Friendor Privacy Policy
Overview
Friendor is a peer network for wedding vendors — a place to post gigs, discover collaborators, and message peers. This policy explains what we collect, how we use it, who processes it on our behalf, and the rights you have.
Friendor is published by Jose Negrete. Contact: josenegrete0910@gmail.com.
Information We Collect
- Account email — to authenticate and send service-related messages.
- Profile information — display name, bio, role, and city. You control and can edit these.
- Photos — your avatar and portfolio images you upload.
- User-generated content — gig posts, applications, and comments you create.
- Direct messages — the content of messages you send to other users.
- Push token — an Apple-issued identifier used to deliver notifications. We do not collect your IDFA.
- Anonymous usage and crash diagnostics — to improve reliability. Not linked to your identity; excludes message and gig contents.
- Feedback — when you use "Send Feedback," we store the body you send. Anonymous mode drops your user id server-side.
How We Use It
To operate the app: authenticate you, show your profile to peers, route DMs, publish gigs, deliver push notifications you have opted into, fix crashes, understand which features are used, and respond to support.
Friendor does not sell your personal data and does not use your data for advertising or third-party profiling.
Third-Party Processors
- Supabase — hosts our database, auth, and file storage. Your profile, gigs, DMs, and photos live on Supabase. supabase.com/privacy.
- Apple Push Notification Service — delivers push notifications. apple.com/legal/privacy.
- Sentry — anonymous crash reports and error diagnostics. Receives crash type, device model, OS version, and stack trace. Does not receive your email or message contents. sentry.io/privacy.
- PostHog — anonymous product analytics events (e.g., "opened gig detail"). Records the Supabase user id only — never email, name, or location. posthog.com/privacy.
- Stripe (when payments are enabled) — processes optional escrow payments for real-world services. Stripe handles card data directly; Friendor never sees full card numbers. stripe.com/privacy.
User-Generated Content, Reporting, and Blocking
Friendor is a UGC platform. You can report gigs, profiles, or messages that violate our Terms, and you can block any user from interacting with you. Reports go into an internal queue and are reviewed by Jose within 24 hours. Blocks take effect immediately and hide the blocked user's gigs, profile, and DMs from your view.
Instagram Connection (Optional)
Vendors on a paid supporter tier can optionally connect their professional Instagram account to auto-fill their portfolio. If you connect Instagram, we receive your Instagram username and a list of your recent media (image URLs, permalinks, timestamps) through Meta's Instagram API, and we store copies of up to 24 recent photos on our own servers so your portfolio keeps rendering after Instagram's temporary media links expire. The access token Instagram issues is stored encrypted on our servers and is never exposed to the app or to other users. A daily job keeps the photo set in sync while you remain connected. We never post, comment, message, or read insights on your behalf, and we never access any Instagram account other than the one you connect. You can refresh manually or disconnect at any time in the app; disconnecting immediately deletes our stored token and every synced photo copy. Removing Friendor's access from your Instagram settings, or deleting your Friendor account, triggers the same deletion.
Data Retention
We retain your account and content while the account is active. Direct messages are retained so both sides can continue to read them. When you delete your account (menu bar → Help → Delete Account…), your profile, posts, and messages are removed from production within 30 days. Encrypted backups may persist for an additional period before rotation.
Your Rights
You can review, edit, and export your profile, posts, and photos from inside the app. You can delete your account from the app's menu bar → Help → Delete Account…. You can also email josenegrete0910@gmail.com to request access to, correction of, or deletion of your data.
Children's Privacy
Friendor is rated 16+ and is not directed at children. We do not knowingly collect personal information from anyone under 16. If you believe a child has provided us with personal information, contact us and we will delete it.
Security
Data in transit is encrypted with TLS. Data at rest on Supabase is encrypted at the storage layer. No system is perfectly secure, but we take reasonable steps to protect your information.
Changes
We may update this policy. Material changes will update the "Last updated" date and be announced inside the app.
Contact
Questions? josenegrete0910@gmail.com.