Privacy Policy

Introduction

Found a Cross ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our mobile application, and use our services.

Information We Collect

Personal Information

We may collect personal information that you voluntarily provide to us when you:

• Create an account
• Register a cross find
• Subscribe to our newsletter
• Contact us
• Participate in our community features
• Use our mobile application

This information may include:

• Name or display name
• Email address
• Password (stored securely using encryption)
• General location (city, state, country)
• Messages and notes you choose to share

Location Information

When you register a cross find, we collect location information to track the cross's journey. This may include city, state/region, and country. We do not store precise GPS coordinates publicly. You can choose to provide a general location description instead.

Our mobile application may request access to your device's location services to help you register cross finds. This is optional, and you can deny or revoke this permission at any time through your device settings.

Mobile App Information

When you use our mobile application, we may collect:

• Device Information: Device type, operating system version, and unique device identifiers
• Push Notification Tokens: If you enable push notifications, we collect tokens to send you notifications about cross finds, messages, and community activity
• Biometric Data: If you enable biometric login (fingerprint or face recognition), authentication is handled entirely by your device's secure hardware. We do not collect, store, or transmit your biometric data. We only store an encrypted credential on your device to facilitate automatic login.
• Login Credentials: If you enable "Remember Me" or biometric login, your credentials are stored securely on your device using encrypted storage (Android Keystore). These are never transmitted to our servers in plain text.

Automatically Collected Information

When you access our website or mobile app, we may automatically collect certain information about your device, including your IP address, browser type, operating system, access times, and referring website addresses.

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Track cross journeys and display them on our platform
• Send push notifications about cross finds, messages, and community activity (if you opt in)
• Respond to your inquiries and provide customer support
• Send newsletters and updates (with your consent)
• Protect against fraudulent or unauthorized activity
• Comply with legal obligations

Information Sharing

We may share your information in the following situations:

• Public Display: Your display name and general location are shown publicly when you register a cross find. Messages you share are also displayed publicly.
• With Your Consent: We may share your information with third parties when you give us explicit permission to do so.
• Legal Requirements: We may disclose your information if required by law or in response to valid legal requests.

Third-Party Services

We use the following third-party services:

• Google Firebase: For push notifications and analytics. Firebase may collect device identifiers and usage data. See Firebase Privacy Policy.
• Google Play Services: For app distribution and in-app functionality on Android. See Google Privacy Policy.

Our website and app may contain links to other third-party websites or services. We are not responsible for the privacy practices of these third parties.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• HTTPS encryption for all data transmission
• Secure password hashing
• Encrypted credential storage on mobile devices
• Regular security updates

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. If you delete your account, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal purposes.

Your Rights and Choices

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your account and personal data
• Opt out of marketing communications
• Disable push notifications through your device settings or app preferences
• Revoke location permissions through your device settings
• Disable biometric login through the app settings

To exercise these rights, please contact us using the information provided in the Contact section.

Cookies and Tracking

We use cookies and similar technologies to enhance your experience on our website. These may include session cookies, persistent cookies, and analytics cookies. You can control cookies through your browser settings.

Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it.

California Privacy Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your information, and the right to opt out of the sale of your information. We do not sell your personal information.

International Users

If you are accessing our services from outside the United States, please be aware that your information may be transferred to and processed in the United States, where our servers are located. By using our services, you consent to this transfer.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also notify you through push notifications or email.

Contact Us

If you have questions about this Privacy Policy or our privacy practices, please contact us at:

• Email: support@foundacross.com
• Contact Form: Contact Us