The short version: theFLIP stores the deal information you type in and the files you upload, and shares it only with the service providers that make the app run — hosting, database, email, AI and property-data providers, all named below. We use no analytics, no advertising and no tracking, we set no cookies of our own, we never sell or rent your information, and we never move money between users. One thing you should know before you rely on us: a published JV report link can be opened by anyone who has the URL, without logging in, for as long as you leave it switched on.
Effective date: [EFFECTIVE DATE]
Last updated: [EFFECTIVE DATE]
Please read it. It describes what actually happens to your information — not a template of what a company like ours might do — and it is current as of the date above.
theFLIP is a deal-tracking tool for fix-and-flip real estate investors. It is operated today by theFLIPre LLC, a Nebraska limited liability company ("theFLIP," "we," "us").
Mailing address: 200 S 21st St, Ste 400A, Lincoln, NE 68510. Email: info@theflipre.com.
This policy covers theflipre.com, the investor app at theflipre.com/app, the contractor portal, the help pages, and the shared JV report pages.
The Service is built for and directed at business users in the United States. It is not marketed or offered to individuals in the EEA, the UK or Switzerland, and we do not intend to provide it to them. If you are outside the United States, please do not use it. It is intended for people 18 or older, and we do not knowingly collect information from minors. If you believe a minor has given us information, email info@theflipre.com and we will delete it.
theFLIP never moves money between users. It is not a bank, lender, escrow agent, money transmitter, or payment processor. Draws, payments and payoffs recorded in the app are records of money that moved somewhere else — a wire, a check, an ACH you sent outside theFLIP. Because of that, we have no reason to collect bank or card details from you, and we don't.
No paid plans are sold today; the only plan available is the free plan. When paid plans launch, payments will be handled by a third-party payment processor. Card details will go directly to that processor and we will not receive or store your full card number. We will receive limited billing information such as the plan you chose, whether payment succeeded, and a card identifier such as brand and last four digits. We will name the processor in this policy before any charge is made. Your subscription fee is the only money that will ever flow to theFLIP.
We do not use your deal data or your contacts to market theFLIP to anyone, and we do not build advertising profiles. We do not use your data to train AI models, and our AI provider does not use API content to train its models under the terms that apply to our account. We do not control their policies; their current terms are linked below.
We share information only with the providers that make theFLIP work, and only as needed to provide the Service. We do not sell, rent, or share your personal information for anyone else's advertising or marketing. Our current providers:
When paid plans launch, a payment processor will be added to this list and this policy will be updated before any charge is made.
We may also disclose information if we are legally required to, or to protect our rights, our users, or the public. If theFLIP is ever sold, merged or reorganized — including the conversion of the business into an LLC — your information may transfer with it, and this policy will continue to apply until you are told otherwise.
We operate the Service from the United States and use our database, storage and hosting providers' US infrastructure. Requests your browser makes directly to Google (fonts, maps), jsDelivr and Cloudflare are served by those companies' own global networks and may be handled outside the United States under their policies.
Two features use AI, and both send your content to Anthropic's API through a server-side function on our host:
Anthropic does not use API content to train its models under the terms that apply to our account, and retention of that content is governed by Anthropic's own terms and policy rather than by a number we invent here. We do not use AI to make automated decisions about you or your account. AI output in the app is a suggestion for you to review and accept or reject — it is not an appraisal, valuation or advice, and it can be wrong. Do not upload someone else's sensitive documents to the receipt scanner — no IDs, tax forms, bank statements, or anything with an SSN or account number on it.
theFLIP is built for people who work with partners. If you own a deal, you decide who else sees it:
We act on your instructions here. We don't decide who gets access, and we aren't a party to your relationship with your partners, contractors or bookkeeper. You can remove a JV partner's, contractor's or bookkeeper's access yourself in the app. Published JV report links are the exception — see immediately below.
You can generate a shareable JV report link (a jv-report.html address with an ID in it). Anyone who has that URL can open the report without logging in. Treat the link itself as the key. It can be forwarded, pasted into an email thread, or saved by anyone you send it to. The report shows a snapshot of that deal's numbers, and that snapshot is rewritten every time you save the deal — so an old link keeps showing current numbers.
Two limits you need to know, because they are true today and we would rather say so than let you assume otherwise:
Only publish a report when you are comfortable with the deal numbers in it — address, prices, profit, JV splits — being outside your control.
When you enter someone else's contact details — your contractor, lender, agent or partner — that is your decision and your record. We hold it and use it only to run the Service for you, on your instructions. You are responsible for having a proper basis to enter it, for any notice or consent your situation requires, and for answering your own contacts about their information.
We never use your contacts to market theFLIP to them. The only messages that go to them are ones you trigger — an invitation to a contractor portal, a notification about a draw you acted on, a JV invite you sent.
If you're the person in someone else's contact list: the theFLIP customer who added you controls that record. Ask them first. You can also email us at info@theflipre.com and we will route your request to them or act on it directly where we can.
One nuance worth stating plainly: if you are a contractor, JV partner or bookkeeper who creates your own theFLIP account, your account information — your email, password and profile — is ours to answer for and you can ask us about it directly. The deal data you can see belongs to the owner who shared it, and requests about that go to them.
There is also an internal lead-tracking tool (CRM) that holds names, phone numbers and email addresses of property owners and sellers. It is restricted to the operator's own account today. If we ever make it available to customers, we will update this policy first, because it is another place where a user would be entering other people's information.
If you're viewing a deal as a JV partner, contractor, bookkeeper or through a public report link, the deal owner decides what you see and for how long. We can't change or expand that access for you, and we can't delete the owner's deal records at your request. For anything about the deal itself, talk to the owner. For your own account information, email us.
We do not use analytics. We do not use advertising or tracking pixels. Our own code sets no cookies. There is no Google Analytics, no Meta pixel, no session recording, no heatmaps, no A/B testing tool. Your sign-in session is kept in your browser's local storage by our authentication provider, not in a cookie we set.
We do no tracking to begin with, so there is nothing for a "Do Not Track" or Global Privacy Control signal to switch off. We honor those signals in the only way that matters: we never started.
We do not permit anyone to track you across other websites through theFLIP, and we receive nothing back about you from anyone who could. But we should be straight with you: because we load fonts from Google and JavaScript libraries from jsDelivr and cdnjs, and because address autocomplete talks to Google Maps, those companies receive your IP address, browser details and the time of the request whenever a page loads or you type an address. We cannot rule out that they associate those requests with other activity they see under their own privacy policies, and Google's mapping and font services may set their own browser storage that we do not control. Their policies are linked in the provider list above.
We do not share personal information with third parties for those third parties' own direct marketing purposes, so there is nothing to request under California's "Shine the Light" law.
theFLIP can be installed to your phone or desktop as an app and works offline. When you do that, deal data and your sign-in state are cached on the device so the app keeps working without a connection. That cached data can remain on the device after you sign out until the browser or app storage is cleared. Be careful installing theFLIP on a shared or borrowed device, and clear the browser's site data if you do.
What is true:
What is also true, and less comfortable: uploaded files are currently stored in buckets that are readable by anyone holding the file's URL, without a login. We do not publish or list those URLs, but they are not access-controlled. Treat photos, receipts, invoices and documents you upload accordingly, and don't put sensitive personal information in them. We are aware of this and intend to move to private storage with short-lived links; we will update this section when it is actually done, not before.
What we will not claim: we have no SOC 2 report, no ISO certification, no formal audit program, no dedicated security staff, and no cyber insurance we're advertising to you. theFLIP is run by one person on reputable infrastructure providers. Our providers' certifications are theirs, not ours. No system is perfectly secure, and we can't guarantee a breach will never happen.
If a breach affecting your personal information occurs, we will notify you and any regulator as required by applicable law, including Nebraska's data breach notification law, and we will tell you what we know as soon as we reasonably can.
Most of this you can do yourself in the app:
What you cannot do yourself today, stated plainly:
Those self-serve tools are how you get your data out. We do not produce custom extracts or bulk exports on request, so export what you need while your account is active.
For a correction you cannot make yourself, or to delete your whole account, email info@theflipre.com.
We're a small business, and the thresholds in the California Consumer Privacy Act do not currently apply to us, so we're not going to write you a list of CCPA rights and pretend they bind us. What is true regardless: we do not sell your personal information and we do not share it for cross-context behavioral advertising, and if you ask us for access, correction or deletion, we'll handle it as described above no matter which state you're in. Nebraska's Data Privacy Act currently exempts businesses of our size, with the exception that consent is required before selling sensitive data — and we sell no data of any kind.
If you think this policy doesn't match what we actually do, tell us at info@theflipre.com. We'd rather fix it than argue about it.
When we change this policy, we update the effective date at the top and post the revised version at this address. If a change is material — new categories of information, a new provider that receives your data, or a new use — we will email the address on your account and show a notice in the app at least 30 days before it takes effect. Changes take effect on the stated date, and continuing to use theFLIP after that means you accept the updated policy. If you don't, you can export your data and close your account. Want to see the version this replaced? Email us and we'll send it.
Email info@theflipre.com. That's the address for privacy questions, access and deletion requests, deleting a published JV report link, requests on behalf of someone whose contact information a customer entered, and notice of anything in this policy you believe is inaccurate. A real person reads it.