Privacy Policy

DRAFT — pending review by counsel; not yet a binding legal document.

What we collect

Account data: email, username, display name, date of birth (18+ verification), profile customization.
Content: posts, replies, reposts, tags, likes (public), saves (private), direct messages.
Usage telemetry: impressions, dwell time and interactions, kept as raw events for 90 days, then only as daily aggregates.
Payment data: handled by our payment processors (Stripe / app stores); we never store card numbers.

What is public and what is private

Your profile, posts, follows, and likes are public.
Your saves, the tags you follow, who you block or mute, and your direct messages are private.
Your date of birth and age-verification status are never shown to anyone.
When you report content, the person you reported is never told who reported them.

Content screening

Uploaded media is currently restricted by file type and size (JPEG, PNG, GIF, or WebP, up to 5MB) before it can be posted. Automated hash-matching against known illegal material and machine classification of uploaded media are not yet active; every image post goes through a moderation queue, but without an automated content-safety scan behind it today. Where the law requires it, we report content and preserve related records for statutory retention periods.

Retention

Notifications: 180 days.
Raw usage telemetry: 90 days (aggregates: 2 years).
Moderation and legal-compliance records (including copyright and report records): retained as legally required, independent of account deletion.
Messages and content: kept while your account exists, or until you delete them.

Biometric data (reviewer voice profiles)

Fanfiled does not currently collect biometric data from platform users. Before public launch, our early testers (“reviewers”) sign a nondisclosure agreement with Fanfiled that separately covers calls with the Fanfiled team. Under that agreement, when a reviewer takes part in a call or meeting Fanfiled organizes, our AI note-taking and call-recording tools may create a voice profile (voiceprint) of the reviewer, solely to label who is speaking in the recording and transcript. We do not sell, lease, or trade voice profiles. We disclose them only to the note-taking or recording provider that creates them, or as the law requires. We delete a reviewer’s voice profile (or have the provider delete it) once it is no longer needed for that purpose, and in any event within three years after the reviewer’s last interaction with Fanfiled. A reviewer may withdraw this consent at any time by emailing us (see “Contact” below); we then stop using the voice profile and delete it within 30 days. We do not collect any other biometric identifier (including for age verification) from anyone, reviewer or platform user, without that person’s separate written consent.

Deletion and export

You can request account deletion or a machine-readable export of your data in Settings. Deletion removes your content and personal data except records we are legally required to keep (for example, preserved moderation records). Items under an active legal hold are deleted once the hold clears.

Sharing

We do not sell personal data. We share data with service providers that operate the platform (hosting, storage, payments), and with authorities where the law requires (for example, mandatory NCMEC reports). If we activate automated content-safety scanning (see “Content screening” above), this section will be updated to name any vendor involved before that scanning goes live.

The GIF/sticker picker in the composer and direct messages is powered by GIPHY. When you use it, your search terms and IP address are sent directly from your browser to GIPHY (a Meta company) to retrieve results—this happens live, whether or not you post the result. See GIPHY’s own privacy policy for how they handle that data.

Contact

[Privacy contact address — to be completed before launch.]