Privacy policy

The short version

Findable is built on data minimization. We keep exactly one location per person (the latest) and overwrite it on every update. There is no movement history, no trail, nothing to mine. Your location is never shown to anyone unless they deliberately view it, and every view notifies you and is recorded in an audit log you can always see. We do not sell data, run ads, or use third-party analytics.

What we store

• Account: your email address, display name and password (hashed by our auth provider).
• Latest location only: one set of coordinates with accuracy, capture time and battery level. Each new fix replaces the previous one. We never store a history of where you have been.
• Connections: who you share your location with, and who shares theirs with you.
• View audit log: every time someone views your location: who, when, and how fresh the served location was. This log is the trust contract of the product and is visible to you at all times.
• Devices: a push notification token per device so we can notify you when your location is viewed.

Who can see your location

Only people you have explicitly invited, only when they deliberately view it, and never silently: viewing always sends you a notification and writes an audit entry. There is no way, in the product or in our APIs, to read someone's location without generating that record. You can pause or revoke any connection at any time.

Service providers

Findable runs on Supabase (database and authentication), Vercel (web hosting), and Expo's push notification service, which delivers notifications through Apple and Google. These providers process data on our behalf to run the service and for no other purpose.

Your rights (GDPR)

• Access / portability: download everything we hold about you as JSON from your dashboard at any time.
• Erasure: delete your account from the app or dashboard. Deletion is immediate and permanent: profile, location, connections, devices and audit history are all erased.
• Rectification: edit your display name in settings; contact us for anything else.

Legal bases: performing the service you signed up for (Art. 6(1)(b)) and your consent for location processing, which you can withdraw at any time by disabling location access or deleting your account.

Retention

Everything is kept only while your account exists. Deleting your account erases all of it immediately. Because only the latest location is ever stored, there is no historical location data to retain or delete.

Children

Findable is not directed at children under 15. We do not knowingly create accounts for children; contact us to have one removed.

Contact

Questions or requests: thibaultlibat@gmail.com. We will update this page if our practices change, and note the date above.