finds Privacy Policy
Effective Date: August 1, 2026
Last Updated: August 18, 2026
SaturdayNYC Company ("finds," "we," "us," or "our") is a company registered in Delaware and headquartered in New York, New York. We operate the finds mobile application, website, and related services (collectively, the "Service"). This Privacy Policy explains what information we collect, how we use and disclose it, and the choices available to you.
If you have questions or want to exercise a privacy right, contact us at [email protected].
1. Information We Collect
1.1 Account and Authentication Information
When you create or access a finds account, we may collect your name, email address, account identifiers, and authentication information. Depending on the sign-in method you choose, authentication may be provided by Apple, Google, or an email-and-password credential.
When you use Apple or Google to sign in, we receive the information that provider makes available based on your settings. We do not receive your Apple or Google password. Authentication providers may process information under their own privacy policies.
1.2 Profile and Onboarding Information
We collect information you add to your finds profile or provide during onboarding, such as your display name, biography, profile photo, birthday, and taste preferences. We use your birthday to determine whether alcohol-related recommendations are appropriate for your age. We do not include your birthday in our product analytics events.
1.3 Content and Social Activity
We collect content and activity you create through the Service, including:
- Tastings, ratings, reviews, notes, favorites, and rankings
- Lists, collections, and bookmarks
- Photos you upload from your camera or photo library
- Comments, likes, follows, and other social interactions
- Referral and invitation activity
Your profile and social content may be visible to other finds users as described in the Service and according to any available visibility settings. Please do not post information you do not want others to see.
1.4 Search, Barcode, and Store Information
We collect your catalog searches, search-result interactions, and product identifiers, including barcodes decoded when you use the scanner. The camera is used to scan a barcode, but finds does not retain camera footage or barcode images for this purpose.
If you use a nearby-store, stocking, or similar location-based feature, finds may ask for your precise location at that time. We use it to return locally relevant results, which may involve sending coordinates and a search request to a mapping or place-search provider. finds does not collect background location. Location access is optional, and you can manage permission in your device settings.
1.5 Device, Usage, and Analytics Information
We collect information about how you use the Service, including product interactions, screens and features used, referral or acquisition source, session information, app version, operating system, device platform, general network status, and related event timestamps.
We use PostHog for product analytics. After you sign in, analytics are associated with stable account identifiers, and we may provide PostHog with your name and email address as part of the associated user profile. We use sampled session replay in the mobile app to diagnose usability and reliability problems. Replay is configured to mask all displayed text, text inputs, images, and sensitive system views, and not to collect application logs or network telemetry. We do not intentionally include tasting notes, comment text, search terms, precise location, photos, or your birthday in PostHog product events or readable replay content.
1.6 Crash and Error Information
We use Sentry and PostHog to diagnose errors, crashes, and performance problems. Reports may include technical details about the app, device, app state, and the action that led to an error. We configure these tools to redact sensitive fields such as credentials, authorization tokens, email fields, search text, and free-form notes from error context where practical.
1.7 Notifications and Communications
If you enable push notifications, we collect an app installation identifier, push token, device platform, app environment, app version, and notification delivery information. You can disable push notifications in your device settings.
If you join a waitlist, contact support, or subscribe to communications, we collect the contact information and message you provide. We may send account, security, service, launch, product, and marketing communications. You can opt out of marketing emails using the unsubscribe link in those messages, but we may still send non-promotional messages needed to operate your account or the Service.
1.8 Information Collected Automatically on the Website
Our website and infrastructure may collect ordinary technical information such as IP address, browser type, requested pages, timestamps, cookies or similar identifiers, and security logs. We use this information to operate, secure, and understand the website and its signup flows.
1.9 Contacts (Friend Matching)
If you choose to find friends from your contacts, finds asks for permission to access your device address book. When you allow it, your device converts each contact's phone number and email address into a scrambled (hashed) value on your device, and only those hashed values are sent to us — the underlying names, phone numbers, and email addresses of your contacts are not transmitted to or stored by finds. We use the hashed values to identify which of your contacts already have a finds account so we can suggest them to you, and to let a contact know when someone in their address book joins. You can decline this permission, and you can disconnect contact matching at any time in Settings, which deletes the hashed values we stored. Contacts access is optional and is never required to use the Service.
1.10 Phone Number and Verification
If you add a phone number, we collect it and verify it by sending a one-time code via SMS through our messaging provider. We use your phone number to help friends find you through contact matching and to secure your account. Your phone number is not shown on your public profile. Verifying a phone number is optional, and standard message and data rates from your carrier may apply. Message frequency varies based on your account activity. You can opt out of SMS messages at any time by replying STOP, and you can reply HELP for help.
No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All the above categories exclude text messaging originator opt-in data and consent; this information will not be shared with any third parties.
2. How We Use Information
We use information to:
- Create, authenticate, maintain, and secure accounts
- Provide profiles, tastings, rankings, lists, recommendations, social features, search, barcode lookup, and notifications
- Personalize the Service, including age-appropriate catalog recommendations
- Store and display content according to the way you use and share it
- Measure feature usage, attribute signups, troubleshoot problems, and improve the Service
- Communicate about accounts, security, support, product updates, launches, and marketing
- Detect fraud, abuse, security incidents, and violations of our Terms of Service
- Comply with law and protect the rights, safety, and integrity of finds, our users, and others
finds may use artificial intelligence to ingest, classify, and enrich product-catalog information. We do not submit user-created profiles, notes, comments, searches, photos, or other user content to AI providers.
3. How We Disclose Information
We do not sell your personal information. We also do not share personal information for cross-context behavioral advertising as those terms are defined by applicable privacy law. No mobile information (including phone numbers and SMS opt-in consent) will be shared with third parties or affiliates for marketing or promotional purposes.
We may disclose information in the following circumstances:
3.1 Other Users and the Public
Other finds users may see your profile, tastings, ratings, photos, comments, lists, followers, following, and other social activity based on the Service's design and any available visibility settings. Information you share with others may be copied or saved by them before you delete it or change its visibility.
3.2 Service Providers
We use providers to operate the Service, including:
- Apple and Google for authentication
- PostHog for identified product analytics, sampled mobile session replay, and error monitoring
- Sentry for crash and error reporting
- Cloud hosting, database, storage, and content-delivery providers, including Amazon Web Services
- Expo and device-platform providers for push notifications
- Google Places or similar providers for store and location-based searches
- Email, customer-support, security, and operational providers
These providers may process information on our behalf as needed to perform their services and under their own applicable terms and privacy commitments.
3.3 Legal, Safety, and Enforcement Reasons
We may disclose information if we reasonably believe it is necessary to comply with law, regulation, legal process, or an enforceable government request; enforce our agreements; investigate fraud, abuse, or security incidents; or protect the rights, property, or safety of finds, our users, or others.
3.4 Business Transfers
Information may be disclosed or transferred as part of a financing, merger, acquisition, reorganization, bankruptcy, sale of assets, or similar transaction. Where required, we will notify you before your personal information becomes subject to a materially different privacy policy.
3.5 With Your Direction or Consent
We may disclose information when you ask us to do so or otherwise provide consent.
4. Data Retention
We retain personal information only for as long as reasonably necessary for the purposes described in this policy, including to provide the Service, maintain security, resolve disputes, and comply with legal obligations.
- Account, profile, and social content: Retained while your account is active. If you delete your account, we will delete or de-identify the account and associated user-generated content within 30 days, unless retention is required by law or reasonably necessary for security, fraud prevention, dispute resolution, or the establishment or defense of legal claims.
- Search analytics: Catalog search requests and validated result interactions may be retained for up to 90 days for search-quality measurement and abuse prevention.
- Waitlist and marketing information: Retained until you unsubscribe, ask us to delete it, or it is no longer reasonably needed for the relevant communication purpose.
- Security, analytics, and error information: Retained according to our operational needs and the applicable provider settings and retention schedules.
- Backups: Information may remain for a limited period in encrypted or access-restricted backups before being overwritten through our ordinary backup cycle. We do not restore deleted information to active use except where needed for disaster recovery, security, or legal compliance.
5. Your Choices and Rights
5.1 Account and Content Controls
You may update profile information and manage content through the App. You may delete your finds account through the App's settings. Account deletion removes your account and associated personal data as described in Section 4.
5.2 Device Permissions
You may deny or revoke access to location, camera, photo library, contacts, and push notifications through your device settings. Some related features may not work without the relevant permission, but background location is not required.
5.3 Marketing Choices
You may unsubscribe from marketing email using the link included in the message or by contacting us. You may disable promotional push notifications through the controls made available in the App or your device settings.
5.4 Privacy Requests
Depending on where you live, you may have rights to request access to, correction of, deletion of, or a portable copy of your personal information; restrict or object to certain processing; or withdraw consent where processing is based on consent. You may also have the right to appeal a decision concerning a privacy request and to complain to your local data-protection authority.
To submit a request, email [email protected]. We may need to verify your identity before completing a request. We will not discriminate against you for exercising an applicable privacy right.
5.5 EEA and United Kingdom Users
Where European data-protection law applies, SaturdayNYC Company is the controller of your personal data. We rely on the following legal bases:
- Performance of a contract: To create your account and provide the features you request
- Legitimate interests: To secure, maintain, analyze, and improve the Service; prevent abuse; and communicate necessary service information
- Consent: For optional device permissions and marketing where consent is required
- Legal obligations: To comply with applicable law and valid legal process
You may object to processing based on legitimate interests and may withdraw consent at any time, without affecting processing that occurred before withdrawal.
5.6 California Users
Where the California Consumer Privacy Act applies, California residents may request to know, access, correct, or delete personal information and may request information about the categories of information collected, used, and disclosed. We do not sell personal information or share it for cross-context behavioral advertising, and therefore do not offer an opt-out for activities we do not perform. We use sensitive information, such as precise location when requested, only to provide the relevant feature and other purposes permitted by law.
6. Children's Privacy and Alcohol-Related Content
finds is intended for people aged 13 and older. We do not knowingly collect personal information from children under 13. If we learn that a child under 13 provided personal information, we will take reasonable steps to delete it. A parent or guardian who believes a child under 13 has used finds should contact us.
Alcohol-related catalog content is not intended to encourage underage purchase or consumption. We use birthday information to limit alcohol-related recommendations and expect users to comply with the laws applicable where they live.
7. Data Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information, including access controls, encrypted network transport, protected cloud infrastructure, and encryption of stored OAuth tokens. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
8. International Data Transfers
SaturdayNYC Company is headquartered in New York, United States, and our providers may process information in the United States and other countries. Those countries may have different data-protection laws than your country of residence. Where required, we use contractual or other lawful transfer mechanisms designed to protect information transferred internationally.
9. Third-Party Services and Links
The Service may link to or interact with third-party services, stores, product pages, authentication providers, maps, and websites. Their privacy practices are governed by their own policies, and we are not responsible for services we do not control.
10. Changes to This Policy
We may update this Privacy Policy as the Service changes. If a change materially affects your rights or how we use personal information, we will provide notice through the Service, by email, or through another appropriate method. The "Last Updated" date above identifies the current version.
11. Contact Us
For questions, concerns, or privacy requests, contact:
SaturdayNYC Company
New York, New York, United States
Email: [email protected]
Website: https://finds.nyc