Privacy Policy

Last updated: July 11, 2026

1. Who we are

FlatStrike is operated by the FlatStrike developer team. You can contact us at developer@flatstrike.com.

This policy applies to the FlatStrike mobile app, the FlatStrike backend API, and related FlatStrike web pages such as the account-deletion page.

2. Data we collect

Account and authentication data

• Email address, Firebase user ID, display name, and optional avatar URL.
• Authentication provider information from Firebase Authentication, including email/password, Google sign-in, and Sign in with Apple.
• For Sign in with Apple, a refresh token may be stored server-side only so FlatStrike can revoke the Apple grant if you delete your account.

Search and listing data

• Search profiles, including city, districts, postal codes, price and size filters, room filters, property type, rental-status filters, and notification settings.
• Saved or reviewed listings, review decisions, personal notes, application status, viewing dates, and timestamps.
• Listing URLs and listing metadata needed to display, deduplicate, and track listings.
• Shared-listing link metadata if you create or open a FlatStrike listing link.

Location data

• If you choose to enable location in Strike Mode, FlatStrike accesses your device location while the app is in use to show your position on the map and your distance from a listing.
• The first location successfully captured for your account is rounded to four decimal places (roughly 10 metres) and saved once with its reported accuracy and the time it was saved. This initial snapshot is linked to your account and may be used to improve future listing recommendations.
• The saved initial snapshot is not replaced by later locations. In later Strike sessions, a fresh location may be used in app memory for the live map and distance only; it is not uploaded to or stored by FlatStrike and is discarded when the session ends.
• FlatStrike does not access location in the background and does not create a location history.

Easy Apply profile and templates

• Email address, name, salutation, phone number, street, house number, postal code, city, and age.
• Household and financial/application details, including home-owner status, income type, monthly net income, number of adults and children, and WBS eligibility fields such as WBS availability, validity date, type, and room count.
• Easy Apply message templates and application-job metadata, such as the listing URL, site, application status, timestamps, and error or success evidence needed to show progress and troubleshoot failed submissions.

Uploaded documents

• Documents you upload for application workflows, currently including WBS-related documents.
• Document metadata such as filename, content type, file size, purpose, creation time, and deletion time.
• The uploaded file contents themselves, stored in FlatStrike's backend database for app functionality.

Device, notification, usage, and diagnostic data

• Firebase Cloud Messaging registration tokens, platform, and timestamps used to send push notifications.
• Notification delivery and read/open records, including batch IDs and sent/opened timestamps.
• Firebase Analytics data such as app interactions, screen views, Firebase app instance identifiers, and the authenticated Firebase user ID for product analytics.
• Crash and diagnostic data collected through Firebase/Google tooling to understand and fix app issues.
• Feedback or support messages you submit to us, such as feature requests or source suggestions.

Data we do not collect

• We do not collect payment card data, purchase history, or bank-account details.
• We do not collect or store your third-party rental-portal passwords.
• We do not use your data for third-party advertising or cross-app tracking.

3. How we use data

• To authenticate you and keep your account secure.
• To provide the app's core features: search profiles, listing review, saved listings, pipeline tracking, notifications, shared links, document upload, and Easy Apply.
• To fill rental-application forms when you deliberately use Easy Apply.
• To remember what you have reviewed or applied to, so your pipeline stays consistent across sessions and devices.
• To show your live position and listing distance in Strike Mode, and to use the single saved initial location snapshot to improve future recommendations.
• To send push notifications about relevant listings and app activity if you enable notifications.
• To measure product usage, diagnose crashes, fix bugs, and improve reliability.
• To process account-deletion requests and prevent deleted account identities from being recreated.

4. Sharing and third-party services

We do not sell your personal data. We do not use your data for third-party advertising or tracking.

We share or process data in the following limited ways:

• Firebase and Google services. We use Firebase Authentication, Firebase Cloud Messaging, Firebase Analytics, and Google/Firebase infrastructure to authenticate users, send notifications, analyze app usage, and run the backend service. The app also uses Google Maps SDK features for map display.
• Apple. If you use Sign in with Apple, Apple authenticates your Apple ID. FlatStrike may store a server-side Apple refresh token only so we can revoke the Apple grant if you delete your account.
• Rental portals and landlords. When you use Easy Apply, FlatStrike fills and submits a rental enquiry or application to the third-party portal on your behalf, using the profile/template data you chose to provide. Depending on the listing source, this happens either on your device (in the in-app browser, using your own portal session) or on FlatStrike's backend servers, which submit the application to the portal for you. In both cases this discloses your personal, household, and financial application data — and, where the application form requires it, your uploaded documents — to that portal, landlord, property manager, or recipient.
• Uploaded documents. Uploaded documents are stored for FlatStrike app functionality and are not sold. When you use Easy Apply on a listing source whose application form requires a document (for example a WBS certificate), FlatStrike attaches and submits the relevant uploaded document to that portal on your behalf as part of the application.
• Legal and safety. We may disclose information if required by law, to protect users, or to protect FlatStrike's rights and service security.

Third-party rental portals loaded inside the in-app WebView may set their own cookies and process data under their own privacy policies. FlatStrike does not collect your portal credentials from those WebView sessions.

5. Storage and security

• FlatStrike stores account and app data on its backend systems associated with your authenticated Firebase account.
• The initial location snapshot is stored with your account as rounded coordinates, reported accuracy, and save time. It is not replaced and is retained until your account is deleted.
• Uploaded document files are stored in the backend database with access limited to app workflows that need them.
• Authentication is handled by Firebase. FlatStrike does not store your password.
• Communication between the app and FlatStrike's API uses HTTPS.
• We use administrative, technical, and access-control measures intended to protect account data, but no system can be guaranteed to be perfectly secure.

6. Account deletion and retention

You can delete your account in the app:

1. Open the FlatStrike app.
2. Go to Settings.
3. Tap Delete Account and confirm.

If you no longer have the app installed, you can request deletion at https://flatstrike.com/delete-account/. Email requests are processed within 30 days after we verify account ownership.

When your account is deleted, FlatStrike deletes your user account row and account-related rows, including search profiles, Easy Apply templates, device tokens, notifications, saved/reviewed listing rows, suggestions, Easy Apply jobs, uploaded documents, and the saved initial location snapshot.

We retain an irreversible deletion tombstone keyed by your Firebase user ID to prevent the same account identity from being recreated after deletion. Shared global listing records may remain in FlatStrike's listing database, but FlatStrike user provenance fields such as source user, details source user, and field provenance references are removed.

If you used Sign in with Apple, FlatStrike also attempts to revoke the Apple grant during account deletion. Data you already submitted to third-party rental portals, landlords, or property managers is outside FlatStrike's systems and must be handled with that recipient directly.

7. Your choices

• You can update your profile, search preferences, notification preferences, templates, and uploaded documents in the app.
• You can turn off push notifications in the app or in your device settings.
• You can decline or revoke location permission in your device settings. Revoking permission stops future device-location access but does not erase the initial snapshot already saved with your account; deleting your account removes it.
• You can sign out at any time. Signing out does not delete your account; use Delete Account for permanent deletion.
• You can contact us to ask questions about your data or request help with deletion.

8. Children

FlatStrike is not directed to children. If you believe a child has provided personal data to FlatStrike, contact us so we can review and delete it where appropriate.

9. Changes to this policy

We may update this policy when FlatStrike's features, data practices, or legal requirements change. The "Last updated" date at the top of this page shows when the policy was last changed.

10. Contact

Questions or requests can be sent to developer@flatstrike.com.