Privacy Policy

Information we handle

• Account and profile: your name, email, username, profile photo, Flare user ID, Apple or Google sign-in identifiers, and linked sign-in methods.
• Work and conversations: connections, invitations, projects, roles, messages, photos, files, reactions, typing and read state, and other content you share.
• Notifications: device push tokens, platform, routing details, and notification content such as a sender, conversation name, or message preview.
• Diagnostics: app version and platform, internal user ID, performance timings, API route patterns, status codes, request IDs, and sanitized error details.
• Support and website: information you send to support and ordinary web request data such as IP address, browser, requested page, and time of access.

Flare's PostHog configuration disables session replay and interaction autocapture. It removes messages, names, email addresses, usernames, credentials, tokens, and request or response bodies from telemetry.

How we use and share information

We use information to sign you in, operate profiles and projects, deliver conversations and notifications, provide support, enforce access controls, diagnose problems, improve reliability, and meet applicable legal obligations.

Conversation content is shared with the people in that conversation or project. We also use service providers for specific functions: Auth0, Apple, and Google for sign-in; Stream for chat; Microsoft Azure for hosting and storage; Expo, APNs, and FCM for push delivery; PostHog for privacy-sanitized diagnostics; Postmark for transactional email; and Cloudflare and Google Fonts for this website. These providers process data under their applicable contracts and privacy terms.

We may disclose information when required by law or needed to address security or abuse.

Retention and deletion

We generally keep account, project, and chat data while your account is active. Retention varies for limited diagnostic, security, email-delivery, and backup records.

You can permanently delete your account from Profile → Delete account. This removes your Flare and Auth0 account, profile, photo, connections, invitations, projects you own, memberships, push-device records, Stream profile, and your Stream messages. Shared channels and content belonging to other people remain. Some sanitized diagnostics, logs, delivery records, or backups may remain until their normal retention cycle ends or longer when required by law or needed for security.

Your choices

You can edit your username and photo, manage notification permission in your device or browser settings, and link or unlink a secondary Apple or Google sign-in method after authenticating it. Your primary sign-in method cannot be unlinked. Depending on where you live, you may also have legal rights to request access, correction, or deletion.

Children and policy changes

Flare Chat is designed for workplace communication and is not intended for children under 13. If you believe a child has provided personal information, contact us.

We may update this policy as the service or applicable requirements change. The date above identifies the latest revision.