What we keep, and who sees it
Fincher is run by Finchproof LLC. It’s built so that what you share goes to the people you chose, and nowhere else. Here’s exactly what that means.
The short version
- No ads, no selling data, no ranking your feed, no AI training on your content.
- Hidden details are removed from every photo and video you upload (location, camera model, capture time) before it’s stored.
- Strangers can see your name and profile picture, and nothing else.
- We don’t ask for your phone contacts. Suggestions come only from people you’re already connected to.
What we collect
- Your account: name, handle, email, a scrambled (hashed) form of your password, profile picture and bio.
- What you share: posts, photos, videos, stories, comments, likes, messages, cliques and tags.
- Your network: who you’re connected to, and pending requests.
- Activity the app needs: who viewed your story (shown only to you), and which notifications and messages you’ve read.
- Technical records: basic server logs used to keep the service running and secure, kept for [log retention period].
What we remove
Photos and videos carry hidden details your phone adds, such as GPS location, camera model and exact capture time. Fincher strips them before anything is saved. The original file you uploaded is never stored.
Who sees what
- Anyone: your name and profile picture.
- Your connections: your posts, stories, comments, connections list and profile.
- A clique’s members: that clique’s chat.
- The person you message: that conversation.
- Tags: nobody sees a tag until the tagged person approves it.
Finchproof protection
Fincher is part of Finchproof, whose job is protecting creators’ work from unauthorized AI training. This marking isn’t switched on yet. When it is, it will work like this, and we’ll update this policy and tell you before it starts:
- each photo you see carries an invisible mark made for you, so a leaked copy can be traced to the account it was shown to;
- Finchproof’s records identify members only by a scrambled code, never by name or email. Only Fincher can connect that code to an account;
- Finchproof keeps fingerprints (hashes) of what was shown, not the photos themselves;
- after you delete a video, we keep a small mathematical fingerprint of it, not the video, so leaks can still be traced. It can’t be played or turned back into your video. [Retention period to be decided.]
Who we share with
We don’t sell, rent or trade your information. We use a small number of providers to run the service, and they may process data only on our behalf:
- Hetzner Online hosts our servers (in Ashburn, Virginia, USA).
- [Any email or other providers, once added.]
We may disclose information when the law requires it, or to protect members (for example, to show where a stolen copy of someone’s work came from, as described in our Terms).
How long we keep it
- Stories: fully deleted after 24 hours, or sooner if you delete them.
- Posts, comments and messages: until you delete them or your account.
- After you delete your account: your content is deleted. We keep the link between your account and Finchproof’s scrambled code for 12 months, so leaks of your work or others’ can still be traced, and then delete it.
- Backups: deleted data can remain in server backups for up to [backup retention period].
Your choices and rights
- Delete any post, story or comment you made.
- Decline tags and connection requests; leave cliques.
- Ask for a copy of your data, a correction, or deletion of your account at [contact email]. Self-service tools are planned.
- Depending on where you live, you may have further rights. [State and international privacy rights to be reviewed with counsel.]
Children
Fincher isn’t for children under [minimum age]. If we learn one has an account, we’ll delete it.
Changes and contact
If this policy changes in a way that matters, we’ll tell you and ask you to agree again. Questions: [contact email].