Flank Tabletop — Privacy Policy

Last updated: 18 March 2026

Flank ("we", "us", "our") is operated by Ayirga Media. This policy explains how we collect, use, and protect your personal data when you use the Flank mobile application ("the App").

1. Data We Collect

• Account information: email address, display name, username, and profile bio you provide during registration.
• Authentication data: if you sign in with Google or Apple, we receive your name and email from the provider. We do not receive or store your password from those services.
• Location data: when you choose to set your location, we ask for a UK postcode. We never store your precise GPS coordinates. Your location is deliberately made imprecise (see Section 4).
• Content you create: armies, battle results, messages, meet requests, kudos ratings, club information, and event listings.
• Device information: push notification tokens (Expo Push) so we can deliver notifications. We do not collect device IDs, advertising identifiers, or analytics telemetry.
• Photos: army photos you choose to upload are stored in our hosting infrastructure.

2. How We Use Your Data

• To create and maintain your account.
• To show you nearby players and clubs based on approximate location.
• To enable messaging, meet requests, and battle logging between users.
• To send push notifications you have opted into (e.g. new messages, meet requests).
• To display community features such as kudos ratings, badges, and leaderboards.
• To process in-app purchases and club subscriptions.

3. Data Sharing

We do not sell your personal data. We share data only with:

• Supabase (database hosting and authentication) — EU/US infrastructure.
• Expo / EAS (push notifications and build infrastructure).
• Stripe (club subscription payments only — we do not see or store full card numbers).
• Apple / Google (in-app purchase receipt validation only).

Other users of the App can see your public profile information (display name, username, city, game systems, armies, battle record, kudos count). They cannot see your email, postcode, or precise location.

4. Location Privacy

Location privacy is a core design principle of Flank:

• We accept postcode input only; GPS coordinates are discarded immediately.
• Stored locations are deliberately offset ("jittered") by 0.5 to 1.75 miles in a random direction.
• Distances shown to other users are rounded to the nearest whole mile.
• Raw and jittered coordinates are never returned to any client device — only rounded distance values.
• Jitter offsets are refreshed monthly.

5. Data Retention

We retain your data for as long as your account is active. If you delete your account, all personal data (profile, armies, battle results, messages, kudos) is permanently deleted within 30 days. Anonymised, aggregated statistics may be retained.

6. Your Rights

Under UK GDPR, you have the right to:

• Access, correct, or delete your personal data.
• Export your data in a portable format.
• Withdraw consent for optional processing (e.g. push notifications).
• Lodge a complaint with the ICO (ico.org.uk).

To exercise any right, email privacy@ayirga.media.

7. Children

Flank is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe a child has provided us data, contact us and we will delete it promptly.

8. Security

We use industry-standard measures including encrypted connections (TLS), row-level security on our database, and secure token storage on your device. No system is 100% secure, but we take reasonable precautions to protect your data.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via the App or email. Continued use after changes constitutes acceptance.

10. Contact

Ayirga Media
Email: privacy@ayirga.media