FLAMEZ Privacy Policy

Effective date: 27 October 2026

FLAMEZ is operated by SUNNDAY PTY LTD (ABN 28 696 784 264) ("we", "us"). This policy says, in plain English, what the app does with data. It covers only what FLAMEZ actually does — there is no boilerplate here about practices we don't have.

The short version

Your collection is kept on your phone. Signing in is optional; if you do sign in, your collection is also backed up to your FLAMEZ account so it follows you to a new phone. When you scan a card, a picture of it goes to our server so the card can be identified. Rip videos are never uploaded to us. We use analytics and crash reports that are not linked to your account, and you can turn either off in Profile. We don't run ads, we don't track you across other companies' apps or websites, and we don't sell data.

Card recognition — what leaves your phone

When you scan a card — during a FLAMEZ LIVE rip, or with ADD CARDS — FLAMEZ sends a still picture of it to our server. That picture is the card cut out of the camera frame when the app can find its edges, or the whole frame when it can't, in which case anything else in view at that moment is in it too. With it, the app sends what it could read off the card, such as the name and collector number. No account or user identity is sent with the picture.

Our server passes the picture to a card-recognition service — currently Ximilar or CardSight AI — to identify the card, and sends the answer back to your phone. Our server does not save the picture.

Our server keeps a global catalogue of every card FLAMEZ has recognised — the card's name, set, rarity and indicative price. That catalogue is anonymous by design: it records that a card was recognised, never who scanned it. No account, device or user identity is attached to it.

Rip videos and the camera

FLAMEZ LIVE films your rip on your front or rear camera — the front camera by default, so your reaction is in the video — and uses the microphone to record sound while it films. The video, and the per-card clips cut from it, are kept in the app's own storage on your phone. They are never uploaded to us and are not part of the account backup.

With FLAMEZ Pro, the full video is kept until you delete it. On the free plan, a rip is filmed only while that month still has a free Auto Clip left (three a month), and the full video is used only to make the Auto Clip. It is deleted from your phone as soon as the Auto Clip is made, as soon as you leave the rip summary without making one, or the next time you open the app if it was closed first. The Auto Clip — a short video of the rip's cards, with the FLAMEZ logo on it — stays on your phone until you delete it, and you can share or save it. Once the three free Auto Clips of the month are used, free rips are not filmed at all (the cards are still scanned as normal) and the microphone is not used. With FLAMEZ Pro, Pack Battles are filmed too, with sound; on the free plan they are not filmed and the microphone is not used for them.

You can delete a rip's video, clips and Auto Clips, a whole rip, or every rip video at once, from Your rips in the app. A deleted video is gone from your phone straight away; there is no copy of it on our servers to delete.

A rip video or Auto Clip is copied to your phone's Photos library only if you choose to save it, and once it is there it is governed by your device, not by us. If you delete the app, the videos, clips and Auto Clips stored inside it are deleted with it; copies you saved to Photos stay in Photos.

Your collection and the account backup

Your collection is stored on your phone. If you use FLAMEZ without an account, that is the only place it is stored: nothing about it is uploaded, and deleting the app deletes it.

If you sign in, FLAMEZ also backs your collection up to your account on our servers, so it is there when you sign in on another phone. The backup holds:

• the cards you own;
• your rip history — which cards you pulled and when, and a random ID for the phone that filmed each rip — but never the videos or clips;
• your hunt list and the cards you're chasing;
• your trades, including any trade-partner name you type in;
• your collector name, avatar and chosen games.

Your preferences, such as the reward-sound switch, stay on the phone, and so do the counts of your scans, Pack Battles and Auto Clips for the month.

Your account (optional)

You can use FLAMEZ without signing in. If you sign in with Apple or Google, sign-in is handled by Supabase, the service that runs our backend. We receive what your provider shares with us: an account ID, your email address (with Sign in with Apple this can be a private relay address, if you chose to hide yours) and your name, if the provider shares it. We use these to know which account is yours, to show you which account you're signed in with, and to keep your backup with it.

Deleting your account

Profile → Delete account permanently deletes your FLAMEZ account and the backup of your collection from our servers. The collection on your phone is not touched; delete the app to remove that too.

If you can't use the app, email us at hello@getflamez.com.au from the address you signed in with and ask us to delete your account, and we will.

Deleting your account does not cancel a FLAMEZ Pro subscription — cancel that in the app store you subscribed through (Apple App Store or Google Play).

Subscriptions and payments

FLAMEZ Pro is billed by the app store you subscribed through (Apple App Store or Google Play) — never by us directly. We use RevenueCat to manage subscriptions. RevenueCat receives the purchase records the store provides (which plan you're on, and when it started, renews or ends) together with an ID for you: your FLAMEZ account ID if you're signed in, or a random ID if you're not. Neither we nor RevenueCat ever see your card number.

Analytics and crash reports

• PostHog, on its EU servers — product analytics, so we can see which features are used: events such as a screen opening or a scan finishing, the app version, basic device details such as the model and operating system, which games you chose when you set up your profile, and whether this install is on a paid plan. Each install gets a random ID that is never linked to your account, name or email. Session recording is off.
• Sentry, on its EU servers — crash reports, so we can fix what breaks: what went wrong, what the app was doing just before, the app version and basic device details. Crash reports carry no name, email, account ID or screenshot.

Both are off until you say yes. The first time you open FLAMEZ, it asks whether you allow usage data and crash reports. Nothing is sent before you answer, and nothing if you choose "No thanks"; the app works the same either way. You can change your choice at any time in Profile: "Share usage statistics" for analytics and "Send crash reports" for crash reports. Once a switch is off, FLAMEZ stops sending that data from your phone, including the next time you open the app.

Neither is used for advertising or to track you across other companies' apps or websites.

Who else handles data

• Supabase — hosts our server and database, and handles sign-in.
• Ximilar and CardSight AI — identify cards from the pictures you scan.
• RevenueCat — manages subscriptions.
• Apple and Google — sign-in, if you choose it, and subscription billing.
• PostHog — analytics.
• Sentry — crash reports.

We share data with them only so they can do their part in running FLAMEZ, as described above.

What we don't do

• We don't sell your data. To anyone. Ever.
• We don't show ads or share data with ad networks.
• We don't track you across other companies' apps or websites.

How long we keep data

• Card pictures you scan: not saved by our server.
• Your account and its backup: until you delete your account.
• The anonymous card catalogue: kept, because it holds nothing about who scanned a card.

Children

FLAMEZ is a general-audience app and is not directed at children. If you believe a child has given us personal information (for example by signing in), contact us at hello@getflamez.com.au and we will delete it.

Your choices and rights

• Camera, microphone and Photos access are controlled in your device settings; the camera is only used while you're on a camera screen, and the microphone only while a rip or a Pack Battle is being filmed.
• Turn off usage statistics or crash reports, each on its own, from the Profile screen.
• Use FLAMEZ without an account, or sign out, from the Profile screen.
• Delete your account and its backup from the Profile screen.
• Delete what's on your phone by removing cards, deleting rips, or deleting the app.
• You can ask us what account data we hold about you, ask us to correct it, or ask us to delete it: hello@getflamez.com.au.

We handle personal information under the law of South Australia, Australia, including the Australian Privacy Principles where they apply. If you're not happy with how we've handled a request, you can complain to your local privacy regulator (in Australia, the OAIC).

Changes to this policy

If we change what the app does with data, we will update this policy and change the effective date at the top. A change that matters — say, a new kind of data leaving your phone — will be announced in the app, not slipped into a document.

Contact

SUNNDAY PTY LTD (ABN 28 696 784 264)
hello@getflamez.com.au