Privacy Policy

Effective date: February 6, 2026

FlyerForge AI ("we", "us", or "our") operates the website flyerqr.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. Please read this policy carefully. By accessing or using the Service, you agree to the terms of this Privacy Policy.

1. Information We Collect

Account Information

When you sign in using Firebase Authentication, we collect the information provided by your authentication provider, which may include:

• Email address
• Display name
• Profile photo URL
• Authentication provider identifier

Flyer Data

When you create and save flyers, we store the content and configuration of your designs, including text layers, background images (both uploaded and AI-generated), QR code destination URLs, and layout settings.

QR Scan Analytics

When someone scans a QR code created through our Service, we collect analytics data associated with that scan, including:

• Timestamp of the scan
• IP address of the scanning device
• User-agent string (browser and device information)
• Total scan count per QR code

Usage Data

We automatically collect certain information when you access the Service, including your browser type, operating system, pages visited, time spent on pages, and other diagnostic data. This information helps us understand how the Service is used and how we can improve it.

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Authenticate your identity and manage your account
• Store and serve your flyer designs
• Generate QR scan analytics and display them in your dashboard
• Process AI image generation requests on your behalf
• Communicate with you about the Service, including support requests
• Monitor usage patterns to improve performance and user experience
• Detect, prevent, and address technical issues or abuse

3. Data Storage

Your data is stored using Firebase and Google Cloud infrastructure. Firebase provides our authentication, real-time database, and cloud storage services. All data is stored on servers operated by Google and is subject to Google's security practices and infrastructure protections. We rely on Google Cloud's industry-standard encryption for data at rest and in transit.

4. Third-Party Services

We use the following third-party services to operate and enhance the Service:

Google Firebase

We use Firebase for authentication, data storage, hosting, and cloud functions. Your account information, flyer data, and analytics are stored within Firebase. Firebase's use of your data is governed by Google's Privacy Policy.

OpenAI

We use OpenAI's API (gpt-image-1) to generate flyer visuals. When you request an AI-generated image, your text prompt is sent to OpenAI for processing. We do not send your personal account information to OpenAI. OpenAI's handling of data is governed by their Privacy Policy.

Pollinations

We may use Pollinations as an alternative AI image generation provider. Similar to OpenAI, only the text prompt you provide is sent to this service. No personal account data is shared with Pollinations.

5. Cookies

The Service may use cookies and similar tracking technologies to maintain your authentication session and remember your preferences. Firebase Authentication uses browser storage (including cookies and local storage) to persist your sign-in state. You can configure your browser to refuse cookies, but doing so may prevent you from using certain features of the Service.

6. Data Retention

We retain your account information and flyer data for as long as your account is active or as needed to provide the Service to you. QR scan analytics data is retained for as long as the associated flyer exists in your account. If you delete your account, we will delete or anonymize your personal data within a reasonable timeframe, except where we are required to retain it by law.

7. Your Rights

You have the following rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you by contacting us at the email address below.
• Correction: You can update your account information through your authentication provider (e.g., your Google account profile).
• Deletion: You can request deletion of your account and all associated data, including your flyers and QR scan analytics, by contacting us. We will process deletion requests within 30 days.
• Data Portability: You can export your flyer designs as PNG images at any time through the Service.

8. Children's Privacy

The Service is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal data from a child under 13 without verification of parental consent, we will take steps to delete that information promptly. If you believe we may have collected information from a child under 13, please contact us immediately.

9. Security

We take reasonable measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Effective date" at the top of this page and post the revised policy on the Service. We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact The Concept 99 Group at:

support@ideaequity.ai