Last updated: 27 September 2026
This policy explains what we collect when you use Fagplus, why we collect it, and the choices you have. We have tried to write it in plain English.
Your account. Your name and email address, and your phone number if you give us one. We never see your password: it is hashed before it reaches our database.
Orders. What you bought, when, and the delivery address you gave us. For a gift, the recipient’s email address and any note you wrote them.
Your items. The tags on your account and whatever you choose to call them. A nickname is plenty, and what you write is up to you.
Missing reports. When you report an item missing: what you called it, anything you wrote about where you last had it, and the photo if you added one.
Finds. When a verified organisation scans one of your tags we record that it happened, which organisation has it, and when, so we can tell you where to collect it.
Organisation applications. If you apply to be a verified organisation: its name, type, addresses, contact details and any supporting document you attach.
Your phone. If you turn on notifications, a token that identifies the app on that device. No device identifier of ours, no advertising id, and no location.
We use it to run your account, send the tags you ordered, tell you when one of your items turns up, and answer you when you get in touch. We do not sell personal data, we do not share it with advertisers, and there is no advertising or analytics tracking on this site.
Someone who finds your item sees nothing about you. They are told what to do with it and where the nearest drop-off point is, and that is all.
A verified organisation that scans your tag sees what the item is called, anything you wrote in your missing report, your photo of it, and the message you chose to leave for finders. Your phone number reaches them only if you have turned on sharing it at pickup in your settings. They never see your email address or your home address.
When you hand a tag to someone else, they see what the item is called and the note you send with the offer. The person you offered it to sees your name; nobody else does.
A tag carries a chip with a serial number burnt in at the factory. We do not store that number. What we keep is a one-way fingerprint of it, which is enough to recognise the chip again and useless to anyone who reads our database, plus a fingerprint of an identifier written into the chip’s protected memory. Tags hold no personal data at all: nothing about you is written to the chip, so a tag in a stranger’s hand tells them nothing.
A photo of a missing item, or a document attached to an organisation application, goes into private storage. Neither has a public address. A link is created only when someone entitled to see it opens the screen, and it stops working shortly afterwards. We delete a missing-item photo as soon as you tell us the item is back.
A small number of providers run parts of the service on our instructions, and none of them may use your data for anything of their own: Supabase (database, authentication and file storage), Vercel (hosting), Resend (the emails we send you), and Expo with Google Firebase Cloud Messaging (delivering a notification to your phone).
Our drop-off map draws its map tiles from OpenFreeMap and searches addresses through OpenStreetMap’s Nominatim, so those services see the request your browser makes. If you press “near me”, your position is read by your browser and used to centre the map. We never receive it or store it.
We email you about your orders, your items and anything about your account’s security, such as a password change. You can turn off item emails in your settings, and phone notifications in your phone’s own settings. Security notices we keep sending: if someone else has taken over your account, that email is the only way you would know.
Account and item data stays until you ask us to delete your account. Order records are kept longer where tax and accounting rules require it. Records of a find are kept while the item is being returned, and closed reports are kept as history for the organisation that held it.
You can ask for a copy of your data, have anything wrong corrected, or have your account and everything attached to it deleted. Deleting an account releases its tags and removes your profile, your items, your photos and your notification history. Write to us and we will action it.
If we change this policy in a way that materially affects you, we will tell you before it takes effect rather than quietly updating the date. Questions and requests go to hello@fagplus.com.