Found Privacy Policy
Last updated October 7, 2026
This policy covers Found and its sister app Settle. They are run by the same developer and share one account and one subscription, so they share one policy. It describes what each app stores, why, who else sees it, and how to get rid of it.
The short version. You can use either app without giving us a name, an email address or a password. We never ask for a Social Security number and there is nowhere in either app to enter one. We do not sell data, we do not show advertising, we have no analytics or crash-reporting SDK, and we do not track you across other companies' apps or websites. We never file a claim for you and never take a percentage of anything you receive. Deleting your account removes everything listed below.
1. Who we are
Found is operated by Attention Labs ("we", "us"), the data controller for the purposes of this policy. You can reach us at support@attentionlabs.dev.
2. What we store
2.1 Both apps
- An anonymous account id. A random identifier created on first launch so your data survives a reinstall. It is not your device's advertising id, and it is not linked to anything outside these two apps.
- Your Apple account identifier, only if you choose Sign in with Apple. We receive an opaque identifier. If you use Apple's private relay address, we never see your real email, and we make no attempt to resolve it.
- Claims you saved: which record or case, what you marked (saved, filed, paid), and any note or confirmation number you typed.
- Notification preferences, and a push token from Apple if you allow notifications. You can revoke that in iOS Settings at any time.
- Subscription status. Apple processes the payment; our subscription provider tells our server whether your subscription is active. We never see your card details or billing address.
2.2 Found only
- The names you ask us to search, including former and maiden names.
- The states and ZIP codes you have lived in, and optionally a birth year (a year, not a date of birth, and it is optional).
This is the search itself: without it there is nothing to look up. It is matched against our own copy of the files that state unclaimed-property programs publish.
2.3 Technical data
Standard server logs — IP address, timestamp, endpoint — kept for a short period to run the service and detect abuse.
2.4 What we never store
- Social Security numbers, in whole or in part.
- Documents, identity photos or receipts.
- Anything you type on a state's or an administrator's own claim form. Filing happens on their website, outside these apps, and we cannot see it.
- Your contacts, photos, microphone, camera or precise location. Neither app requests those permissions.
- The Advertising Identifier (IDFA). Neither app shows the App Tracking Transparency prompt, because neither app tracks you.
3. Where the data comes from
Found searches our own copy of the files that state unclaimed-property programs publish. Settle reads public settlement notices and the administrators' own case pages. Both are public records. We do not buy personal data about you from anyone.
4. How we use it
- To run the app — perform the search or the match you asked for, show your results, and keep your claims ledger.
- To tell you about something new — a record newly published under your name, a new case covering a brand you picked, a deadline approaching on a claim you saved. Notifications are opt-in.
- To manage your subscription — apply your entitlement across both apps.
- To keep the service working — detect abuse, diagnose failures, enforce our Terms.
Where the GDPR applies, our legal bases are performance of a contract for running the app and your subscription, consent for notifications, legitimate interests for security and abuse prevention, and legal obligation for financial records.
5. Who else sees it
These are the only third parties that receive any data, and what each receives:
| Who | What they get |
|---|---|
| Apple | Purchase and subscription data; the push token if you enable notifications; the opaque identifier if you use Sign in with Apple |
| RevenueCat | Your anonymous account id and subscription status, so our server can unlock the app |
| Fly.io | Application and database hosting: the data listed in section 2, as stored |
There is no analytics SDK, no advertising SDK, no session replay and no crash reporter in either app. We do not sell your personal information and we do not share it for cross-context behavioural advertising. We may disclose data if required by law, to enforce our Terms, or to protect our users — and, in a merger or acquisition, to the acquiring entity, subject to this policy.
6. How long we keep it
- Your account and saved claims: until you delete them.
- Cached search answers: a few days at most, then they expire automatically.
- After you delete your account: hidden immediately, permanently erased after seven days. The grace period exists because accidental deletion is the thing people most often ask us to reverse, and a claims ledger cannot be reconstructed.
- Purchase records: as long as tax and accounting law requires.
7. Deleting everything
In either app: Profile → Your data → Delete my account and data. You type DELETE to confirm. That removes your names, states and birth year, your claims and notes, your notification preferences and every cached answer, on our servers and on your device.
Deleting the app alone does not do this, because your account lives on our server: delete from inside the app first. Deleting your account does not cancel an App Store subscription — cancel that in the App Store, under your Apple account's subscriptions.
8. Security
Data is encrypted in transit (TLS) and at rest. Access to production systems is limited to people who need it. No system is perfectly secure and we cannot guarantee absolute security.
9. Your rights
Depending on where you live you may have the right to access, correct, export or delete your data, to object to or restrict processing, to withdraw consent, and to complain to your data protection authority. California residents additionally have the rights to know, delete, correct, and to opt out of the sale or sharing of personal information — we do neither — and the right not to be treated differently for asking.
The delete control in section 7 covers erasure for everyone, wherever you live. For anything else email support@attentionlabs.dev and we will answer within the period your law requires, and in any event within 30 days.
10. Children
Neither app is directed at children under 13 and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will delete it.
11. International transfers
We operate from the United States and your data is processed there. If you are in the European Economic Area, the United Kingdom or Switzerland, transfers rely on the European Commission's Standard Contractual Clauses or another lawful mechanism.
12. Changes
If we change what we collect we update this page and the App Store privacy declaration before shipping the change, not afterwards. The date at the top is the last change.