Privacy Policy

Last updated November 14, 2026

Draft. This is a plain-language draft written to match how FindFolk works today. It has not been reviewed by a lawyer yet and must be before FindFolk opens to the public. Parts in [square brackets] still need to be filled in.

This explains what FindFolk keeps about you, why, who can see it, and how to get it changed or deleted. The short version: we keep what’s needed to run the app, we don’t sell it, and you can delete your account at any time.

Who runs FindFolk

FindFolk is run by [owner’s full legal name or company name] (“we”). You can reach us at [contact email address] or with Send feedback.

What we keep

Account details: your email address, username, display name, and password. Your password is stored scrambled (as a salted “hash”), so nobody can read it, including us.
What you share: your profile (photo, banner, bio, location if you add one, links), posts, photos and clips, comments, saves (Obsessions), collections, who you follow, and the things you told us you’re into when you joined.
Messages: direct messages you send and receive, and who you’ve blocked or muted.
Simple counts: when someone saves a product or taps through to a shop, we count it so shops can see interest. Shops see totals, never names.
Safety records: reports you make, reports about you, and moderator decisions.
Searches, without names: to suggest popular searches as people type, we keep the words people search for and a count per day. We don’t save who searched, your account, or your network address. A search is only suggested to others once several different people have searched it, and searches that look like an email address, web address or phone number are never saved. Daily counts are cleared after about 6 months.
Feedback you send us.
Emails we send you: such as password reset and “confirm your email” messages.

We don’t collect your contacts, your exact location, or anything from your phone beyond the photos you choose to upload. When you post a photo, the app removes hidden details stored inside it, such as where it was taken and which camera took it, and big photos are made smaller.

Why we keep it

To run your account and show what you share to other people.
To keep FindFolk safe: stopping spam, scams, and abuse, and handling reports.
To show shops simple totals of saves and visits.
To contact you about your account (for example, a password reset you asked for).
To fix bugs and improve the app.

We don’t sell your information, show ads, or use advertising or tracking cookies.

Who can see it

Anyone can see profiles, posts, photos, comments, public collections, and saves counts.
Only you and the other person can see a direct message chat. Messages aren’t end-to-end encrypted: a moderator looks at a message only if someone reports it.
Only the FindFolk team can see your email address, reports, and feedback.
Service providers that help us run FindFolk (for example, the company that hosts the server and, once it is switched on, the service that sends our emails) handle data only to provide that service to us. [List the providers here once chosen.]
We share information with authorities only when the law requires it, or to protect someone from serious harm.

Cookies

FindFolk uses one cookie to keep you signed in, and a short-lived one to show messages like “Post updated”. There are no advertising or tracking cookies.

How long we keep it

We keep your information while you have an account. When you delete your account, your profile, posts, comments, saves, collections, messages, and feedback are removed straight away. Anonymous totals (such as “12 people visited this shop”) stay. Dated backup copies can still hold your information until they are cleared [say how often: for example, within 30 days].

Your choices and rights

See and fix: you can view and edit your profile in Edit profile.
Delete: use Delete my account at any time.
Get a copy, or ask a question: contact us at [contact email address] and we’ll respond within 30 days.
Depending on where you live, you may have extra rights under privacy laws [for example Canada’s PIPEDA, the EU/UK GDPR, or California’s CCPA]; contact us to use them. You can also complain to your local privacy regulator.

Age

You must be 16 or older to make an account. If we learn that someone younger has an account, we’ll delete it.

Keeping it safe

Passwords are stored scrambled, sign-in links expire quickly, and the online version uses an encrypted (HTTPS) connection. No system is perfectly secure, so please use a password you don’t use anywhere else.

Where it’s stored

Information is stored on the server that runs FindFolk [say where: for example, in Canada or the United States]. If you use FindFolk from another country, your information may be handled there.

Changes

If we change this policy, we’ll update the date at the top, and tell you in the app if the change is important.

See also the Terms of Use and the House rules.