App Privacy Policy

Policy version: November 1, 2026. Effective when published at saidandfound.com.

This policy covers the Said & Found iPhone and Android apps. See our website privacy policy for website visits and email sign-ups.

Who we are

The iPhone app is published by Shanghai Juantang Technology Co., Ltd., Shanghai, China. The Android app is published by 义乌市铃稀电子商务商行, using the Google Play name StyleCraft Studio, at Room 402, Unit 1, Building 57, Shitatou Village, Jiangdong Subdistrict, Yiwu, Jinhua, Zhejiang, China, 322000. Each is the controller for its platform users. Shanghai Juantang Technology Co., Ltd. operates the website and shared servers for both apps.

Contact either operator about privacy at [email protected].

The service is not directed to the European Union, European Economic Area or United Kingdom. We have not appointed EU or UK representatives. Your rights under applicable law are unaffected.

Information we use

You can keep an inventory and search locally without signing in. Signing in enables sync and household sharing. We use:

• Account information: Apple or Google sign-in identifiers, email when supplied, account identifiers and dates, and credentials for sign-in and revocation.
• Inventory and household information: items, categories, named storage places, original typed or transcribed sentences, notes, changes and history, household members and roles, and invitations. Named places are not GPS coordinates.
• Service information: sync records, usage counts, request and error logs, and connection details such as IP addresses, to operate and protect the service.
• Purchases: store and RevenueCat purchase information, product and entitlement details linked to your account. Apple or Google handles payment details.
• Support: your email and anything you include in a message.

Information comes from you, sign-in and purchase providers, and other household members. Shared content can mention people who do not use the app; they can contact us too.

Our servers receive speech as text, not microphone audio. iPhone speech recognition runs on device. Android's system speech provider may process audio remotely under its own terms.

Your cloud AI choice

Cloud AI needs sign-in and your separate permission. You can decline and continue using local text entry and search. When enabled, submitted text, questions, selected photos and any accompanying hint may be sent for interpretation before you save an entry.

Our servers send that content through OpenLux, a third-party API relay, to Google Gemini models. We do not add your name or email to the AI request, although the content itself may identify someone. The providers may retain or otherwise process it under their service terms, including for safety purposes. Provider terms also govern any use for model improvement.

We process submitted photos to return suggestions and do not store those photos on our servers. Text and inventory entries you save are kept for sync. AI can make mistakes; review suggestions before saving.

Choose Not now to decline, or turn off Settings > Privacy > Read with cloud AI to stop future cloud AI requests on that device. Requests already sent may finish. Withdrawal does not turn off sync or erase saved entries; you can request deletion separately.

Who receives information

Members of your household can see and change its shared inventory and history, including saved sentences and notes. Invite only people you trust.

Cloudflare hosts our servers and data. OpenLux and Google Gemini process cloud AI submissions. RevenueCat helps verify purchases; Apple and Google provide sign-in, stores and platform services. Their services may also process account and operational information under their own terms. Email routing and mailbox providers handle correspondence. Authorities or advisers may receive information where required by law or necessary for a legal claim.

We do not sell personal data, show ads or use inventory content for advertising.

Our operators are based in China and our providers use international infrastructure. Your data may be stored or accessed outside your country, including in North America. Where applicable law requires transfer safeguards, those requirements still apply. Contact us for information about a particular recipient or transfer.

How long we keep information

• Accounts and inventory: until the relevant account, item or household is deleted. Inactivity alone does not delete an account. Shared records can remain for other household members.
• Household sharing records, including invitations: until the household is deleted.
• Account and service records: usage counts are removed on account deletion. Some internal account and service identifiers and dates remain afterward without automatic expiry.
• Purchase records: our entitlement record is updated during verification and removed on account deletion. Stores and RevenueCat retain their own records under their terms and legal requirements.
• Logs and backups: hosting providers manage these under their service retention settings. Our server database keeps a rolling recovery history of about 30 days; older versions then fall outside that recovery window. Logs, other provider copies and device backups have separate lifetimes.
• Correspondence: remains in our mailbox until manually removed; deleting an app account does not automatically remove it. You may request erasure. Limited records may be retained where necessary for a legal obligation or claim.

Deleting your account

Use Settings > Delete Account, or email [email protected]. Deletion removes your live sign-in details, membership, usage counts and our purchase entitlement record, and ends server sessions. A household with no other member is deleted with its inventory; shared households remain for their other members.

Some shared content and internal identifiers remain as described above. Contact us if shared records contain personal information you want removed. We assess your request alongside other people's rights.

We also request RevenueCat deletion and Apple sign-in revocation where connected. These separate steps may take longer or need follow-up. The app clears its local inventory and sign-in state on the device used for deletion; other devices, temporary files and device backups are separate.

Children and sensitive information

The app is not designed for children under 13. Do not submit children's personal information, photos of people, identity documents, health information or other sensitive details to cloud AI. Your permission does not cover everyone mentioned or photographed.

Where child-consent rules apply, the UK threshold is 13 and EU thresholds vary from 13 to 16; younger children require parental authorisation. AI provider age restrictions may be stricter. The app has no age-verification or parental-consent flow. Contact us about information submitted without the necessary authorisation.

Legal bases and your rights

Where UK or EU GDPR applies, we rely on contract for requested account, sync, sharing and purchase services; consent for optional cloud AI; legitimate interests for security, reliability, usage statistics, enquiries and appropriate ordinary information about others in shared records; and legal obligations where applicable. Legitimate interests remain subject to your rights.

Depending on applicable law, you may request access, correction, deletion, restriction or a portable copy of your data, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting earlier lawful processing. We do not make solely automated decisions with legal or similarly significant effects; contact us to challenge an automated service restriction.

Email us to exercise your rights. We may need proportionate identity confirmation. Where GDPR applies, requests are normally free and due within one month; a permitted extension of up to two further months requires an explanation within the first month.

You can complain to us or, where applicable, the UK ICO or your EEA supervisory authority, without contacting us first. Applicable UK complaint rules require acknowledgement within 30 days. Judicial remedies remain available.

We will update this policy when our practices change and provide notice or seek fresh consent where required.