Privacy policy

Who we are

Flizy is a chat wallet at flizy.app. You create an account on the site, then send and receive crypto from WhatsApp or Telegram to people you already trust. This policy describes personal data we hold when you use the site, the bots, and linked platforms.

What we collect

• Email and verification codes. Registration email, optional extra emails, and short-lived codes that prove you control that inbox.
• Phone number. Only when you prove it in WhatsApp or Telegram (contact share or equivalent). We do not accept a typed number as proof.
• Platform identities. If you link GitHub, Discord, X, or TikTok: the immutable user ID (routing key) and the display handle. We do not read your posts, messages, or followers on those platforms.
• Flizy username and display name. Username is your public invite and pay identity. Display name is optional.
• Wallet and history. Your Flizy agent-wallet address, trusted destination addresses you save, send / claim / swap records, and related transaction hashes.
• Session cookies. A logged-in session cookie on the site. If you open an invite or a claim that carries an invite, a short invite cookie so signup can attribute you once.
• Chat link. One-time link codes and the channel bind (WhatsApp or Telegram chat id) after you redeem a code.

TikTok data

When you choose to link TikTok, Flizy requests the TikTok Login Kit scope user.info.basic. From that grant we read only:

• your TikTok user ID, stored as the routing key for claims sent to that account
• your TikTok display handle, stored for display on Flizy

We do not post to TikTok. We do not read your videos, comments, likes, DMs, or follower lists. We do not use TikTok data to advertise. Unlinking TikTok on Account removes that bind from your Flizy account. Pending claims already addressed to that TikTok user ID stay addressed to that ID until claimed or cancelled.

Why we hold it

• Create and sign you into the account.
• Prove email and phone so claims pay out to the right person.
• Route a send or claim to a GitHub, Discord, X, or TikTok identity you linked.
• Keep trusted destinations and an unlock PIN under your control.
• Attribute an invite once, and count it only after onboarding, a verified phone, and a confirmed Flizy transaction.
• Operate the product, debug failures, and stop abuse.

Who it is shared with

We pass account data only to the services that run Flizy: Supabase (database) and our email sender for verification codes. We do not sell it. We do not use advertising pixels.

How long we keep it

• Verification codes expire in minutes and are then useless.
• Session cookies last until you sign out or they expire.
• Invite cookies last up to 14 days, or until they are used at signup.
• Account, username, trusted addresses, and history stay while the account exists.
• A phone that has already produced an invite credit is remembered so the same number cannot mint a second credit after unlink. That record is not a live bind.
• On-chain records last as long as the chain does. We cannot erase them.

Deleting your account

You can unlink WhatsApp, Telegram, GitHub, Discord, X, and TikTok yourself on Account. You can remove extra emails and trusted addresses there too.

There is no self-serve full-account delete in the app today. Message us on X at @Flizyapp from an account you can tie to the Flizy email. We will delete or irreversibly anonymize account records we control (profile, emails, phone binds, platform IDs, sessions, invite attribution we can safely drop). We will not delete another person's data. We cannot delete confirmed chain transactions. If you have pending escrow, say so; we will cancel unclaimed holds back to the sender where the product already allows cancel.

Contact

Privacy requests: @Flizyapp.

Changes

If this policy changes in a way that affects how we use personal data, we will update this page and the date above. Continued use after that date is acceptance of the updated policy.