The Brand Report

Privacy Policy

A publication and product of Flow UX LLC

Effective Date: March 13, 2026 · Last Updated: September 24, 2026

1. Introduction

This Privacy Policy describes how Flow UX LLC (“we,” “us,” or “our”), operating as The Brand Report, collects, uses, and shares personal information when you use our website, newsletter, and digital products (collectively, the “Services”). This policy applies to all visitors, subscribers, and registered users of our Services.

By using our Services, you acknowledge that you have read and understand this Privacy Policy. If you do not agree with our practices, please do not use our Services.

2. Services We Offer

The Brand Report operates the following Services:

  • Email Updates: Free emails when we publish a new Article or Index entry, and occasional news from The Brand Report (Brand Report Updates). You choose which of these you receive.
  • Website and Substack: Published articles and editorial content available at our website and Substack publication.
  • The Brand Report / Competitor: A digital product that allows users to compare how outdoor, sport, and lifestyle brands perform on social media (beginning with Instagram). This product includes both a free tier and a paid Professional subscription.

3. Information We Collect

3.1 Information You Provide Directly

  • Email Subscription: When you subscribe to our email updates, we collect your email address and, if you choose to provide them, your name, role, and company. We also record which subjects you have chosen to receive.
  • Account Registration: When you create an account for The Brand Report / Competitor, we collect your email address and any other information required by our authentication provider. Account authentication is managed by Lovable.
  • Subscription Preferences: If you use The Brand Report / Competitor, we store your competitor set selections and alert preferences.
  • Brand Requests: If you submit a request to add a brand to our tracking universe, we collect the brand name and optionally an Instagram handle, along with your user ID.

3.2 Information Collected Through Third-Party Services

  • Payment Information: If you subscribe to a paid plan, payment is processed by Stripe, Inc. We do not directly collect or store your credit card number or bank account details. Stripe may share with us limited information such as your billing name, email, and the last four digits of your payment method. Please refer to Stripe’s Privacy Policy for details on how Stripe handles your payment information.
  • Authentication Data:Account authentication is handled by Lovable’s authentication service. We receive a user identifier and email address from this service to manage your account.

3.3 Information Collected Automatically

When you use our Services, we may automatically collect certain information, including:

  • Device and browser information (e.g., device type, operating system, browser type)
  • IP address and approximate location data
  • Pages viewed, links clicked, and other usage data
  • Email open rates and click-through rates for our email updates

This information is collected through cookies, web beacons, and similar technologies. See Section 8 (Cookies and Tracking Technologies) for more detail.

3.4 Publicly Available Instagram Data

TBR Competitor collects publicly available data about brand Instagram accounts through the official Meta / Instagram API. This data includes follower counts, post counts, post engagement metrics (likes, comments), post captions, and post media URLs. This is publicly available information about brand accounts and does not constitute personal information about our users.

4. How We Use Your Information

We use the personal information we collect for the following purposes:

  • To deliver our Services: Sending you the email updates you have subscribed to, providing access to our website content, and operating The Brand Report / Competitor product.
  • To manage your account: Creating and maintaining your account, processing subscription payments, and saving your competitor set and alert preferences.
  • To send alerts and notifications: If you are a Professional subscriber, delivering alerts when a competitor brand has a high-performing post, based on your configured preferences.
  • To improve our Services: Analyzing usage patterns and feedback to improve our content, products, and user experience.
  • To communicate with you: Responding to your inquiries, providing customer support, and sending service-related announcements.
  • To comply with legal obligations: Meeting applicable legal requirements, responding to lawful requests, and protecting our rights.

5. How We Share Your Information

We do not sell your personal information. We share personal information only in the following circumstances:

  • Service Providers: We share information with third-party service providers who perform services on our behalf, including Stripe (payment processing), Lovable (authentication), Supabase (data storage and hosting), and our email service provider (newsletter delivery). These providers are contractually obligated to use your information only to provide services to us and in accordance with this Privacy Policy.
  • Legal Requirements: We may disclose your information if required by law, regulation, legal process, or governmental request.
  • Business Transfers: In the event of a merger, acquisition, or sale of all or a portion of our assets, your personal information may be transferred as part of that transaction. We will notify you via email or prominent notice on our website of any change in ownership or use of your personal information.
  • With Your Consent: We may share your information for other purposes with your explicit consent.

6. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information.

6.1 Your Rights

  • Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, our business purpose for collecting it, and the categories of third parties with whom we share it.
  • Right to Delete: You have the right to request deletion of your personal information, subject to certain exceptions.
  • Right to Correct: You have the right to request correction of inaccurate personal information.
  • Right to Opt-Out of Sale or Sharing: We do not sell or share your personal information for cross-context behavioral advertising purposes.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA/CPRA rights.

6.2 How to Exercise Your Rights

To exercise any of these rights, please contact us at the email address provided in Section 12 (Contact Us). We will verify your identity before fulfilling your request. We will acknowledge your request within 10 business days and respond substantively within 45 calendar days.

6.3 Categories of Personal Information Collected

In the preceding 12 months, we have collected the following categories of personal information as defined by the CCPA:

  • Identifiers: Name, email address, user ID, IP address.
  • Commercial Information: Subscription plan type, payment history (via Stripe).
  • Internet or Electronic Network Activity: Browsing history on our site, email engagement data, interaction with our products.

7. Data Retention

We retain your personal information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy. Specifically:

  • Newsletter subscribers: We retain your name and email address until you unsubscribe. Upon unsubscribing, we will delete your information within 30 days, unless we are required to retain it for legal purposes.
  • Registered users: We retain your account information for as long as your account is active. If you request account deletion, we will delete your personal information within 30 days, except for records we are legally required to maintain (such as transaction records for tax and accounting purposes).
  • Payment records: Transaction records are retained for as long as required by applicable tax and accounting laws.

8. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver relevant content. The types of cookies we use include:

  • Essential Cookies: Required for the operation of our website and authentication services. These cannot be disabled.
  • Analytics Cookies: Help us understand how visitors interact with our website so we can improve our Services.
  • Email Tracking: Our newsletter emails may contain web beacons or similar technologies that track whether you have opened an email and which links you clicked.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our Services.

9. Data Security

We implement reasonable technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit and at rest, access controls, and regular security assessments. However, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee absolute security.

10. Children's Policy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child, please contact us at the email address in Section 12.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, Services, or applicable laws. When we make material changes, we will notify you by updating the “Last Updated” date at the top of this policy and, where appropriate, by email. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about how we handle your information, please contact us at:

The Brand Report (Flow UX LLC)
Email: privacy@thebrand.report