Back to Home
Google Play Store Certified • Zero-Trust Architecture

FindBack Privacy Policy & Data Safety

Last updated: September 2026 • Version 1.2 • Effective globally across Web, Android (Google Play), and iOS platforms.

Key Privacy Commitments

GPS Coordinate Fuzzing

Raw coordinates are blurred (~300m-500m) to conceal residential addresses from public discovery.

Masked Communications

Direct phone numbers and emails are never exposed publicly; owner/finder chat is relay-protected.

1-Click Data Erasure

Delete your account and all associated lost/found reports anytime via app or our web deletion portal.

1. Overview & Scope

FindBack (“we”, “us”, or “our”) provides an artificial intelligence-assisted matching platform connecting individuals who have lost personal belongings with finders and property custodians.

This Privacy Policy governs your use of the FindBack mobile application (available on the Google Play Store and Apple App Store) and web platform. It explains how we collect, process, secure, and delete your personal data in accordance with the Google Play Developer Policy, the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA/CPRA).

2. Geolocation Data & Spatial Coordinate Fuzzing

With your explicit permission, FindBack collects coarse and fine GPS location data when you post a lost or found report to calculate proximity matches with other listings in your area.

Spatial Obfuscation (Zero-Trust Privacy)

When an item is reported, exact GPS coordinates are stored securely in internal database tables but are NEVER served directly to unauthenticated clients or public search indexes. Public API responses and map markers apply a randomized spatial fuzzing offset (~300m to 500m radius blur) to conceal specific private residences and daily personal routes.

3. Information We Collect

  • Account Data: Name, email address, password hash, and optional profile image.
  • Report Attributes: Item category, title, brand, model, detailed description, date lost or found, and voluntary reward offer amounts.
  • Photos & Camera: User-submitted photos taken via device camera or photo gallery. Images are stripped of raw EXIF GPS tags before public serving.
  • AI Vector Embeddings: Descriptions and images are converted into mathematical embeddings for semantic matching.
  • Private Verification Marks: Private identifying details (e.g. engravings, secret wallpaper, wallet contents) flagged with isPrivate: true are hidden from public listings and used exclusively for two-way verification challenges.
  • Device & Diagnostic Telemetry: IP address, OS version, app version, network latency, and crash telemetry for platform performance.

4. Third-Party Infrastructure & Sub-Processors

We do not sell personal data to data brokers or advertising networks. We work strictly with verified service providers:

  • Cloudflare, Inc.: Global edge compute workers, D1 distributed SQL database, and encrypted object storage.
  • Google Cloud Platform & Gemini: Neural vision analysis and semantic text embeddings.
  • Google Play In-App Billing / Apple StoreKit: In-app subscription processing and transaction management.
  • Expo Notification Services: Push token delivery for instant match alerts.

5. Account Deletion & Data Erasure (Google Play Mandate)

In strict compliance with Google Play Store User Data safety mandates, FindBack provides comprehensive, self-service account and data deletion mechanisms:

In-App Deletion

Inside the mobile app, navigate to Profile → Legal & Privacy → Delete Account & Data to initiate permanent erasure.

Web Deletion Portal

Submit an instant deletion request online at findback.app/delete-account.

Upon confirmation, active reports and authentication sessions are deleted immediately. Internal database backups are fully purged within 14 calendar days.

6. Data Retention & Auto-Archiving

Reports that remain inactive or unresolved for more than 90 days are transitioned to EXPIRED status and removed from public search indexes. Closed cases are archived within 30 days. Security incident audit logs are maintained for fraud prevention for up to 12 months before deletion.

7. Children's Privacy (COPPA)

FindBack is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact privacy@findback.app immediately for swift removal.

8. Contact Us & Data Protection Officer

If you have questions regarding this Privacy Policy or wish to exercise your GDPR/CCPA data rights, contact our Data Protection Officer:

Email: privacy@findback.app | support@findback.app

Organization: FindBack Technologies Inc.

Web Portal: https://findback.app/privacy