Who we are
[PLACEHOLDER] SIA FoundYa, registration no. [PLACEHOLDER] 40000000000, [PLACEHOLDER] Street 1, Riga, LV-1000, Latvia (“FoundYa”, “we”, “us”) is the controller of the personal data described in this policy. It covers both the website foundya.lv and the FoundYa app at app.foundya.com.
Contact for privacy questions: hello@foundya.com.
[PLACEHOLDER] If you appoint a data protection officer, add their contact details here.
The short version
- A FoundYa tag carries only a unique code. No personal data is stored on the tag.
- A finder never sees the owner’s name, phone number, address or email.
- Finders choose for themselves whether to share their location or contact details.
- This website stores no personal data and sets no cookies.
- We never sell personal data.
The website
Visiting the website
Our hosting provider, [PLACEHOLDER: e.g. Cloudflare, Inc.], processes technical data such as your IP address, browser type and the time of each request. It needs this to deliver the website and protect it against abuse. [PLACEHOLDER] Retention period of server logs.
Language preference
When you choose English or Latvian, the choice is saved in your browser’s local storage so that the website remembers it. It stays on your device and is never sent to us. See Cookie information.
Analytics
[PLACEHOLDER: delete this section if you don’t use analytics.] We use [Plausible / Umami], a privacy-friendly analytics service that uses no cookies, doesn’t track you across websites and only produces aggregated statistics such as page views. IP addresses are not stored.
Contact and quote forms
When you send a message, we receive what you enter in the form: your email address, your message and, optionally, your name. For quote requests we also receive company details and the expected number of tags. The form is delivered to our mailbox by [PLACEHOLDER: Web3Forms / Formspree].
- Purpose: to answer your enquiry.
- Legal basis: our legitimate interest in replying to you (GDPR Art. 6(1)(f)) or steps you ask for before entering into a contract (Art. 6(1)(b)).
- Retention: [PLACEHOLDER] e.g. up to 12 months after the conversation ends.
Purchases
Payments are handled by Stripe through Stripe Payment Links. Stripe processes your payment details, and we never see your full card number. We receive the information needed to fulfil and account for your order: your name, email, delivery address, the products ordered and the payment status.
- Legal basis: performance of a contract (Art. 6(1)(b)) and our legal obligations, such as accounting (Art. 6(1)(c)).
- Retention: accounting records are kept for as long as Latvian law requires. [PLACEHOLDER] Confirm the period.
The FoundYa app
If you own a tag
We process:
- account data: [PLACEHOLDER] e.g. email address, name and login details;
- the tags you register, and the names, descriptions and [PLACEHOLDER: photos] of your items;
- lost mode status and any reward you offer;
- your conversations with finders;
- notification settings and [PLACEHOLDER: device tokens for push notifications].
Legal basis: performance of our contract with you (Art. 6(1)(b)).
If you find an item and scan a tag
When you scan a tag and send a message, we process:
- your message, which is shown to the item’s owner;
- your location, only if you choose to share it. [PLACEHOLDER] Describe how precise it is and how it’s collected, e.g. through your browser after you give permission;
- your contact details (e.g. email or phone number), only if you choose to leave them;
- a private conversation link that lets you return to the conversation (the /c/ address);
- technical data such as IP address and browser type, used for security and to prevent abuse. [PLACEHOLDER] Confirm.
Only the owner of the tag sees your message and anything you choose to share. You don’t need an account.
Legal basis: [PLACEHOLDER] e.g. our legitimate interest, and yours, in returning a lost item (Art. 6(1)(f)). For location and contact details: your consent (Art. 6(1)(a)), which you can withdraw at any time.
What each person sees
The owner sees the finder’s message and anything the finder chose to share. The finder sees the item’s name, whether lost mode and a reward are on, and the owner’s replies. The finder doesn’t see the owner’s identity unless the owner decides to share it.
Retention in the app
[PLACEHOLDER] For example: conversations are deleted X months after they are closed. Finder location and contact details are deleted X days after the item is marked as returned. Account data is deleted within X days after the account is closed.
Who we share data with
We use carefully selected service providers (“processors”) who handle data only on our instructions:
- [PLACEHOLDER] Base44: app platform and hosting;
- [PLACEHOLDER] website hosting provider;
- Stripe: payments;
- [PLACEHOLDER] form service (Web3Forms / Formspree);
- [PLACEHOLDER] email and notification providers;
- [PLACEHOLDER] analytics provider, if used.
We don’t sell personal data. We disclose data to authorities only when the law requires it.
Transfers outside the EU/EEA
[PLACEHOLDER] Some providers may process data outside the EU/EEA. Where they do, we rely on appropriate safeguards, such as an adequacy decision (e.g. the EU–US Data Privacy Framework) or the European Commission’s Standard Contractual Clauses.
Your rights
You have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time. To use these rights, write to hello@foundya.com.
You can also file a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija), www.dvi.gov.lv.
Children
[PLACEHOLDER] e.g. You must be at least 16 to create a FoundYa account. Finders of any age can send a message, but we ask younger finders to involve a parent or guardian.
Security
We use appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS) and access controls. [PLACEHOLDER] Add details if you like.
Changes to this policy
We may update this policy. The date at the top shows when it last changed. We will tell account holders about important changes.