FlashGPTPrivacy Policy
Effective November 10, 2026
This policy explains what FlashGPT ("we", "us") collects when you use the FlashGPT Mac app, our answer service and this website, why we collect it, who processes it, and how long it's kept.
The short version
- FlashGPT only looks at your screen when you hover the notch. Each hover sends one screenshot to an AI model to write your answer.
- We don't store your screenshots or answers on our servers.
- We don't sell your data, show you ads, or use your screenshots to train AI models.
- Payments are handled by Whop. We never see your full card number.
- This website has no analytics or advertising cookies.
1. What we collect
When you use the app
- Screenshot and context, only when you hover. One image of the display you hovered, with FlashGPT's own panel left out, plus the name of the app in front and the title of its window. The app does nothing with your screen when you aren't hovering, and it never records audio.
- License key. Sent with each request so we can check your plan. It's also stored in your Mac's Keychain so you only enter it once.
- Device identifier. A one-way SHA-256 hash of your Mac's hardware UUID. Your Mac's actual UUID never leaves your Mac. The hash ties your key to one Mac.
- Usage counts. How many answers your license has used today, so we can apply the daily limit.
- Technical data. Your IP address and basic request information (time, size, response status), which our hosting provider processes to deliver and protect the service.
When you buy
- Whop collects your email address, name, billing details and payment method to process the purchase. We receive your email address, name (if given), country, plan, payment and subscription status, membership ID and license key. We don't receive your full card number.
When you visit this website or contact us
- Our host processes standard request data such as IP address, browser and pages requested.
- If you open the checkout, Whop's checkout loads in the page and collects payment and device information under Whop's own privacy policy. It may use cookies to process the payment and prevent fraud.
- If you use the contact form, we receive your email address, the topic and your message. We use your IP address briefly to limit spam.
2. How we use it
- To generate answers (screenshot and context).
- To check that your license is valid, tie it to one Mac, and apply daily limits (license key, device identifier, usage counts).
- To process payments, renewals and cancellations, and to keep records (purchase data).
- To prevent fraud, key sharing and abuse, and to keep the service secure and working (all of the above, as needed).
- To answer your messages and provide support (contact form).
- To meet legal obligations.
We don't sell or rent personal information, we don't share it for targeted advertising, and we don't use your screenshots, answers or messages to train AI models.
3. How answers are made
When you hover, the app sends the screenshot and context over an encrypted connection to our server. Our server checks your license and passes the request straight to an AI provider. The answer streams back through our server to your Mac. Our server handles the request in memory and doesn't write the screenshot or answer to storage.
The AI provider is OpenAI. If OpenAI is unavailable, we may route the request to OpenRouter, which forwards it to a model provider. Under OpenAI's API policies, data sent through its API is not used to train its models by default, and it may be kept for up to 30 days to detect abuse, unless a longer period is required by law. OpenRouter and the providers it uses follow their own policies.
4. Who processes your data
| Provider | What it does | Data involved |
|---|---|---|
| Whop | Payments, subscriptions and license keys | Purchase data, license key, device identifier (stored with your membership) |
| Cloudflare | Hosts this website and our answer server; short-term license cache and usage counters | Requests, IP address, license key, device identifier, usage counts |
| OpenAI | Writes your answers | Screenshot, app name, window title |
| OpenRouter | Backup route to AI models, only if OpenAI fails | Screenshot, app name, window title |
| Netlify | Receives contact form messages and emails them to us | Email address, topic, message |
We may also disclose information if the law requires it, to protect people's safety or our rights, or as part of a merger, acquisition or sale of the business, in which case this policy continues to apply to it.
5. How long we keep it
| Data | How long |
|---|---|
| Screenshots and answers | Not stored by us. The AI provider may keep them up to 30 days for abuse detection (see section 3). |
| License status cache | Up to 1 hour, then fetched again from Whop |
| Daily usage count | Replaced each day |
| Device identifier | While your license exists, or until you reset your key |
| Purchase records | Kept by Whop and by us as long as needed for accounting, tax and legal purposes |
| Contact form messages | Backup copy for up to 90 days; the email copy as long as needed to handle your request |
| IP address for spam limits | 1 hour |
| License key in your Keychain | On your Mac until you remove it or delete the app's Keychain item |
6. Your choices and rights
- FlashGPT only captures your screen when you hover. You can quit it any time from the ✦ menu, or turn off its Screen Recording permission in System Settings.
- You can cancel a subscription and reset your key's device binding from your Whop orders page.
- You can ask us to give you a copy of, correct, or delete your personal information, or to stop using it, by using our contact form with the topic "Privacy request". We may need to confirm it's you, for example with your license key or purchase email. We will reply within 30 days, or within the time your local law requires. Some information may need to be kept for legal or accounting reasons.
California residents
Under California law you have the right to know what personal information we collect, use and disclose; to request deletion and correction; and to opt out of the sale or sharing of personal information. We don't sell or share personal information as those terms are defined in California law. We won't treat you differently for using your rights. You can use an authorized agent to make a request.
People in the EEA, UK and Switzerland
We process your data to perform our contract with you (answers, licenses, purchases), for our legitimate interests in securing the service and preventing abuse, and to meet legal obligations. You have the right to access, correct, erase, restrict, or object to processing of your data, to data portability, and to complain to your local data protection authority.
7. Children
FlashGPT is for people 16 and older, and people under 18 need a parent's or guardian's permission. We don't knowingly collect personal information from children under 13, or from anyone under 16 without that permission. If you believe we have, contact us and we will delete it.
8. Security
All connections use HTTPS. Your device identifier is hashed on your Mac. Our server-side keys never ship inside the app. Your license key stays in your Mac's Keychain. No system is perfectly secure, so we can't guarantee absolute security.
9. International transfers
We and our providers process data in the United States and other countries. Those countries may have different data protection laws from yours. Where the law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses used by our providers.
10. Do Not Track
This website doesn't track you across sites, so there's nothing for a Do Not Track signal to switch off.
11. Changes
If we change this policy, we will update the date at the top. If the change is material, we will give notice on this site or by email before it takes effect.
12. Contact
Questions or requests about privacy? Use our contact form with the topic "Privacy request".