Privacy Policy
This Privacy Policy explains how FoundUps ("we", "us", the "App") collects, uses, and protects information when you use the FoundUps iOS app or visit foundups.vercel.app. FoundUps is operated by AppSyntax, based in Australia.
1. Information we collect
Account information
When you create an account, we collect your email address and a password hash, or an Apple Sign In identifier if you use Sign in with Apple. You choose a role (investor or founder) during onboarding.
Profile information you provide
- Full name, profile photo, bio, headline
- LinkedIn and Twitter/X URLs (optional)
- Location (optional)
- For investors: firm name, check size, preferred industries and stages
- For founders: your startup's name, tagline, description, industry, stage, ask amount, valuation, traction figures, team size, website, logo, and pitch deck slides
Usage data
We store your swipes (like or pass) on startups, matches created when both sides opt in, and messages sent within matched conversations. This is the minimum data required for the core matchmaking and chat features to work.
Device data
If you grant notification permission, we store an Apple Push Notification service (APNs) device token so we can deliver push notifications about new likes, matches, and messages. We do not collect your location, contacts, or any other device-level data.
2. How we use your information
- To run the matchmaking flow (investors swipe; founders approve)
- To enable in-app chat between matched users
- To deliver push notifications about activity on your account
- To maintain account security and prevent abuse
- To respond to support requests
We do not sell your data. We do not use your data for advertising. We do not share your profile with third parties except the service providers listed below.
3. Service providers
FoundUps uses the following third-party services to operate:
- Supabase (supabase.com) — hosts our database, authentication, file storage, and realtime chat infrastructure. Data is stored in an Amazon Web Services region in the Asia-Pacific zone. See Supabase's privacy policy.
- Apple — handles Sign in with Apple and Apple Push Notification service. See Apple's privacy policy.
- Vercel — hosts this marketing website. It does not receive any of your in-app data.
4. Visibility of your data
Your profile and, if you are a founder, your startup and pitch deck, are visible to other authenticated FoundUps users subject to our matchmaking rules. Messages are visible only to the two participants in a matched conversation. FoundUps staff may access data only when necessary to operate or repair the service or respond to your support request.
5. Data retention
We retain your account and associated data for as long as your account is active. When you delete your account, we delete your profile, startup, pitch deck files, swipes, matches, messages, and device tokens within 30 days. Backups may retain your data for a further period not exceeding 60 days before being rotated out.
6. Your rights
- Access and correction — you can view and edit your profile, startup, and deck within the app at any time.
- Deletion — you can delete your account from the Profile tab in the app, or email us to request deletion.
- Portability — email us to receive a copy of your data in a machine-readable format.
- Withdrawal of consent — you can disable push notifications any time in iOS Settings → FoundUps → Notifications.
If you are in the European Economic Area, the United Kingdom, or California, you have additional rights under GDPR, UK GDPR, or CCPA respectively. Contact us to exercise any of these.
7. Children
FoundUps is not intended for users under 18. We do not knowingly collect information from children under 18. If you believe a child has created an account, contact us and we will delete it.
8. Security
Account passwords are hashed and never stored in plaintext. Data in transit is encrypted with HTTPS/TLS. Row-level security policies enforce that you can only read and write your own data on the server. No system is perfectly secure, and you use FoundUps at your own risk.
9. International transfers
Your data is stored on Supabase's infrastructure. Depending on your location, this may involve transferring your data across national borders. By using FoundUps, you consent to this transfer.
10. Changes to this policy
We may update this Privacy Policy as the App evolves. The "Last updated" date at the top shows when we last made changes. Material changes will be communicated within the App.
11. Contact
Questions, requests, or concerns? Email harrison@appsyntax.dev.