FoundFilm Privacy Policy

Last updated: October 19, 2026 · Version 1.1

This Privacy Policy explains how Reid Operating Systems Inc. ("we," "us," "our"), the developer of the FoundFilm mobile application ("FoundFilm," the "App"), collects, uses, shares, and protects your information. By using FoundFilm you agree to this Policy. If you do not agree, do not use the App.

1. Who this applies to

FoundFilm is a general-audience app and is intended only for people aged 14 and older. We do not knowingly collect personal information from children under 14. See "Children's Privacy" below.

2. Information we collect

a. Precise location. FoundFilm is a walk-to-collect game, so with your permission it collects your precise GPS location (latitude and longitude) while you use the map, in order to place and let you collect items near you. Precise location is collected while you use the App, and only after you grant the operating-system location permission. If you turn on nearby alerts, the App also uses your location in the background (the iPhone “Always” permission) to tell you when a print is close; background location is checked on your device only and is never sent to us. You can turn location off at any time in your device settings, and nearby alerts off in the App’s settings. FoundFilm needs your location to play: without it, only your account settings (Support, Terms, Privacy and account deletion) remain available.

b. Account and profile information. Your chosen username, profile bio, profile picture and background, the song you add to your profile through Apple Music, and, at account creation, your confirmation that you are 14 or older (we record that you confirmed it and when; we do not ask for or store your date of birth). If you sign in with Apple, we receive an identifier for your Apple account. We don't ask Apple for your name or email address. We also keep a token from Apple, stored encrypted, so that when you delete your account we can tell Apple to remove FoundFilm's access to your Apple account.

c. User-generated content. Comments you post, messages you send in the App, the names of your collections, and other content you create in the App. If you contact us through in-app support, we keep your messages and our replies so we can help you.

d. Purchases. Records of in-app purchases and subscriptions (what you bought and when). Payment card details are handled entirely by the app store you purchase through (Apple or Google); we do not receive or store your full payment information.

e. Gameplay and account data. Your collection of prints, in-app currency ("movie tickets") balance, experience/level/streak, trades, and other in-game activity. If another player invited you, we record who invited you and how many drops you've opened since you added them, up to 10.

f. Device and usage data. Device type, operating system version, app version, language, device and app-instance identifiers, general (non-precise) region, crash reports, and analytics about how you use the App (screens viewed, features used), which we keep for 14 days. If you allow notifications, we store a push notification token for your device. We store your device’s time zone so daily streaks follow your local day, and our servers use your IP address to protect the App from abuse and spam. Some of this may be collected through third-party tools listed below (for example: Sentry for crash reporting).

3. How we use your information

We use your information to: operate the game and the map; create and secure your account; process purchases and subscriptions; enable trading, comments, and other social features; provide customer support; prevent fraud, cheating, and abuse; comply with law; and improve the App.

Legal bases (for users in the EU/UK, GDPR). We process your information where we have a legal basis to do so: to perform our contract with you (running the App and your account); with your consent (precise location and notifications); for our legitimate interests (security, fraud prevention, understanding how the App is used, and improving it); and to comply with legal obligations. You may withdraw consent at any time.

Marketing messages. Where we send marketing or promotional messages by email or push notification, we do so in accordance with applicable anti-spam laws, including Canada's Anti-Spam Legislation, and you can opt out at any time using the unsubscribe mechanism in the message or in the App's settings. We will continue to send you non-promotional messages about your account or your purchases where needed.

De-identified information. We may create and use aggregated or de-identified information that can no longer reasonably identify you, and we will not attempt to re-identify it.

We do not sell your personal information. We share it only as follows:

Service providers who host our servers, store data, process crashes/analytics, or help us operate the App, under contract and only as needed.
App store providers (Apple, Google), for purchases, subscriptions, and sign-in.
Other players, for the parts of your profile and activity that are public in a social game: your username, profile picture and background, bio, profile song, collection of prints, movie-ticket balance, level and rank, your public comments, listings, and trade activity. We do not share private information in public content. If you add a player as the person who invited you, that player can see your username and how many drops you've opened toward their invite reward.
Legal and safety, where required by law or to protect rights, safety, and the integrity of the game.
Business transfers, in connection with a merger, acquisition, financing, reorganization, or sale of all or substantially all of our assets, in which case personal information may be transferred as part of that transaction and the recipient must continue to use it in a manner consistent with this Policy.
With your consent, where you ask us to share information or otherwise agree to the sharing.

5. Third-party services

Apple. Where you use FoundFilm on iOS, purchases and sign in with Apple are provided by Apple under Apple's terms.

Apple Music (MusicKit). Lets you add a song to your profile, with search and short previews. Searches go through our server and previews stream from Apple. Subject to Apple Music’s terms.

Capgo. Delivers live app updates and handles purchases through Apple StoreKit. Updates download from our own server and no personal data is sent to Capgo.

Cloudflare. Our servers and hosting. It passes game requests through to our database.

Google. Where you use FoundFilm on Android, purchases and Google Sign-In are provided by Google under Google's terms.

Google AdMob. We use Google AdMob to deliver optional rewarded ads you choose to watch. AdMob may collect device and ad identifiers, your IP address, and your ad interactions; the ad identifier is used only if you allow tracking. Where the law requires, including in the UK, a consent prompt is shown before ads. We do not use your precise location for advertising, and we do not sell your personal information.

Google Fonts. Loads the app’s font. Google sees your device’s IP address when the font loads.

Maps. The in-app map is drawn from tiles served by our own servers, not Google Maps or Apple Maps.

Sentry. Crash and error reporting. It receives error details, your device model, iOS version, and app version. It does not receive your name, and map locations are stripped out of reports.

Supabase. Our database and player accounts. It stores your account and in-game data, including your username, prints, movie tickets, purchases, profile, friends, and comments.

TMDB. FoundFilm uses movie data and images from The Movie Database. This product uses TMDB and the TMDB APIs but is not endorsed, certified, or otherwise approved by TMDB.

6. Location data (specific notice)

Because FoundFilm collects precise geolocation, we want to be clear: precise location is treated as sensitive personal information under laws such as California's CPRA, and as regulated personal information for anyone under 13 under COPPA. We collect precise location to run the map and location-based features and to prevent cheating, and only with your permission. To prevent cheating, we keep your most recent reported location and a record of map actions that look like spoofing (for example, impossible travel speed). Background location used for nearby alerts stays on your device and is never sent to us. We do not use precise location for advertising, and we do not sell it.

7. Data retention and deletion

We keep your personal information only as long as needed to provide the App and for the purposes described here, then delete or anonymize it. You can delete your account at any time from within the App (Settings), which deletes your account record and associated personal data. Where a valid deletion request is made, we act on it promptly and in any case within 30 days. When you delete your account, we delete your profile, pictures and login, and replace your name on past trades and comments with “a deleted player.” We keep a one-way scrambled (hashed) copy of usernames where needed to stop them being reused, and transaction records where the law requires. If you add who invited you, we also keep a one-way scrambled (hashed) copy of your Apple account identifier, including after you delete your account, so the same Apple account can't count toward an invite reward twice. If you remove FoundFilm from Sign in with Apple in your Apple account settings, we sign you out of FoundFilm, and your FoundFilm account stays until you delete it. If you permanently delete your Apple account, we delete your FoundFilm account. We may retain limited information where the law requires (for example, transaction records) or to prevent fraud and abuse.

8. Your privacy rights

Everyone: you can access and update your profile in the App, and delete your account in Settings.

Canada (PIPEDA and Quebec Law 25): If you are in Canada, you have the right to access the personal information we hold about you, to request correction of inaccurate information, and to withdraw your consent to our collection, use, or disclosure of your personal information (subject to legal and contractual restrictions and reasonable notice). If you are in Quebec, you also have the right to request the deletion or de-indexing of your personal information and to receive computerized personal information you provided to us in a structured, commonly used technological format. We will respond to written requests within 30 days. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada (OPC) or, in Quebec, the Commission d'accès à l'information (CAI). Our contact for privacy matters is privacy@foundfilm.app.

EU/UK (GDPR): you have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. We have appointed Prighter Ltd as our representative in the United Kingdom under Article 27 of the UK GDPR. If you are in the UK, you can contact our representative about data-protection matters:

Prighter Ltd, 20 Mortlake High Street, London SW14 8JN, United Kingdom

You can also reach them through Prighter’s online contact page: https://app.prighter.com/portal/foundfilm

California (CCPA/CPRA): you have the right to know what personal information we collect and how it is used and shared, to delete it, to correct it, and to limit the use of sensitive personal information (including precise location). We do not sell or "share" (as CCPA defines it) your personal information.

To exercise any right, contact us at privacy@foundfilm.app or info@foundfilm.app. We may need to verify your identity before acting on your request. We will not discriminate against you for exercising your rights.

9. Children's privacy

FoundFilm is for users 14 and older. At account creation you confirm that you are 14 or older; we do not encourage anyone to falsify their age. Where the law requires age checks (for example, in Texas), the App asks Apple for your age range; that answer stays on your device and is used only to keep out users under 14. If Apple tells us an existing account belongs to someone under 14, we delete that account. The App also sends us an install identifier from Apple (the app transaction ID), used only to find and lock an account a parent or guardian has turned off for their child. We do not knowingly collect personal information, including precise location, from children under 14. If we learn we have collected information from a child under 14, we will delete it. If you believe a child under 14 has provided us information, contact us at privacy@foundfilm.app.

10. International data transfers

We may process and store information in countries other than where you live, including Canada and the United States. Where required, we use appropriate safeguards for such transfers. While your information is outside your province or country, it is subject to the laws of the jurisdiction where it is located and may be accessible to the courts, law enforcement, and national-security authorities of that jurisdiction.

11. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a security breach involving your personal information creates a real risk of significant harm to you, we will notify you and report the breach to the applicable regulators, including the Office of the Privacy Commissioner of Canada and, in Quebec, the Commission d'accès à l'information, as required by law.

12. Changes to this Policy

We may update this Policy from time to time. We will post the new version in the App with an updated "Last updated" date, and, for material changes, provide additional notice where required.

13. Contact us

FoundFilm is operated by Reid Operating Systems Inc. For privacy questions or requests, contact us at privacy@foundfilm.app or info@foundfilm.app.

Person in charge of the protection of personal information (Quebec Law 25): Joshua Reid, Chief Executive Officer / Privacy Officer at privacy@foundfilm.app or info@foundfilm.app.

UK Representative. We have appointed Prighter Ltd as our representative in the United Kingdom under Article 27 of the UK GDPR. If you are in the UK, you can contact our representative about data-protection matters: