Security
A plain-language look at how FlipQuix protects your information, and specifically what we do.
How we protect information
Connections between your device and FlipQuix are encrypted in transit using HTTPS.
Private application credentials -- API keys, our database's administrative key, and marketplace integration secrets -- are kept on the server and are never sent to your browser.
Our database uses access-control rules designed to separate one user's information from another's, so a signed-in account can only read and change its own data through the app's normal features.
Payments
Payment information is processed by Stripe, a payment processor used by many major companies.
FlipQuix does not directly store complete payment-card numbers.
Photos and AI processing
When you scan an item, its photos are sent to Anthropic's Claude API to identify the item and estimate its value. Saved photos are accessed through controlled storage permissions or time-limited signed links, not public URLs.
Account protection
Sign-in and password handling are managed through Supabase Authentication rather than a custom-built system we maintain ourselves.
What users can do
- Use a strong, unique password for your FlipQuix account.
- Update your password any time from Profile → Security & Privacy.
- Contact us if you notice anything that looks like unauthorized account activity.
Report a security concern
If you believe you've found a security issue, email security@flipquix.com with details. We don't yet have a formal bug-bounty program, but we take every report seriously.
No service can guarantee absolute security
We work to protect your information using the practices above, but no internet-connected service -- FlipQuix included -- can promise perfect or unbreakable security.
See also our Privacy Policy.