Privacy policy
This policy covers the Findy app for iPhone and iPad and the website at findy.flapsapps.net. It describes what is processed, why, on what legal basis, and what you can ask us to do. The plain-language summary is on the privacy overview.
Effective date: 23 July 2026.
This policy describes our actual practice, written by the operator rather than by a lawyer. It is not legal advice. If you are relying on it for EEA or UK data protection purposes, have it reviewed by a qualified privacy lawyer before doing so.
1. Who is responsible
Findy is operated by Azat Goktas, an individual developer. For anything in this policy, including requests about your rights, contact:
We have not appointed a data protection officer; there is no legal requirement for us to do so at our scale, and enquiries go directly to the operator at the address above.
2. The app
2.1 What the app processes on your device
Findy carries out its inspection work on your device. The following are processed locally and are not transmitted to us:
- Camera frames — for the infrared viewing mode, the lens-glint finder and the automatic lens scan. Frames are analysed in real time on the device. They are not uploaded and not saved, unless you choose to save an image yourself, in which case it is saved to your device by you.
- Bluetooth advertisements — the identifiers and signal strengths broadcast by nearby Bluetooth Low Energy devices, used to list them and to detect a device that reappears near you across locations.
- Local-network observations — results of a Bonjour browse for
_rtsp._tcpand_http._tcpservices, and of a TCP-connect port probe of the local /24 subnet, on the Wi-Fi you are joined to. - Location — used for two purposes. iOS requires location permission before an app may read Wi-Fi network details, and the tracker-following feature must be able to tell that a device has reappeared in a different place. Locations are compared on the device.
- Magnetometer readings — magnetic field strength measured around a specific object you are inspecting.
The app enables two iOS background modes, Bluetooth central and location, so that the tracker-following detection can continue when the app is not in the foreground.
2.2 What is stored, and where
Scan history and the network device inventory are stored locally on your device. We operate no user accounts and no server that receives scan data. None of the categories in section 2.1 reaches us at any point.
2.3 Notifications
The app sends local notifications only — for example that a device may be following you, or that a new device has appeared on a network you know. These are generated on the device. There is no push notification server and no notification content leaves your device.
2.4 Subscriptions
Findy is free to download with an optional subscription. Purchases are processed by Apple through your Apple ID. We never receive or store your payment details. Superwall presents the paywall inside the app and reports your entitlement state so the app knows whether to unlock the paid tools; Superwall therefore receives purchase and entitlement information together with the technical identifiers it uses for that purpose.
2.5 Third-party code in the app
The app contains two third-party SDKs and no others: Superwall (paywall presentation and entitlement state) and Lottie (animation rendering, with no network or data role). There is no analytics SDK, no crash-reporting SDK, no attribution or install-tracking SDK, no session-replay SDK and no advertising SDK in Findy.
3. The website
findy.flapsapps.net is separate from the app and is treated separately here.
- The website sets no cookies.
- The website runs no analytics. There is no measurement script, no tag manager, no pixel and no third-party script of any kind.
- The site is static and has no server-side database, no login and no forms that submit data to us.
- Cloudflare hosts and delivers the site, and processes the request data inherent in serving a page to your browser.
We do not build profiles of website visitors and we cannot connect a visit to this site with any use of the app.
4. Legal bases
For people in the EEA and the UK, the legal bases under the GDPR are as follows.
| Processing | Legal basis | Note |
|---|---|---|
| Camera, Bluetooth, local network, location and magnetometer access in the app | Consent (Article 6(1)(a)) | Each is granted by you through the iOS permission prompt and can be withdrawn at any time in iOS Settings. Processing happens on your device. |
| Local notifications | Consent (Article 6(1)(a)) | Granted through the iOS notification prompt, withdrawable in iOS Settings. |
| Providing the subscription and unlocking paid features | Performance of a contract (Article 6(1)(b)) | We cannot deliver a subscription you have paid for without knowing that it is active. |
| Serving the website | Legitimate interests (Article 6(1)(f)) | Our interest is in making the pages available and keeping them online. No cookies, no analytics, no profiling. |
| Responding to your email | Legitimate interests (Article 6(1)(f)) | Answering a message you chose to send us. |
5. Processors
Three companies are involved. This is the complete list.
| Processor | What it receives | Purpose | Privacy information |
|---|---|---|---|
| Apple | Your App Store purchase and subscription record, and the data Apple collects as distributor of the app. | App distribution, payment processing, subscription management. | apple.com/legal/privacy |
| Superwall | Purchase and entitlement state, and the technical identifiers used to decide which paywall to present. | Paywall presentation and reporting entitlement state to the app. | superwall.com/privacy |
| Cloudflare | The request data involved in serving this website. | Hosting and delivery of findy.flapsapps.net. | cloudflare.com/privacypolicy |
No scan results, camera frames, network inventories, Bluetooth listings or location data are sent to any processor.
6. Retention
- Scan history and network device inventory: held on your device for as long as you keep them. You control them — delete them in the app, or delete the app to remove them entirely. We hold no copy.
- Camera frames: discarded as they are processed. They are not retained by the app or by us.
- Location, Bluetooth and magnetometer data: held on your device as part of your scan history, under the same control as above. We hold no copy.
- Subscription records: retained by Apple and by Superwall under their own policies. We do not set their retention periods and we hold no subscription database of our own.
- Website: we hold no visitor records. There is no analytics store and no database.
- Email you send us: kept in the operator's mailbox for as long as needed to handle the matter and any follow-up. Ask us to delete a thread and we will.
7. Your rights
Under the GDPR and comparable laws, you have the rights below. Because we hold no user accounts and no scan data, most of them are exercised on your own device — which is where the data is.
- Access. Scan history and the device inventory are visible to you in the app. For anything we hold about you, which will be limited to email correspondence, write to us and we will tell you what there is.
- Deletion. Delete scan data in the app, or delete the app, and it is gone. For email correspondence, ask us and we will delete it.
- Rectification. If something we hold about you is wrong, tell us and we will correct it.
- Objection. You may object to processing carried out on the basis of our legitimate interests. Write to us and explain your situation.
- Withdrawal of consent. Revoke camera, Bluetooth, local network, location or notification permission at any time in iOS Settings. The relevant feature stops working; nothing else is affected, and withdrawal does not affect processing that already took place.
- Portability. Data produced by your use of the app is already on your device and under your control.
- Complaint to a supervisory authority. If you are in the EEA or the UK you may complain to your national data protection authority. You are not required to contact us first, though we would prefer the chance to put something right.
For subscription data held by Apple or Superwall, you may also exercise your rights directly with them using the privacy information linked in section 5.
We do not charge for handling a request and we aim to respond within one month.
8. Children
Findy carries a 4+ age rating because it contains no objectionable content. It is not directed at children, and it is not designed or marketed for them. We collect no personal data from anyone, children included: there is no account, no analytics and no server receiving scan data. If you believe a child has provided us personal data through email correspondence, contact us and we will delete it.
9. International transfers
The processing done by the app happens on your device, in whatever country you are in, and does not cross a border because of us.
Apple, Superwall and Cloudflare are United States companies operating international infrastructure, so data those processors handle — your subscription record, and the requests that serve this website — may be processed outside the EEA and the UK. Each publishes its own transfer safeguards in the privacy information linked in section 5. We have no separate transfer mechanism of our own to describe, because we operate no infrastructure that receives your data.
10. Changes to this policy
This policy describes our current practice as of the effective date above. If we add a processor, add an SDK, or change what the app or the website processes, we will update this page and change the effective date. Material changes will also be noted in the changelog. The version you are reading is always the current one.
11. Contact
Questions, rights requests and complaints about this policy: azattgoktas@gmail.com.
Security issues have their own process — see Security.
Last reviewed 2026-07-23 · Written and reviewed by the Findy developer.