Privacy Policy

1. Who we are

frndr is a directory of Instagram group chats, operated by [YOUR FULL LEGAL NAME], [YOUR COUNTRY (AND STATE, IF US)] (“frndr”, “we”, “us”). We are the data controller for the personal data described here. Contact: =nuthsaid5@gmail.com.

2. What we collect

When you just browse

Nothing that identifies you. When you tap Join, we count it using a code made from your IP address and browser type, scrambled with a secret that changes every day. We never store your IP address itself, and the code can’t be linked to you or to other days. Our hosting provider also keeps short-lived server logs, which include IP addresses, for security.

When you share a group page, or open a link someone shared with you, we count that the same anonymous way, so we know which groups people recommend. We don’t know who shared it or who they shared it with.

When you sign in to join a group

• From Google: your email address, your Google account ID, and your name (used only to pre-fill the form). We never see your Google password.
• From you: your name, Instagram username, birth year and country (required), and optionally your gender and the topics you’re interested in.
• Your choices: when you agreed to the Terms and which version; whether you opted in to marketing emails, and when; and whether you’re interested in becoming a group admin.
• Your activity: which groups you’ve joined through frndr, so we can show them as joined and suggest new ones.

We don’t ask for sensitive information such as health, religion or sexuality, and you can’t pick Faith or LGBTQ+ as an interest. Gender is optional and includes “Prefer not to say”. If you choose to join a group in those categories, your joined-groups list will show it. We use that only to mark the group as joined and to avoid suggesting it again, never for advertising, and you can delete it with your account at any time. Your Instagram username is what you tell us; we don’t connect to your Instagram account.

3. How we use it, and why

• To run your account and the join flow: signing you in, giving you invite links, showing groups as joined, and sharing your name and Instagram username with the admins of groups you join. Legal basis: performing our contract with you (the Terms).
• To keep frndr safe and lawful: enforcing the minimum age and the Community Rules, preventing abuse and fraud, and keeping records of your agreement to the Terms. Legal basis: legal obligations and our legitimate interest in a safe service.
• To suggest groups you’ll like, based on your interests, country and the groups you’ve joined. Legal basis: our legitimate interest in a useful directory. You can object at any time.
• To understand which groups are popular, using the anonymous join counts described above. Legal basis: legitimate interest.
• To send marketing emails (group picks, new chats, sponsored offers) only if you opted in, and to contact you about helping run a group if you said you’re interested. Legal basis: your consent, which you can withdraw at any time.

“Sponsored offers” means messages we send on behalf of partners. We never give your email or profile to advertisers. We don’t make automated decisions that have legal or similarly significant effects on you.

4. Who we share it with

• Group admins see your name and Instagram username when you join their group. Never your email, birth year, gender or country. Once they have them, they also become visible on Instagram as usual, under Instagram’s own privacy policy.
• Service providers who host and run frndr for us, under contracts that require them to protect your data and use it only on our instructions: Microsoft Azure (website hosting and email delivery), Supabase (database) and Google (sign-in).
• Authorities, when the law requires it, or to protect someone’s safety, for example in cases of child exploitation.
• A successor, if frndr is ever transferred to someone else. They would have to respect this policy.

We do not sell your personal data, and we don’t share it for cross-site or targeted advertising.

5. Cookies

We only use cookies that are strictly necessary to make frndr work, so we don’t show a cookie banner:

• nuxt-session: keeps you signed in. It’s encrypted, and it lasts 30 days, or until you sign out.
• frndr-next: remembers which page to bring you back to after Google sign-in. It lasts 10 minutes.

We don’t use analytics, advertising or social media tracking cookies. If that ever changes, we’ll update this policy and ask for your consent where the law requires it.

6. How long we keep it

• Your account and profile: until you delete your account. Deleting it removes your profile, interests, email preferences and joined-groups list straight away. Copies in our database provider’s backups are overwritten on its normal backup cycle.
• Anonymous join and share counts: up to 90 days.
• Server logs: kept briefly for security, then deleted by our hosting provider.
• Accounts of people under 13: deleted immediately when we find out.

We may keep limited records longer where the law requires it, or to deal with a legal claim or a serious Community Rules violation.

7. Your rights

Wherever you live, you can:

• see and correct your details on your account page;
• delete your account and data there at any time;
• withdraw consent: untick marketing emails or admin interest on your account page, or use the unsubscribe link in any email; and
• ask us for a copy of your data, or any other request, at =nuthsaid5@gmail.com. We reply within one month.

Depending on where you live, you have further rights:

• EU, UK and EEA: under the GDPR and UK GDPR you can access, correct, delete, restrict or port your data, object to processing based on legitimate interests, and complain to your local data protection authority (in the UK, the ICO).
• United States: residents of California and other states with privacy laws can request access, correction and deletion, and can opt out of sale or sharing. We don’t sell or share personal information as those laws define it. We won’t treat you differently for using your rights.
• Canada, Brazil, Australia and elsewhere: you have access and correction rights under your local law (for example PIPEDA or the LGPD). Contact us and we’ll help.

8. Age and children

frndr is not for children under 13, and you must also meet the minimum age for online services in your country (in some EU countries this is up to 16). We ask for your birth year to check this. If you’re below it, we don’t create a profile and we delete the account straight away. If you’re a parent and think your child has signed up, contact us and we’ll delete their data.

9. International transfers

Our service providers may process data in countries other than yours, including the United States and the European Union. Where data leaves the EU, UK or EEA, we rely on adequacy decisions or the European Commission’s Standard Contractual Clauses (and the UK addendum) to protect it.

10. Security

All connections use HTTPS, sign-in sessions are encrypted, and access to the database is restricted. No system is perfectly secure. If a breach affects your data, we’ll tell you, and the authorities, as the law requires.

11. Changes

We’ll update this policy when what we collect or how we use it changes, and show the new date at the top. For significant changes, we’ll tell you before they take effect.

12. Contact and complaints

For privacy questions or requests, email =nuthsaid5@gmail.com. If you’re not happy with our answer, you can complain to the data protection authority where you live.