FlagHawk App – Privacy Policy

Last updated: April 20, 2026

ZavSoft LLC (“ZavSoft,” “we,” “us,” “our”) respects your privacy. This policy explains how we collect, use, and disclose personal information in the FlagHawk mobile application (the “App“) and describes your rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act (together, the “CPRA“).

Notice at Collection

Category	Examples collected	Purpose	Retention	Sold / shared?
Identifiers	Email (app-store account or optional sign-in)	Create account; restore purchases; support	Account lifetime + 3 years	No
Professional info	Repair-order (RO) #, hours flagged, job descriptions	Generate technician productivity data	Until you delete the entry or close account	No
Photos (user-generated)	Images you attach to an RO	Document work performed; QA audits	Until you delete the photo or close account	No
Scan RO images	Photo of a repair order you capture when using the Scan Repair Order feature	Transmitted to Anthropic for AI text extraction; only the extracted fields are saved	Not stored by FlagHawk. Anthropic may retain the image up to 30 days for abuse monitoring, then deletes it.	No
Internet / network activity	Crash logs, analytics events (PostHog)	Debugging; product improvement	12 months	No
Sensitive PI	None collected	—	—	N/A

We do not sell personal information or share it for cross-context behavioural advertising. We do not use your data to train any AI or machine learning model, and our third-party AI provider does not train on your data either.

1. Information We Collect

Data you enter (RO #, hours, job descriptions, photos);
Images you capture with the Scan Repair Order feature (processed by a third-party AI service — see Section 3);
Analytics events from PostHog (anonymised ID, coarse location);
Crash logs if the App crashes.

2. How We Use Personal Information

Provide core App functions and cloud backup (Supabase, U.S.);
Extract structured repair-order data from scanned images using AI (Anthropic);
Analyse aggregate usage to improve features;
Respond to support emails;
Comply with legal obligations.

3. AI Features & Third-Party Service Providers

FlagHawk relies on a small number of carefully chosen third-party service providers. All data is processed in the United States.

Supabase (cloud backup & storage)

Supabase stores your account, repair-order records, and any photos you attach to an RO. Data in transit is encrypted with TLS 1.2+. Data at rest is encrypted with AES-256.

PostHog (product analytics)

PostHog collects anonymised usage events (screen views, feature taps, crash traces) to help us improve the App. We do not send personally identifying content to PostHog.

Anthropic (AI processing for Scan Repair Order)

When you use the Scan Repair Order feature, the image you capture is transmitted over a secure (TLS) connection to Anthropic’s Claude API to extract structured data — the RO number, date, and job lines (description, hours, labor type). Key facts about this processing:

We do not store the image. The image exists only in-memory during the API call and is discarded immediately after extraction completes.
Only the extracted fields are saved to your FlagHawk account — not the image itself and not any customer-identifying information visible on the RO.
Anthropic does not use your data to train its models.
Anthropic retention: Anthropic may retain the request for up to 30 days for trust and safety purposes, after which it is deleted. See Anthropic’s Privacy Policy.
AI results may be imperfect. You review and confirm all extracted data on a confirmation screen before it is saved.

4. Photographs of Repair Orders & Customer Information

Repair-order images may incidentally contain information about the dealership’s customers (names, addresses, phone numbers, VINs). By using the Scan Repair Order feature, you confirm that:

You have the authority to capture and submit the image in the course of your work; and
You are complying with your employer’s data-handling policies and any applicable law (including, where relevant, the Gramm-Leach-Bliley Act).

FlagHawk extracts only non-identifying repair-order metadata (RO #, date, and job information). Customer names, addresses, phone numbers, and VINs are never saved to your FlagHawk account.

5. Your CPRA Rights

You may know, delete, correct, port, or opt-out (sale/share—none), by emailing help@zavsoft.com. We verify identity via your app-store e-mail.

6. Data Security

Data in transit ⇢ TLS 1.2+. Data at rest ⇢ AES-256 (Supabase). Scan RO images are transmitted over TLS and are not stored at rest on FlagHawk servers.

7. Children

The App is for U.S. users 18+. We do not knowingly collect data from minors.

8. Changes

We will notify users of material changes in-app; changes take effect upon publication unless otherwise specified

9. Contact

Email help@zavsoft.com
or write to:
ZavSoft LLC
1175 Avocado Ave
Ste 101 #A38
El Cajon, CA 92020