Last updated 30 October 2026 · Draft

Privacy

friendpush is being tested with invited people. This policy describes how it works today and will be reviewed by a lawyer before it opens to everyone.

The short version

• You decide what goes on your card and who gets it.
• Nobody can pass your card on without asking you first, unless you choose to let them.
• You can see everyone who holds your card, and take it back from any of them.
• We never read your address book, never record where you are, and run no ads or tracking.
• You can download everything we hold about you, or delete your account, from Settings.

What we hold

• Your account: your email address, used to sign you in, to tell you when something needs you, and — unless you turn it off in Settings — to tell you when a card you hold changes. And the name and photo you give us.
• Your cards: what you put on them — phone numbers, email addresses, links, notes — and a history of changes, so people holding your card can see what moved.
• Who holds your cards, and how they got them: handed over by you, asked for, or passed on by someone else.
• Requests and introductions: who asked for a card or to pass one on, to whom, and what was decided. This is the record that shows every time your details reached someone new, with your say-so.
• Notes you make about people you’ve met: where and when, as words you choose, and any short voice note you record. Only you can ever see or hear these — not even the person they are about. We never store map coordinates.
• Business cards you photograph: the details you check and save — a name, business, title, industry, ways to reach them and your note. The photo is read on your phone and never sent to us. Only you can see these, and they can never be passed on to anyone.
• How you file people: an industry you give someone whose card you hold. Only you see it — not them.
• How often your card is passed on, counted from the introductions above.

What we don’t collect

• Your contacts or address book — not now, not to “find friends”, not ever.
• Your location.
• Analytics, advertising or tracking of any kind. There are no third-party scripts on the site.
• Anyone else’s details for passing on. Only a person’s own card can be passed on. A business card you photograph is kept for you alone, added one at a time — never an address book.
• The photos of business cards you scan. They are read on your phone.

Who can see what

• People you give your card to see what’s on it, and the latest version whenever you change it.
• Someone with a link or code you handed them can see and save your card without an account.
• Anyone with just your card’s name in the address (like friendpush.com/r/your-name) sees your name, how widely your card gets passed around, and a way to ask you for it — never your details. Card pages tell search engines not to list them, so your name can’t be found on friendpush by searching for it.
• When someone passes your card on, the new person gets only what you’ve marked as shareable until you say yes; if you say no, they lose even that.
• Link previews — the picture a chat app shows when your link is pasted — show your name only.

These rules are enforced by the database itself, not just by the screens you see, so a bug in the app cannot show someone what the database will not give them.

Cookies and storage

One cookie keeps you signed in. While friendpush is being tested, a second remembers that you entered the access code. The app also keeps copies of pages you’ve opened on your device so it works with a weak signal; signing out clears them. Nothing is used to follow you around the web.

Services we rely on

Your data is stored and processed in the United States by:

• Supabase — the database, sign-in, and the photos and voice notes you add (Ohio).
• Vercel — runs the website (Washington, D.C.).
• Resend — sends our emails (Virginia). Emails are sent without open or click tracking.

Each handles your data only to provide that service to us. We do not sell or rent data to anyone.

What you can do

• See and change everything on your cards at any time.
• See who holds your card and take it back from anyone.
• Download your data from Settings — everything we hold about you, including every request and introduction that names you.
• Delete your account from Settings. Every copy of your card stops working for everyone holding it, and your cards, notes and account are removed. Records of introductions you took part in are kept with your name removed, because they are the proof of what other people agreed to.

Every request this policy describes can be made in the app. A contact address for privacy questions will be published here before friendpush opens to everyone.

How long we keep it

For as long as you have an account. When you delete it, what’s above is removed straight away; our providers may keep backups and logs for a limited time before they expire.

Children

friendpush is not for anyone under 16.

Changes

If this policy changes in a way that matters, we’ll tell you in the app before it takes effect. The date at the top shows when it last changed. See also the terms.