spotipy returns other user's data

[samc22]

I am trying to write a flask web app that uses spotipy to take a users top genres and map the corresponding city they come from. (i am pretty inexperienced so my code may be messy) I am running the app on localhost currently and testing it out. it works fine when i sign in but when i sign in using my friends log in the webpage still displays the data from my spotify account not his. I registered him as a user on the app page in the developer dash and it is still doing this. unsure what to do looking for pointers.

I also tried running it with his account in incognito and it still returned my info not his

`