Privacy Policy

Last updated 1 July 2026

Flaggio (“Flaggio”, “we”, “us”) lets you assign a country to every day of your year and share beautiful cards from it. The days you log are a record of where you have been — that is sensitive personal data, and we treat the whole service accordingly. This policy explains what we collect, why, and the rights you have over it.

Flaggio is operated by Rafael Broering de Souza, an individual established in Spain, who is the data controller for the information described here. Questions, requests, or complaints: ffs.rafael@gmail.com.

What we collect

Account

Your email address and the sign-in method you use (email + password, Google, or Apple). Passwords are stored only as a salted hash, never in plain text.
Your handle and display name (shown on your share cards).
Your date of birth, collected at sign-up. It anchors age-based statistics and sets the earliest date you can log, so the calendar can’t hold a day before you were born.

Your travel data

The country (and optional city) you assign to each day.
Your trips (country and date range) and your residence history (“where I live”, effective-dated).
Your country wish-list (goals) and, if you use friends, your friendships and per-friend sharing choices.

Technical

Short-lived sign-in tokens (access and refresh); refresh tokens are stored hashed, never in clear text.
Basic error diagnostics. We log account identifiers only — never your email, tokens, or day-level location data.

Why we use it (legal bases)

To provide the service — storing your calendar, computing your stats, and rendering your cards. This is performance of our contract with you.
Security and abuse prevention — our legitimate interest in keeping accounts safe.
Optional features you switch on — e.g. trip reminders — on the basis of your consent, which you can withdraw at any time.

We do not use your data for advertising, and we never sell it. There are no ads in Flaggio.

What others can see

Nothing is public. There are no public profiles or public links — only friends you've added can see anything about your account, and even then only your aggregates (stats, country list, map), not your day-by-day calendar, unless you turn on that per-friend toggle. Rendered share images live at unguessable addresses meant only to be shared directly with people you choose.

Where your data lives (processors)

We host in the EU wherever possible and use a small set of service providers to run Flaggio:

Neon — PostgreSQL database (Frankfurt, EU).
Fly.io — application servers (Frankfurt, EU).
Cloudflare R2 + CDN — storage and delivery of rendered cards.
Vercel — web hosting.
Resend — sending email-confirmation codes.
Expo — mobile builds and (if you opt in) push notifications.
Sentry — error monitoring (with personal-data scrubbing).

Where a provider processes data outside the EU/EEA, that transfer is covered by an adequacy decision or the EU Standard Contractual Clauses.

How long we keep it

We keep your data for as long as your account exists. Email-confirmation codes expire within 15 minutes. When you delete your account, every row we hold for you — days, trips, goals, residences, friendships — and every rendered card is permanently erased.

Your rights

Under the GDPR you can, at any time:

Access and export your data — Settings → Account & data → Export my data (JSON) gives you a complete copy.
Delete your account and all associated data — Settings → Account & data → Delete account.
Rectify your details — edit your profile, residence, and any day directly in the app.
Object to or restrict processing, and withdraw consent for optional features.
Lodge a complaint with your local data-protection authority — in Spain, the Agencia Española de Protección de Datos (AEPD, aepd.es).

Security

All traffic is encrypted in transit (HTTPS/HSTS). Access is scoped to your account on every request; one user can never reach another’s data. Tokens are short-lived and rotated, and we keep personal data out of our logs.

Children

Flaggio isn’t directed at children. You must be at least 16, or the minimum digital-consent age in your country, to use it.

Changes

If we change this policy we’ll update the date above and, for material changes, notify you in the app.