Privacy policy

Effective September 8, 2026

Flip is a macOS scratchpad made by Ali Shan. Your notes are stored on your Mac. Connecting to Notion or choosing an Obsidian vault is optional, and sharing happens when you choose Send or Update.

Who to contact

Ali Shan is responsible for the personal information handled to operate Flip and this website. For privacy questions or requests, email alishansnsn@gmail.com.

What stays on your Mac

Flip stores note content, formatting, editor state, window and app identifiers, window titles, available source URLs, and integration mappings locally. Window previews are also stored locally when enabled. Migration backups of older note files can remain on your Mac.

Accessibility permission lets Flip identify and coordinate windows. Screen Recording permission lets it capture window images for the flip animation and saved previews. Flip does not send these captures to its login service or to Notion.

When you connect Notion

Notion handles your sign-in and asks which access to grant. Flip does not receive your Notion password. Flip's login service, hosted on Cloudflare, exchanges authorization codes and refresh tokens with Notion. It handles temporary login state, access and refresh tokens, and workspace identifiers and names.

Login state expires after ten minutes. A credential handoff ticket expires after one minute and can be redeemed only once with the matching proof. Temporary records are removed after use or expiry; Cloudflare's managed backup retention can last longer. The Mac app stores connection credentials in Keychain and saves linked page identifiers locally.

When you choose Send or Update, Flip sends the selected note's title and Markdown content directly to Notion. It reads accessible destination information and linked-page content to select destinations and detect external changes. There is no automatic two-way sync. Notes are not routed through Flip's Cloudflare login service.

When you choose Obsidian

Flip saves permission to access the vault folder you choose. Send and Update write Markdown files there; linked-file information stays on your Mac. If you use Obsidian Sync, iCloud, Dropbox, or another service for that folder, that service may upload those files under its own settings and policy.

Website and support

This website is hosted by Cloudflare. Visiting it or using the login service gives Cloudflare technical request information such as your IP address, browser information, and request time, used to deliver and protect the service. The site does not add advertising trackers or analytics cookies. The app does not include advertising or behavioral analytics.

If you contact us, we receive your email address and anything you send. We use that information to reply and resolve your request, and retain it only as needed for support, security, and applicable legal obligations. Please avoid sending passwords, tokens, or sensitive note contents.

Service providers and purposes

We use information to provide the features you request, answer support requests, and keep the service secure. Where data-protection law requires a legal basis, providing requested services relies on performance of our agreement with you; security and support rely on our legitimate interests. Where processing requires consent, you may withdraw it.

We do not sell personal information or use your notes for advertising or AI model training. Information is shared with the services needed for your chosen features, or when legally required. Cloudflare, Notion, GitHub (for downloads), and your email provider may process information outside your country. Their processing and transfer safeguards are described in their policies: Cloudflare, Notion, and GitHub.

Control, deletion, and your rights

You can export notes, move them to Trash, and empty Trash in Flip. Removing the app alone does not necessarily remove its notes, Keychain entries, or backups. Copies in migration backups, exports, or your Mac's backup service must be removed separately if you want to delete them too.

Disconnect Notion in Flip to remove its locally saved credentials, and revoke the connection in Notion to withdraw Notion access. Disconnecting or deleting a local note does not delete previously published Notion pages or Obsidian files; manage those copies in their respective apps. You can revoke macOS permissions in System Settings.

Depending on your location, you may have rights to access, correct, delete, restrict, or receive a copy of personal information, and to object to processing based on legitimate interests. Contact us to exercise those rights. We cannot retrieve notes stored only on your Mac. You may also complain to your local data-protection authority.

Changes

We will update this page when our practices change and revise the effective date. Material changes will be communicated through the website or app.