FoundFilm ← Back

FoundFilm Privacy Policy

Last updated: October 22, 2026 · Version 1.0

This Privacy Policy explains how Reid Operating Systems Inc. ("we," "us," "our"), the developer of the FoundFilm mobile application ("FoundFilm," the "App"), collects, uses, shares, and protects your information.

1. Who This Applies To

FoundFilm is a general-audience app and is intended only for people aged 16 and older. We do not knowingly collect personal information from children under 16. See "Children's Privacy" below.

2. Information We Collect

a. Precise Location. FoundFilm is a walk-to-collect game, so with your permission it collects your precise GPS location (latitude and longitude) while you use the map, in order to place and let you collect items near you. Precise location is collected while you use the App, and only after you grant the operating-system location permission. Nearby alerts are optional and off by default. If you turn them on, the App also uses your location in the background (the iPhone "Always" permission) to tell you when a print is close. The App may ask you once (and once more a week later) whether to turn them on, and you can also turn them on or off in Settings. iOS then asks you to allow Always location, and if you don't, they stay off. Background location is checked on your device only and is never sent to us. You can turn location off at any time in your device settings, and nearby alerts off in the App's settings. FoundFilm needs your precise location for the map. Without it, or if Precise Location is turned off, you can't see or open drops on the map, but the rest of the App (Box Office, Inbox, your profile, the shop, quests and Settings) still works.

b. Account and Profile Information. Your chosen username, profile bio, profile picture and background, and the song you add to your profile through Apple Music. At account creation, we record that you confirmed you are 16 or older, and when; we do not ask for or store your date of birth. We also record when you accepted the in-app safety notice. When you sign in with Apple, we receive an identifier for your Apple account. We don't ask Apple for your name or email address. We also keep a token from Apple, stored encrypted, so that when you delete your account we can tell Apple to remove FoundFilm's access to your Apple account. We also record which version of the Terms of Service and this Privacy Policy you agreed to, in which language, and when. If you allow it, the App uses your camera or photo library only to pick a profile picture, background or Dark Room cover, and saves a print image when you tap Save Image. Pictures are resized on your phone before upload, which removes hidden details such as where a photo was taken.

c. User-Generated Content. Comments you post, offer messages and listing notes, the names of your Dark Rooms and the notes and cover pictures you add to them, and other content you create in the App.

Reports. If you report another player or a comment, we keep your report and the reason you give, and any action we take. Other players may also report you.

Support Messages. If you contact us through in-app support, we keep your messages and our replies to assist you. If you email us (for example to report a location or ask about your privacy), we receive your email address and message and keep them to reply and keep a record.

d. Purchases. Records of in-app purchases (what you bought, when, the FoundFilm account it was made on, Apple's transaction reference, your App Store country, and any refunds), and the install identifier Apple gives your copy of the App. We don't send Apple any information about your refund requests. To apply our refund rules, each Movie Ticket purchase record also keeps a scrambled (hashed) copy of the Apple Account it was made with; we remove it 2 years after the purchase and never keep it for a player we know is under 18. Where Apple shares your age range, the App sends us only a yes or no for whether you are under 18 with the purchase, and we never store that answer. The copy is also erased if an account is deleted because its owner is under 16. Payment card details are handled entirely by Apple; we do not receive or store your payment information.

e. Gameplay and account data. Your collection of prints, your movie tickets (in-app currency) balance, experience, level and streak, your trades, and other in-game activity.

Referrals. If a friend invited you and you add their username or invite code within 7 days of creating your account, we record who invited you and count the drops you open after that, up to 10, to check whether your friend has earned a referral reward. Your friend can see your username and this count on their Referrals page. If you invite friends, we record who joined using your username or code, their progress, and the rewards you have earned. To stop the same Apple account from earning a reward twice, we keep a scrambled copy of its ID (see section 7).

App opens. We record the days you open the App (the date only, no location) to understand how often the App is used, and we keep this record for 3 days.

f. Device and Usage Data. Crash reports, which include your device model, operating system version and app version. If you allow notifications, we store a push notification token for your device. We store your device's time zone so daily streaks follow your local day. Our servers use your IP address to protect the App from abuse and spam and to find and fix problems. Our hosting provider, Cloudflare, keeps it in server logs for some requests, together with an approximate location worked out from it (about city level), and deletes these logs after 7 days. Our database provider, Supabase, keeps IP addresses in its security logs for 7 days. Some of this may be collected through third-party tools listed below (see section 5). Usage statistics: our own analytics send only a random device ID that is not linked to your account, a session ID, the App version and which screens and features you use, and we keep them for 14 days. If your phone is set to Canada or the United Kingdom, this is off until you say yes: the App asks you once, and you can change it any time in Settings > Privacy. Everywhere else it is on by default and you can turn it off at any time in Settings > Privacy > Usage Stats; the App then stops sending usage events and deletes its analytics device ID. Usage events are never sent before you agree to the Terms (the 16+ box), apart from a plain count of sign-ins with no device ID. Turning Usage Stats off doesn't stop crash reports, that plain sign-in count or our 3-day record of the days you open the App.

3. How We Use Your Information

We use your information to: operate the game and the map; create and secure your account; process purchases and subscriptions; enable trading, comments, and other social features; provide customer support; prevent fraud, cheating, and abuse; comply with law; and improve the App.

Legal bases (for users in the United Kingdom, UK GDPR). We process your information where we have a legal basis to do so: to perform our contract with you (running the App and your account); with your consent (precise location, notifications, usage statistics and, if offered, ads); for our legitimate interests (security, fraud prevention and anti-cheat checks, and improving the App); and to comply with legal obligations. You may withdraw consent at any time.

Marketing messages. Where we send marketing or promotional messages by email or push notification, we do so in accordance with applicable anti-spam laws, including Canada's Anti-Spam Legislation, and you can opt out at any time using the unsubscribe mechanism in the message or in the App's settings. We will continue to send you non-promotional messages about your account or your purchases where needed.

De-identified information. We may create and use aggregated or de-identified information that can no longer reasonably identify you, and we will not attempt to re-identify it.

Automatic decisions. If Apple's age range for your Apple Account says you are under 16, the App blocks access and deletes your account. If three Movie Ticket packs bought on your account are refunded, the account is banned automatically. If a parent or guardian turns FoundFilm off through Apple, the account is locked. A new account made with the same Apple Account as a deleted account that was banned, owed Movie Tickets or had refund strikes starts with that ban, balance or strikes. A drop open that would need impossible travel speed, or is too far from the drop, is refused (we never ban for this automatically). The App tells you when this happens. You can ask a person on our team to review the decision, and ask which information was used and the main reasons for it, at privacy@foundfilm.app.

4. How We Share Your Information

We do not sell your personal information. We share it only as follows:

5. Third-Party Services

Apple. Purchases, subscriptions, Sign in with Apple and push notifications are provided by Apple under Apple's terms. Apple tells us about your purchases, renewals and refunds, and if you stop using Sign in with Apple with FoundFilm (we sign you out) or delete your Apple Account (we delete your FoundFilm account, unless it is banned).

Apple Music (MusicKit). Lets you add a song to your profile, with search and short previews. Searches go through our server and previews stream from Apple.

Cloudflare. Runs part of our servers, stores profile pictures, backgrounds and Dark Room covers, serves the map and App updates, and protects the App from abuse. It keeps logs of some requests, which can include your IP address and an approximate location worked out from it, for 7 days.

Google AdMob. If we offer optional rewarded ads, Google AdMob delivers the ads you choose to watch in return for an in-game reward. The ads are not personalized. To serve ads, limit how often you see them and prevent fraud, AdMob may collect device identifiers, your IP address, device information and your ad interactions, and handles this data under Google's privacy policy. Where the law requires, including in the UK, we will ask for your consent before showing any ads. We do not use your precise location for advertising, and we do not sell your personal information.

Sentry. Crash and error reporting. It receives error details, your device model, iOS version, and app version. It does not receive your name or player ID, and map locations are stripped out of reports. Sentry stores reports in the United States, and IP address storage is turned off.

Supabase. Our database and player accounts, hosted in Canada. Its security logs, which can include your IP address, are stored in the European Union for 7 days, and its support staff in the United States and Singapore may access data to operate the service. It stores your account and in-game data, including your username, prints, movie tickets, purchases, profile, friends, and comments.

TMDB. FoundFilm uses movie data and images from The Movie Database. Movie information is fetched through our servers, but poster images load directly from TMDB, so TMDB sees your device's IP address when a poster loads. This product uses TMDB and the TMDB APIs but is not endorsed, certified, or otherwise approved by TMDB.

OpenStreetMap. Map data © OpenStreetMap contributors, available under the Open Database Licence. We host the map ourselves, so nothing about you is sent to OpenStreetMap.

6. Location Data (Specific Notice)

Precise location is treated as sensitive personal information under laws such as California's CPRA, and as regulated personal information for anyone under 13 under COPPA. In Quebec, it is sensitive personal information under the Act respecting the protection of personal information in the private sector. We collect precise location only while you use the App, to run the map and location-based features and to prevent cheating, and only with your permission. We keep no history of where you have been.

What we keep, and for how long:

We do not use precise location for advertising, and we do not sell it.

7. Data Retention and Deletion

We keep your personal information only as long as needed to provide the App and for the purposes described here, then delete or anonymize it. In particular:

You can delete your account at any time in Settings, including from the ban screen. When you do, we delete your personal information, except: a one-way scrambled (hashed) copy of your past usernames, so they can't be reused; if you used an invite, a hashed copy of your Apple Account identifier, so the same Apple Account can't earn an invite reward twice; if you delete your account while you owe Movie Tickets, have refund strikes, or are banned, a hashed copy of your Apple Account identifier with only that information, so it applies again if you return with the same Apple Account (this also covers a refund that arrives after you delete your account); and the records listed above that the law requires us to keep or that we need to prevent fraud and abuse or to resolve a report, dispute or legal claim. We delete these hashed copies after 2 years. We never keep a hashed copy for an account deleted because its owner is under 16. Your comments are deleted, and your name on past trades shows as "deleted player".

8. Your Privacy Rights

Everyone: you can access and update your profile in the App, and delete your account in Settings.

Canada (PIPEDA and Quebec Law 25): If you are in Canada, you have the right to access the personal information we hold about you, to request correction of inaccurate information, and to withdraw your consent to our collection, use, or disclosure of your personal information (subject to legal and contractual restrictions and reasonable notice). If you are in Quebec, you also have the right to request the deletion or de-indexing of your personal information and to receive computerized personal information you provided to us in a structured, commonly used technological format. We will respond to written requests within 30 days. If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada (OPC) or, in Quebec, the Commission d'accès à l'information (CAI). Our contact for privacy matters is privacy@foundfilm.app.

United Kingdom (UK GDPR): you have the right to access, correct, delete, restrict, or object to processing of your personal data, to data portability, and to withdraw consent. You can contact us directly at privacy@foundfilm.app or through our UK representative, Prighter Ltd (see section 13). You may also complain to the UK Information Commission (formerly the Information Commissioner's Office), at ico.org.uk.

California (CCPA/CPRA): you have the right to know what personal information we collect and how it is used and shared, to delete it, to correct it, and to limit the use of sensitive personal information (including precise location). We do not sell or "share" (as CCPA defines it) your personal information.

Other countries: depending on where you live, you may have other rights under local privacy laws, such as the right to access, correct or delete your personal information or to complain to your local data protection authority. Contact us and we will respond as your local law requires.

To exercise any right, contact us at privacy@foundfilm.app. We may need to verify your identity before acting on your request. We will not discriminate against you for exercising your rights.

9. Children's Privacy

FoundFilm is for users 16 and older. At account creation you confirm that you are 16 or older and, if you are under the age of majority where you live, that your parent or guardian has agreed to our Terms of Service; we do not encourage anyone to falsify their age. Where the law requires age checks, the App asks Apple for your age range; that answer stays on your device and is used to keep out users under 16 and, when you buy Movie Tickets, to send us only a yes or no for whether you are under 18, so that we keep no buyer identifiers for under-18 players (we never store the answer). If Apple tells us an existing account belongs to someone under 16, we delete that account; if that account is banned, our team deletes it within 7 days. If a parent or guardian turns FoundFilm off through Apple, we lock the account until they turn it back on; to unlock it, contact support. The App also sends us an install identifier from Apple. We use it to find and lock an account a parent or guardian has turned off for their child, to tie each purchase to the Apple Account that bought it, including purchases you restore, to apply our refund rules, and to stop one Apple Account being used on more than 3 FoundFilm accounts. We do not knowingly collect personal information, including precise location, from anyone under 16. If we learn we have collected information from someone under 16, we will delete it. If you believe someone under 16 has provided us information, contact us at privacy@foundfilm.app.

10. International Data Transfers

We may process and store information in countries other than where you live, including Canada, the United States, the European Union (our database provider's security logs) and Singapore (our database provider's support staff). Where required, we use appropriate safeguards for transfers, such as the UK's International Data Transfer Addendum to the EU Standard Contractual Clauses or the UK Extension to the EU-US Data Privacy Framework. You can ask us for a copy of these safeguards at privacy@foundfilm.app.

Before we communicate personal information about Quebec players outside Quebec, we assess whether it will receive adequate protection.

While your information is outside your province or country, it is subject to the laws of the jurisdiction where it is located and may be accessible to the courts, law enforcement, and national-security authorities of that jurisdiction.

11. Security

We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a security breach involving your personal information creates a real risk of significant harm to you, we will notify you and report the breach to the applicable regulators, including the Office of the Privacy Commissioner of Canada, in Quebec the Commission d'accès à l'information, and for UK users the UK Information Commission (formerly the Information Commissioner's Office), as required by law.

12. Changes To This Policy

We may update this Policy from time to time. We will post the new version in the App with an updated "Last updated" date, and, for material changes, provide additional notice where required.

13. Contact Us

FoundFilm is operated by Reid Operating Systems Inc., 12110 Westlake Drive, Tecumseh, Ontario N8N 4W3, Canada. For privacy questions or requests, contact us at privacy@foundfilm.app.

Person in charge of the protection of personal information (Quebec Law 25): our Privacy Officer, at privacy@foundfilm.app.

International Representatives

We value your privacy and your rights as a data subject and have therefore appointed Prighter Group with its local partners as our privacy representative and your point of contact for the following regions:

Prighter gives you an easy way to exercise your privacy-related rights (e.g. requests to access or erase personal data). If you want to contact us via our representative, Prighter or make use of your data subject rights, please visit the following website: https://app.prighter.com/portal/foundfilm