Consumer health data. We designed Flipp so consumer health data stays on your phone and is not collected by us. If that ever changes, we will ask for your separate consent first.

P16. How Flipp's insights work. Flipp's scores and insights are made on your phone by plain rules you can read in Transparent AI. They are wellness information only.

P17. Connected devices. If you sign in to Oura, WHOOP or Fitbit, their data comes to your phone and stays there. You can disconnect any time in Settings.

P18. Messages from Flipp. Account emails (like your 6-digit code) are needed to use Flipp. Emails with important updates and announcements are on to start; untick the box at sign-in or unsubscribe in one tap any time. Push reminders only if you allow them.

P19. Changes and contact. If we change this policy in a way that matters, we will show it in What's new and ask you to accept before it takes effect. Contact: Xtainable LLC, Cincinnati, Ohio, data_g@xtainable.com.