This Privacy Policy explains what FoundAlerts collects and how we use it. We aim to collect the minimum needed to run a trusted community platform while enabling long-term product improvement and research.
1. Data we collect
- Google account email and basic profile (via login)
- Pakistan phone number (verified; shown masked publicly)
- Report content you submit (title, description, attributes, optional location / photos)
- Tips / abuse reports you send
- Outcome signals (e.g. resolved / closed) and match metadata
- Basic technical logs needed for security and reliability
- Consent timestamps for research / anonymized commercial use
2. How we use data
To authenticate users, publish and match reports, prevent spam/abuse, and improve the service. With your consent on publish, we may also use anonymized and aggregated report insights for research, statistics, product development, and commercial licensing of datasets that do not include your phone number or email as a sold personal identifier.
3. What we do not sell
We do not sell your Gmail address or verified phone number as a contact list. Public report fields you choose to publish may appear on the site and, if you consented, in anonymized research/commercial datasets.
4. Public vs private
Published report details are visible to visitors. Phone numbers are not shown publicly by default. Contact happens through in-app tips.
5. Photos and location
Photos and exact GPS are optional. Uploaded photos are compressed to save storage. Prefer landmarks and city/area when you do not want precise coordinates public.
6. Retention and deletion
You may request account/content deletion subject to moderation and legal retention needs (for example abuse investigations). Soft-deleted records may remain inaccessible to the public. Photo storage cleanup for old resolved/closed posts is proposed by staff only and is not executed without explicit platform-owner approval.
7. Processors
We use infrastructure providers such as Supabase (auth/database/storage), Vercel (hosting), and Resend (transactional email for OTP). Their processing is limited to providing these services.
8. Children
Extra care applies to posts involving minors. Only a parent, guardian, or authorized person should create such posts.