Skip to main content
Last updated: 16 September 2026 DexFlip is an iPhone app made by Collin Makohon. This policy covers the app and the small sign-in relay it uses for eBay. Questions go to the issue tracker at github.com/cmakohon/dexflip-issues.

In short

  • Your data stays on your iPhone. There is no DexFlip account and no DexFlip server holding your cards, photos or listings.
  • It leaves only when you send it. Listings go to eBay when you publish. Exports go to your Google Drive when you export.
  • Nothing expires on a timer, and nothing is deleted without you. You decide when a card goes.
  • Nothing is sold, shared for advertising, or used to train anything. The app has no analytics, no advertising, no tracking and no third-party code.
This policy covers DexFlip. eBay, Google and Apple have their own policies for what they do with data you give them.

What the app stores on your phone

Photos are stored inside the app, never in your photo library. Location and other metadata are removed before a photo is stored or sent. Access tokens are kept in the iOS Keychain, on this phone only. They are not synced to iCloud Keychain. Everything else is in the app’s own storage. It is included in your iPhone backup if you back up, and it is not synced to iCloud or any other device.

What the app sends, and to whom

Every request also carries your phone’s IP address, as all internet traffic does. Card recognition runs entirely on the phone. Your photos are not sent anywhere to be identified.

The eBay sign-in relay

eBay requires a secret key to finish a sign-in. The relay holds that key so it never ships inside the app. It passes your one-time sign-in code, or your link’s renewal token, to eBay and returns the answer to your phone.
  • It stores nothing. It has no database.
  • It records one line per request: the path, the result code and how long it took. It does not record codes, tokens or addresses.
  • Cloudflare, which runs it, uses your IP address to limit how often sign-ins can be attempted.

Export to Sheets

Export to Sheets creates a folder named DexFlip in your Google Drive and shares it so anyone with the link can view it. The sheet and photos inside inherit that sharing. This is what lets the photos show inside the sheet. The app can reach only the files it creates. It cannot see anything else in your Drive. Google access covers your email address and the files DexFlip creates. Nothing more.

What the app does not do

  • It does not collect analytics, usage statistics or crash reports.
  • It does not show advertising or use an advertising identifier.
  • It does not track you across apps or websites.
  • It does not ask for your location, contacts, microphone or notifications.
  • It does not see your eBay or Google password. Both sign-ins happen on the provider’s own page.
  • It does not see your eBay sales, buyers, messages or payouts.

How long it is kept

Nothing expires on a timer. The app deletes a record only when you tell it to, with two exceptions:
  • A lot’s per-card photos are deleted from the phone once the lot publishes. The cover is kept.
  • A photo left behind by an interrupted delete is cleaned up the next time the app opens.
You get no warning before either, because neither removes anything you still need. Data you sent to eBay or Google stays there under their policies until you remove it there. Deleting a card in DexFlip does not remove its listing or its exported rows.

Your choices

Because DexFlip holds no data about you off your phone, there is nothing for it to hand over or delete elsewhere. A request about data on eBay or Google goes to them.

Children

DexFlip is not directed at children under 13 and does not knowingly collect their information.

Changes

A change to what is collected, where it goes, or how long it is kept updates the Last updated date above. Rewording that changes none of those does not change the date.