Privacy Notice

Information collected

Account email, preferred warehouse, receipts and purchase details, price reports and photos, recovery outcomes and evidence, notifications, trust signals.

How information is used

Purchase memory, price comparison, verification, recovery guidance, fraud prevention, aggregate product analytics.

Evidence uploads

Receipt documents, shelf-tag photos and recovery photos are private, not public uploads. Authorized Found staff can review them. Amazon Web Services (AWS) stores and processes relevant account, purchase and evidence data. Amazon Textract may process receipt photos and PDFs to extract receipt details. Shelf-tag photos may be processed by Amazon Bedrock to extract price evidence and provide internal recommendations; human reviewers remain responsible for verification in this release.

Photo metadata

Before upload, the Found app re-encodes photos on your device, which removes embedded metadata such as camera location (GPS), device details and capture time. If a photo cannot be re-encoded, Found removes that metadata before upload or refuses the photo. PDF receipts are uploaded as provided. Photos uploaded before this safeguard existed may, in rare cases, still contain their original metadata.

Optional device location

Only after you tap Add location and grant browser permission, Found takes one location reading to compare with your selected warehouse. Precise coordinates are processed temporarily and are not stored. We retain a coarse distance band, accuracy band, consistency result and evaluation time with the private report. Location is optional and is never shared with other shoppers.

AI analysis records

Private structured extraction results, confidence, system signals and model/prompt versions support human review and evaluation. Raw model replies are not retained or made public. These records are removed when the associated account and report are deleted.

Sharing

Other shoppers may see verified community price facts and aggregate impact, but not your receipt documents, recovery photos, private shelf-tag photos or purchase history.

Security

Found uses authenticated, user-scoped access to private records, private evidence storage, encrypted network connections and stored data, and short-lived links for authorized evidence viewing. Administrator access uses a separate sign-in system configured to require multi-factor authentication. No service can promise absolute security.

Technical logs

Application and API infrastructure may record technical request data, including IP/network metadata, request identifiers, routes, status codes and timing. Found application error diagnostics use controlled codes rather than raw exception text. The current infrastructure configuration sets application, API access, maintenance and web log retention to 30 days. Account deletion does not individually erase entries in those logs.

Retention

Account records and uploaded evidence do not have a general automatic expiry; they are retained until removed through account deletion. Operational and audit records and database backups may remain separately from active account records. Deletion from the active application does not immediately erase backups or technical logs.

On your device, an unfinished receipt draft is valid for less than seven days since its last local save. When the receipt editor next checks it, an expired or invalid draft and its associated local photo are deleted. A photo without a draft is also cleaned up. Cleanup is attempted after successful receipt submission and sign-out. Leaving the editor keeps an active draft for resuming. Cleanup cannot run while the browser is closed and may be delayed if browser storage is unavailable; clearing this site’s browser data removes local copies.

Deletion

You can request account deletion in Account settings or contact us for help. An in-app deletion request blocks further account access; removal runs asynchronously through maintenance after a minimum ten-minute delay and retries on failure. It removes the sign-in account, private evidence files, account records and associated receipt, purchase and report records. Verified community price facts may remain with reporter links removed. A minimal account-deletion marker remains to reject old sign-in tokens; operational, security and audit records and backups may also remain. This is not immediate erasure of every copy.

Your choices

Email alerts are opt-in.

Contact

For privacy questions, deletion requests and private-beta support, contact support@joinwefound.com. This is a monitored mailbox.