This Privacy Policy explains what personal information Fomoist (the "Service") collects, how we use it, and the choices you have. It should be read alongside our Terms of Service.
1. Information we collect
- Account: email address, password (stored as a salted Argon2id hash — we never store or can see your actual password), or, if you continue with Google, the profile info Google shares with your consent (name, email, profile photo).
- Profile: name, handle, city, bio, birth date, music tastes, social links, and profile photo, if you choose to add them.
- Activity: events you create or RSVP to, comments, instant events, circles, and similar content you create while using the Service.
- Consent: whether and when you accepted these policies, and whether you opted in to marketing email.
- Device and abuse-prevention data: a device identifier and IP address, used only to limit how many accounts can be created from one device or network in a short period.
- Push notifications: if you enable them, the push subscription endpoint your browser or device issues (or, on iOS, the device token Apple issues for push delivery).
- Safety: if you block another user or report content, we record who you blocked or reported, the reason, and any details you add. This is used only to enforce blocks and review reports — see §5 for how long it's kept.
- Crash diagnostics (iOS app only): if the app crashes, we automatically receive a crash log and basic device/app diagnostic info to help us find and fix the bug. This does not include your profile content.
2. How we use it
- To provide and operate the Service — your feed, RSVPs, comments, and notifications.
- To secure accounts and prevent abuse (signup rate limits, verifying your email).
- To send necessary account emails: email verification, password reset, and account deletion confirmation. These are not marketing and are sent regardless of your marketing preference.
- To send marketing emails about new features or events — only if you opted in, and you can opt out at any time in Settings.
- To understand product usage in aggregate, through the analytics provider described below.
3. Who we share it with
We do not sell your personal information. We share it only with:
- Resend — delivers our transactional emails (verification, password reset, account deletion).
- Mixpanel (EU-hosted) — product analytics, keyed to an internal account identifier, not your name or email.
- Google — if you choose "Continue with Google," to verify your identity for sign-in; and, via Firebase Crashlytics, to receive the crash diagnostics described above from the iOS app.
- Apple — via Apple Push Notification service (APNs), to deliver push notifications you enable on iOS.
- Amazon Web Services (S3) — stores images you upload, like event flyers and avatars.
- Our hosting provider, which processes standard infrastructure/request logs to run the Service.
Each of these providers only processes your data to perform the service described above for us, and provides the same or equal level of protection for your data as this policy describes.
4. Cookies and local storage
We use a session cookie to keep you signed in and a device-identifier cookie solely to enforce signup abuse limits. We do not use third-party advertising cookies.
5. Data retention and deletion
We keep your information while your account is active. You can delete your account at any time from Settings, which anonymizes your profile and deactivates content you created. If you want your data fully and permanently erased instead, contact us at support@fomoist.app.
Reports you file are kept to review the content or account reported. If you delete your account, any free-text details you added to a report are removed; the report itself (who was reported, when, and why) may be kept for moderation history. Blocks are removed when you delete your account.
6. Your rights and choices
- Access and update most of your profile information directly in Settings.
- Opt in or out of marketing email at any time.
- Request account deletion, as described above.
- Depending on where you live, you may have additional rights (such as access, correction, deletion, or portability) under laws like the GDPR or CCPA — contact us to exercise them.
7. Children's information
The Service is not directed to, and we do not knowingly collect personal information from, anyone under 13 (see our Terms of Service, "Eligibility and minimum age"). If we learn an account belongs to someone under 13, we permanently delete the account and the personal information tied to it — the auth record, profile, consent records, and related logs and identifiers we control. Some information may briefly persist in third-party systems listed above (for example, email-delivery or analytics logs) under those providers' own retention periods before it ages out or is separately removed. If you believe a child under 13 has an account, tell us at support@fomoist.app.
8. Security
Passwords are hashed with Argon2id before storage, and we check new passwords against known data-breach corpora to reject compromised ones. No method of transmission or storage is perfectly secure, but we work to protect your information using industry-standard practices.
9. Changes to this policy
We may update this Privacy Policy from time to time. If a change is material, we will ask you to re-accept it the next time you sign in.
10. Contact
Questions about this policy, or a request about your data? Reach us at support@fomoist.app.
