Privacy Policy

BACK 2U operates the BACK 2U app and this website. For privacy questions, data requests or complaints, contact armtigranyan1@gmail.com. We are the controller of the personal data described in this policy.

We try to collect as little as possible. In practice that means:

• Account basics — the identifier from your sign-in provider (Apple or Google), your email address, and the pseudonym you are given.
• Posts you create — the photos, description, category, time and approximate area you provide for a lost or found item.
• Messages — the content of conversations you have with other users through the app.
• Location — the point you place on the map for an item, and, if you allow it, your device location while the app is open so we can show you what is nearby. We do not track you in the background and we do not store a location history.
• A notification token — an anonymous device identifier from Apple or Google, only if you turn notifications on, so we can deliver a message or match alert.
• Reports — what you tell us when you report a post, a message or a person.

We do not ask for your real name, home address, date of birth, government ID or payment details. Rewards are arranged directly between users, so we never handle money or card data.

The app contains no analytics, advertising or crash-reporting software of any kind. We do not build a profile of you, we do not track you across other apps or websites, and there is no third-party SDK collecting your behaviour in the background.

This is the part that matters most, so to be explicit: other users see your pseudonym, and the content of the posts you make public.

For a lost post, that includes your photo, description, category and the map pin you placed. For a found post, only the category, pin and time are public — your photo and description stay private until you choose to reveal them in a conversation.

The pin is shown exactly where you put it, so place it where the item was rather than at your home. Your device's own location is never shared with anyone: it is used on your phone to work out what is near you, and only the pin you chose is published. Your email and your sign-in identity are never shown to another user.

We use it to run the service and for no unrelated purpose:

• To publish your posts, and to match a lost report against found reports within 2 km posted in the last 60 days.
• To send the notifications you asked for — items lost within 500 m of you, possible matches, and new messages.
• To let you and another user talk anonymously and arrange a handover.
• To keep the platform safe: investigating reports, preventing fraudulent claims, enforcing blocks and our terms.
• To fix crashes and improve the product using aggregated, non-identifying usage data.

Where data-protection law such as the GDPR applies, we rely on: performance of our contract with you (operating your account, posts and messages); your consent (device location, push notifications — withdrawable at any time in your device settings); our legitimate interests (safety, fraud prevention, product reliability); and legal obligation where we must retain or disclose something.

We do not sell or rent personal data, and we do not share it for advertising. We share only with service providers who help us operate — cloud hosting, push notification delivery, crash reporting and email — under contracts that limit them to our instructions.

We may disclose data where we are legally required to, or where it is necessary to protect someone's safety or investigate serious abuse of the platform.

Posts stay until you delete them or they expire — open lost reports are matched for 60 days, after which they are closed and then removed. Conversations are kept while both accounts exist so a handover can be completed.

When you delete your account, your posts, conversations, open matches and photos are removed immediately and permanently. Limited records may be retained where the law requires it, or to enforce a block or prevent repeat abuse. Backups are cycled out within 30 days.

You can access, correct, export or delete your data. Most of it is directly in your control: edit or delete a post, or delete your account from Settings.

You also have the right to object to or restrict certain processing, to withdraw consent for location or notifications, and to complain to your local data-protection authority. To exercise a right, email armtigranyan1@gmail.com — we respond within 30 days.

BACK 2U is not intended for anyone under 16. We do not knowingly collect data from children. If you believe a child holds an account, contact us and we will remove it.

Our providers may process data outside your country. Where that happens we rely on appropriate safeguards such as standard contractual clauses.

Data is encrypted in transit and at rest, access is limited to the people who need it, and we review our practices regularly. No system is perfectly secure, so we also design for minimal data: the less we hold, the less there is to lose.

If we change this policy materially we will tell you in the app or by email before the change takes effect, and update the date at the top of this page.