Privacy Policy

This Privacy Policy describes how FlickUp AI, Inc. ("FlickUp," "Stacks," "we," "us," or "our") collects, uses, and shares information about you when you visit jasonstacks.com, stacks.gs, or theegg.gs, use a Stacks account, and use our interactive AI experiences — including The Egg, Men vs. Gorilla, Instant Baby Generator, World Record City, This Company Doesn't Exist, and any other experience we release (each, an "Experience," and together with the sites and accounts, the "Services").

By using the Services, you agree to the practices described in this policy.

1. Information we collect

Information you give us

• Contact details — your first name, email address, and/or phone number when you submit them (for example, to subscribe for drop notifications or to receive a result).
• Account information — if you create a Stacks account, your email address (or the identifier and any name or email that Apple shares with us if you use Sign in with Apple), plus the creations, preferences, and consents saved to your account.
• Photos and images you upload to an Experience (for example, a photo of yourself to generate a transformed image).
• Text you submit — prompts, ideas, contributions, interview answers, names, and other text you enter into an Experience.
• Profile references you provide, such as a public social media or LinkedIn handle, where an Experience asks for one.

Information collected in The Egg, with your permission

• Your voice. What you say during the conversation is recorded in short clips so it can be transcribed into text.
• Your camera and face. Images from your camera are used for the mirror scene (see Section 4, Biometric Information).
• Your location. If you allow it, your device's precise location, which we turn into nearby place names (for example, your town and a nearby road).
• Public Instagram information. If you enter an Instagram username, we retrieve that account's public profile, its public posts, and public posts the account is tagged in, including captions, locations, tagged people, and comments. This can include information about other people, such as family members (see Section 5).
• Your conversation. The text of what you say and what the Experience says back to you, along with your choices in the story.

Information collected automatically

• Device and usage data — IP address, browser type, device and operating system information, referring pages, and the actions you take in the Services.
• A device "fingerprint" — a technical signal we derive from your browser/device that we use to enforce rate limits, prevent abuse, and apply cooldowns.
• Aggregate analytics — counts such as page views and the number of generations created, which power the public counters you see on the site.
• Browser storage — small settings saved in your own browser, such as whether captions are on or the Instagram username you entered last time, so you don't have to retype it. You can clear these in your browser at any time. We do not use advertising cookies.

2. How we use information

• To operate the Experiences — including processing what you submit or say through AI models to generate the conversation, voice, images, and other content you asked for.
• To personalize an Experience you start — for example, in The Egg, to mention the place you were heading, a nearby road, your local emergency crew, and the people in your life.
• To display generated content. Some Experiences are public or collaborative, so content you create there may be shown publicly within that Experience. The Egg is private: your conversation and images are shown only to you.
• To run your Stacks account, including saving creations and, only if you opt in, saving a personalization profile for future Experiences (see Section 6).
• To verify your phone number and, if you opt in, send drop notifications by SMS.
• To prevent fraud and abuse, enforce rate limits, and keep the Services secure.
• To communicate with you, respond to your requests, improve the Services, and comply with law.

We do not use your information to train our own AI models, and we do not sell it.

3. How The Egg uses your data

The Egg is an interactive adaptation of Andy Weir's short story. Here is what happens to each kind of data while you play:

• Location: your coordinates are sent to OpenStreetMap services to look up nearby place names. We keep the place names with your session; we do not store your raw coordinates.
• Instagram: if you enter a username, public data is retrieved through Apify and analyzed with Google's Gemini AI to find the first names and relationships of family members (for example, "your mom, Jennifer") and a few public details about them (for example, a place you visited together), which the Experience may mention.
• Voice: each clip of what you say is sent to ElevenLabs to be transcribed, then the audio is deleted. The text of the conversation is sent to Google's Gemini AI to write the replies, which are spoken using Google's text-to-speech. Some spoken passages are sent to ElevenLabs to time captions to the words.
• Camera: see Section 4.
• Your next life and past lives: the Experience generates illustrations and images for the story using Google's Gemini AI.

The Egg's statements about you, your family, and your past or future lives are fiction generated by AI. They can be wrong, and they are not a profile of you that we keep or share.

4. Biometric information (camera and face)

In The Egg's mirror scene, we use your camera to show you your own reflection and then transform it into other people. To do this we process images of your face, and our animation software computes the position, expression, and movement of your face (facial geometry) so the transformed reflection moves when you move. Some laws (for example, in Illinois, Texas, and Washington) treat this as biometric information. Here is exactly how we handle it:

• What we collect: one still frame from your camera, and a live stream of camera frames while the mirror is showing.
• Why: only to create the images and the moving reflection in your own session. We never use it to identify you, to recognize you later, or to build any facial-recognition database.
• Who processes it: the still frame is sent to Google's Gemini AI to generate images of you as other people; live frames are sent to our own animation servers hosted on Amazon Web Services, which process them in memory and do not store them. Face detection that keeps the mirror centered runs entirely in your browser.
• How long we keep it: the still frame and every image generated from it are permanently deleted within 24 hours, and the still frame is usually deleted within seconds. Live frames are never stored. We will never keep this information longer than 24 hours after your visit.
• No sale or profit: we do not sell, lease, trade, or otherwise profit from your biometric information, and we disclose it only to the service providers named above, solely to provide the mirror scene to you.
• Your consent: we ask for your consent before The Egg starts. You can decline camera access in your browser and still finish the story; the mirror will show a generated picture instead of your reflection.

5. Information about other people

When you enter an Instagram username, the public posts we retrieve may include other people: family members, people tagged in photos, and people who commented. We use this only to personalize the session you started (for example, naming your mom and brothers), we keep it only as long as described in Section 10, and we never contact these people or use their information for anything else. Please enter only your own account. If you appear in someone's posts and want any information about you removed, email jason@stacks.gs and we will delete it.

6. Stacks accounts and saved personalization

A Stacks account lets you keep your creations and come back to them. If you choose to, you can also save a personalization profile to your account — for example, the family names and public details an Experience found from your Instagram, the place names it used, and your preferences — so that future Experiences you choose to start can be personalized without asking again. Saving a personalization profile is always optional and requires your separate opt-in. We use it only to personalize Experiences you start; we do not sell it or use it for advertising. Biometric information (Section 4) and voice recordings are never saved to your account. You can view or delete your profile, withdraw your opt-in, or delete your whole account at any time from your account page or by emailing us.

7. AI generation and your content

The Experiences use artificial intelligence to generate conversation, voice, images, and other content. AI outputs are generated automatically and may be inaccurate, unexpected, or fictional. Only submit content you have the right to use, and do not submit anything you would not want processed or, where an Experience is public, displayed.

8. Photos and likeness

When you upload a photo or use your camera, we use it solely to generate the output you asked for and to operate that Experience. We do not use your photos to identify you, build a facial-recognition database, or sell them. Depending on the Experience, your image may be processed by the third-party AI and infrastructure providers described below to create your result.

9. SMS messages

If you provide your phone number, we use it to send a one-time verification code and, if you opt in, occasional notifications when a new drop launches. Message frequency varies. Message and data rates may apply. You can opt out at any time by replying STOP, and reply HELP for help. Carriers are not liable for delayed or undelivered messages. Your mobile number is not shared with third parties for their own marketing. Text messaging opt-in data and consent are never shared with or sold to any third party.

10. Data retention

• Camera frames and every image generated from your face (The Egg): deleted within 24 hours. Live mirror frames are never stored.
• Voice recordings (The Egg): deleted as soon as they are transcribed, normally within seconds.
• Conversation text, session data, generated voice audio, and story illustrations (The Egg): deleted within 30 days.
• Instagram data retrieved for The Egg: deleted within 30 days, unless you save a personalization profile to your Stacks account.
• Location: raw coordinates are not stored; the place names derived from them are kept with your session and deleted within 30 days.
• Server logs, which can include conversation text and the username you entered: deleted within 30 days.
• Stacks account data and saved personalization profiles: kept until you delete them or your account.
• Other Experiences and contact details: kept as long as needed to provide the Services and for legitimate business or legal purposes. Verification codes are short-lived and deleted after use or expiry.

11. How we share information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share it only as follows:

• Service providers who run the Services for us and may use your information only to provide services to us: cloud hosting and serverless functions (Vercel); database, file storage, and accounts (Supabase); hosting, our animation servers, compute, and SMS delivery (Amazon Web Services); AI conversation, speech, and image generation (Google, through the Gemini API); speech-to-text and caption timing (ElevenLabs); retrieval of public Instagram data (Apify); converting location into place names (OpenStreetMap Foundation's Nominatim and the Overpass API); delivery of the face-detection software that runs in your browser (jsDelivr and Google Cloud Storage); web fonts (Google Fonts); sign-in (Apple, if you use Sign in with Apple); and, where applicable, payment processing.
• Legal and safety — when we believe disclosure is required by law or necessary to protect our rights, users, or the public.
• Business transfers — in connection with a merger, acquisition, or sale of assets, subject to this policy.
• With your direction — for example, content you choose to make public within an Experience.

12. Your choices and rights

• Permissions: you can decline or revoke microphone, camera, and location access in your browser at any time. The Egg needs your microphone (or you can type), but works without your camera, location, or Instagram.
• SMS: reply STOP to stop receiving texts.
• Access, correction, deletion, and portability: email jason@stacks.gs. Tell us the Experience and roughly when you used it, or the Instagram username you entered, so we can find your data. We may need to verify your request.
• California residents have the right to know what personal information we collect, use, and disclose; to delete and correct it; to limit our use of sensitive personal information (we use precise location, biometric information, and voice only to provide the Experience you asked for); and not to be discriminated against for exercising these rights. We do not sell or share personal information. You may use an authorized agent.
• People in the European Economic Area and the United Kingdom have the rights to access, correct, delete, restrict, and port their data, to object to processing, and to withdraw consent at any time, as well as to complain to their data protection authority. We rely on your consent for camera, voice, location, Instagram, and saved personalization processing; on our contract with you to provide the Services; and on our legitimate interests to keep the Services secure.
• Residents of other states with privacy laws (for example, Virginia, Colorado, Connecticut, Texas, and Oregon) have similar rights; contact us to exercise them, and you may appeal a decision by replying to our response.

13. Children

The Services are not directed to children under 13, and some Experiences require you to be older. The Egg is only for people 18 and older. We do not knowingly collect personal information from children under 13, or from anyone under 18 in The Egg. If you believe a child has provided us information, contact us and we will delete it.

14. Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections and access controls. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

15. Where we operate

We are based in the United States and process information there and with service providers who may process it in other countries. If you use the Services from outside the U.S., your information will be transferred to and processed in the U.S.

16. Changes

We may update this policy from time to time. When we do, we'll revise the "Last updated" date above, and if a change materially affects how we use information you already gave us, we'll ask for your consent where the law requires it.

17. Contact

FlickUp AI, Inc.
367 Saint Marks Avenue, Unit #817, Brooklyn, NY 11238
jason@stacks.gs