find1.io

Privacy Policy

Last updated: July 5, 2026

The short version

  • We do not sell or rent your personal information — not your email, not your address, not anything.
  • We collect only what we need to run the service, and you can view, change, or delete your data.
  • We do run sponsorships: occasional promotional messages we deliver to you ourselves. Sponsors never receive your contact details, and you can turn these messages off at any time.
  • The contact info you attach to a tag is meant to be shown publicly to whoever looks up that tag — use PrivacyGuard if you'd rather keep it hidden.

1. Who we are

This Privacy Policy explains how find1.io (“find1,” “we,” “us,” or “our”) collects, uses, and shares information when you use find1.io and our mobile apps (together, the “Service”). For the purposes of the EU and UK General Data Protection Regulation (“GDPR”), find1.io is the data controller of the personal information described here.

If you have any questions or want to exercise your privacy rights, contact us at support@find1.io.

2. Information we collect

Information you provide

  • Account information: your email address, and a password if you choose to set one.
  • Profile and tag information: the contact and item details you save, such as name, email, phone number, postal address, an optional profile photo, item descriptions, and private notes.
  • Messages: the content of messages exchanged between a tag owner and someone who found a tagged item, and any name or contact details a Finder chooses to share.
  • Communications with us: information you provide when you contact support.

Information we collect automatically

  • Device and log data: IP address and browser/device type (user agent), and timestamps, recorded when tags are created, edited, or looked up.
  • Tag activity: an audit log of lookups and changes for each tag, which the owner can view and clear.
  • Approximate location: a coarse, city-level estimate derived from IP address. If you are looking up a tag and explicitly grant your browser's location permission, we also record the more precise location you choose to share so the owner can be told where their item was found. We use a third-party mapping provider to turn coordinates into a human-readable place name.
  • Cookies: see Cookies and similar technologies below.

Finders

This is a quick summary for Finders — people who scan or look up a tag to return a lost item. You do not need an account, and we do not ask who you are. Here is everything we handle when you act as a Finder:

  • An anonymous Finder ID stored in a first-party cookie (or app token), so that if you close the tab and scan again you resume the same conversation instead of starting over.
  • Your IP address and device type, used only to give the owner rough context and to prevent abuse — never to identify you.
  • Your approximate location, shared with the owner so they know where their item was found. We estimate a coarse, city-level area from your IP address, and record a more precise location only if you explicitly grant your browser's location permission.
  • Anything you choose to type, such as your message and an optional name or contact detail, which we deliver to the owner so they can reply or reach you.

We do not sell or rent this information, and we never send Finders marketing messages. We keep it only to operate the conversation and for safety. The rest of this Policy — including your privacy rights and how to contact us — applies to Finders too.

3. How we use information

We use the information above to:

  • provide, operate, and maintain the Service — including showing a tag's contact info to whoever looks it up, and relaying messages between Finders and owners;
  • create and secure your account and authenticate you;
  • send you service and transactional messages (for example, a tag lookup notice, account or security notices, and message notifications);
  • keep the audit log that lets owners see how and where their tags were used;
  • protect against fraud, abuse, and security threats, and enforce our Terms;
  • comply with legal obligations; and
  • send promotional messages and sponsorships, as described in Section 5 (you can opt out at any time).

4. Public tag information & PrivacyGuard

find1 is designed to help return lost items. By default, the contact information you attach to a tag is intentionally shown to anyone who looks up that tag's code. Do not put information on a tag that you do not want to be publicly accessible to a person holding the code.

If you would rather keep your details hidden, turn on PrivacyGuard. When it is on, your contact info is not shown publicly; instead, a Finder can send you a message and you decide whether to respond. If you choose, you can also use Share contact within a conversation to send your name, email, and phone number to that specific Finder. When you do, you are directing us to disclose those details to them; once shared, we cannot control how the Finder uses or retains the information.

You may add information about someone else — for example, a parent tagging a child's belongings. If you do, you confirm that you have the authority and any necessary consent to provide that person's information and to have it used as described in this Policy, and you remain responsible for it. Because anyone holding a tag's code can see whatever is published on it, we strongly recommend keeping PrivacyGuard on for a child's items so a Finder must message you instead of seeing a child's name, address, or phone number directly.

5. Promotional messages & sponsorships

We may send you occasional promotional messages, including content from our sponsors. This is how we help keep find1 affordable. We want to be precise about how this works:

  • We deliver these messages ourselves. Sponsors pay us to reach our users; they do not receive your email address, postal address, or other personal information.
  • We do not sell or share your personal information with sponsors or other third parties for their own marketing.
  • We may select which message you see based on limited, non-identifying information (such as a coarse, city-level region), but we do not hand your identity or contact details to sponsors to do so.
  • You can opt out at any time using the unsubscribe link in any promotional email, or by turning off “Promotional emails” in your account settings. Opting out does not affect service or transactional messages you need to use find1.

For users in the EEA and UK, our legal basis for sending these messages is our legitimate interest in promoting the Service (and, where required by law, your consent). You have the right to object to direct marketing at any time, and we will honor it.

6. How we share information

We do not sell your personal information. We share it only in these limited situations:

  • To return your items: the contact info you choose to publish on a tag is shown to people who look up that tag, and messages you send are delivered to the other party in the conversation.
  • At your direction: when you instruct us to — for example, by turning off PrivacyGuard so your contact info appears on a tag's public page, or by using “Share contact” in a conversation — we disclose the details you choose to the Finder you choose. Once you share contact details with a Finder, we cannot control how they use or retain them.
  • Service providers (sub-processors): vendors who process data on our behalf and under our instructions, only as needed to run the Service. They are bound by data-processing agreements and may not use your data for their own purposes. Our current sub-processors are:
    • Hosting: our cloud hosting provider stores the database and serves the site.
    • Email delivery (Resend): sends account, tag, and notification emails.
    • Reverse geocoding (Nominatim / OpenStreetMap): turns coordinates into a place name for shared locations and lookup logs.
    • Translation (OpenAI): when a conversation spans languages, message text is sent for automatic translation. We do not send your account identity, and the provider does not train on this data.
  • Legal and safety: when we believe disclosure is reasonably necessary to comply with the law, enforce our Terms, or protect the rights, property, or safety of our users or the public.
  • Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.

Some sub-processors operate in the United States or other countries, so using the Service involves international transfers as described in Section 10.

7. Cookies and similar technologies

We use a small number of first-party cookies that are strictly necessary to run the Service: a session cookie to keep you signed in, a security cookie to protect forms against cross-site request forgery, and a Finder cookie that lets a return visitor resume an existing conversation. We do not use third-party advertising or cross-site tracking cookies.

8. Data retention

We keep personal information for as long as your account is active or as needed to provide the Service, and afterward only as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. You can delete items and clear a tag's audit log yourself, download a copy of your data at any time, and delete your account directly from your profile; deleted accounts are deactivated immediately and permanently erased after a short grace period. Inactive anonymous Finder records and cleared audit logs are purged automatically on a rolling basis.

9. Data security

We use technical and organizational measures designed to protect your information, including encryption in transit and hashed account passwords. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. International transfers

We may process and store information in countries other than the one in which you live, including the United States. Where we transfer personal information out of the EEA or UK, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

11. Your rights in the EEA and UK (GDPR)

If you are in the European Economic Area or the United Kingdom, you have the right to access, correct, delete, or restrict the processing of your personal information; to object to processing (including direct marketing); to data portability; and, where we rely on consent, to withdraw it at any time. The legal bases on which we rely are performance of our contract with you (to provide the Service), our legitimate interests (security, abuse prevention, and promoting the Service), your consent (for example, for precise location sharing), and compliance with legal obligations.

To exercise these rights, use the in-app tools in your profile (download your data, delete your account, or opt out of marketing) or contact support@find1.io. You also have the right to lodge a complaint with your local data protection authority.

12. Your rights in California (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you the right to:

  • Know what personal information we collect, use, and disclose;
  • Access and obtain a copy of your personal information;
  • Correct inaccurate personal information;
  • Delete personal information we have collected; and
  • Opt out of the “sale” or “sharing” of personal information, and to limit the use of sensitive personal information.

We do not sell or share your personal information as those terms are defined under California law, and we do not use sensitive personal information (such as your precise location or login credentials) for anything other than providing the Service. Because of this, we do not offer a separate “Do Not Sell or Share My Personal Information” process — there is nothing to opt out of. You can still opt out of promotional messages as described in Section 5.

The categories of personal information we collect are: identifiers (such as name, email, and IP address); contact and address records; commercial information about your use of the Service; internet or network activity (such as device type and tag interactions); geolocation data; and visual information (an optional profile photo). We will not discriminate against you for exercising your rights. You can download your data and delete your account directly in your profile, or make a request by contacting support@find1.io; we will verify your request using the email associated with your account.

13. Your rights in Canada (PIPEDA & Quebec Law 25)

If you are in Canada, you may access, correct, and delete your personal information, withdraw consent, and ask about our handling of it. We collect, use, and disclose personal information only with your consent and for the purposes described here. You can exercise these rights in-app (download your data and delete your account from your profile) or by contacting our Privacy Officer at support@find1.io. If a breach poses a real risk of significant harm, we will notify affected users and the appropriate authorities as required by law. You may also complain to the Office of the Privacy Commissioner of Canada or your provincial regulator.

14. Children's privacy

The Service is intended for use by adults and is not directed to children, and we do not knowingly allow children under 16 (or the applicable age of digital consent in your country, which may be as low as 13) to create their own accounts or knowingly collect personal information directly from them as users. If you believe a child has created an account or provided us information directly, contact us and we will delete it.

We recognize that an adult owner may add a child's information to a tag (for example, a parent tagging a child's backpack). In that case the parent or guardian is acting as the account holder and is responsible for that information, confirms they have the authority to provide it, and may view, change, or delete it at any time. As noted in Section 5, we do not target promotional messages using a child's information, and we recommend keeping Privacy Guard on for children's items.

15. Changes to this Policy

We may update this Policy from time to time. If we make material changes, we will update the “Last updated” date above and, where appropriate, notify you. Your continued use of the Service after changes become effective constitutes acceptance of the revised Policy.

16. Contact us

Questions, requests, or concerns about this Policy or your personal information can be sent to our Privacy Officer at support@find1.io.