Privacy Policy

Last updated: October 21, 2026

Friends & Family is a sneaker marketplace: the iPhone app lets you browse sneakers from independent stores, keep a wishlist, make offers and buy. Each store runs its own Shopify shop, and you pay in that store's Shopify checkout. This policy explains what we collect when you use the app and our Shopify sales channel, why, and your choices. "We" means [Company legal name], [postal address], the operator of Friends & Family.

What we collect

Your account

• Email address, when you sign in with an email code. We email you a one-time code; it expires after 3 minutes.
• Sign in with Apple: your Apple user identifier, the email address Apple shares (possibly a private relay address) and, on your first sign-in, your name. We also keep the refresh token Apple issues to us, encrypted, so we can revoke our access when you delete your account.
• Sign in with Google: your Google user identifier, email address and name. We don't keep any Google token.
• A session on our servers for each device you are signed in on. It ends when you log out, delete your account, or after 31 days without use.

Your profile and activity

• Name, phone number and preferred shoe size, if you enter them, and the sneaker styles you pick during onboarding.
• Shipping addresses you save (recipient name, street, city, state, ZIP code and a label like "Home").
• Your wishlist.
• Offers you make (sneaker, size, amount, the store and whether it was accepted).
• Orders: sneaker, size, price, store, status, and the ship-to address used for the order, including the one you confirm in the store's Shopify checkout.
• A push notification token for your device, if you allow notifications.
• Messages you send us through "Support & Feedback", together with your email address (to answer you), your user ID, platform, app version and device model.

Technical data

• Your IP address, to limit abuse of sign-in and code requests (kept for up to an hour) and in our hosting provider's request logs.

What we don't collect

• Payment details. You pay in the store's Shopify checkout; card data goes to Shopify and the store, never to us.
• No advertising identifiers, no tracking across other apps or websites, no analytics SDKs, and no location data (the city search in the address form runs on your device).

Why we use it

• To create and secure your account and sign you in.
• To run the marketplace: show listings, keep your wishlist, send your offers to the store, and hand your order to the store's Shopify checkout with your address pre-filled.
• To let the store fulfil your order: the store sees your order, your name and email, and the ship-to address.
• To bill stores our commission on sales (through Shopify's billing system). This uses order amounts, not your personal data.
• To answer support requests and to prevent abuse.

We don't sell your personal data and don't use it for advertising. [Legal bases for users in the EEA/UK, e.g. contract performance and legitimate interests, to be confirmed.]

Who processes it

We use these service providers to run Friends & Family. They process data on our behalf, only for the purposes below.

The stores you buy from are independent businesses. Once you check out, the store's own privacy policy and Shopify's privacy policy also apply to your order.

How long we keep it

• Account and profile data: until you delete your account.
• Sign-in codes: 3 minutes. Sessions: 31 days after last use.
• Abuse-prevention counters with your IP address: up to an hour.
• Orders: kept after you delete your account, without your name, email or other profile data in our records (see below).
• Support messages: kept in our support tool (Slack) for as long as we need them to help you [retention period to be confirmed]. They are not deleted automatically with your account; ask us at [contact email] and we delete them.

Deleting your account

In the app, go to Account → Delete account. This immediately deletes your profile, preferences, wishlist, saved addresses and push tokens, signs you out on every device, and withdraws offers that haven't been paid. If you used Sign in with Apple, we revoke the app's access to your Apple ID (the app may ask you to confirm with Apple once; if you skip that, remove it yourself in Settings → your name → Sign-In & Security → Sign in with Apple). If you sign up again later, you start with a new, empty account. You can also ask us to delete your account by email at [contact email].

What stays: your past orders, in our records without your name, email or other profile data, because stores need them for their bookkeeping and we need them to bill commission. An order that is paid but not yet shipped keeps its ship-to address, including the recipient's name, until it ships, so the store can send it. Each store also keeps its own order in its Shopify shop (with your name, email and address as entered in its checkout) under the store's and Shopify's privacy policies; we can't delete that copy. Support messages stay as described above.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict its use, and to complain to a data protection authority. You can correct your profile and addresses in the app at any time. For anything else, email [contact email].

Security

Connections to our servers are encrypted. Sign-in codes and sessions are short-lived and rate-limited, and credentials we must keep (like Apple's token) are stored encrypted.

Children

Friends & Family is not meant for anyone under [minimum age], and we don't knowingly collect data of people under that age.

Changes

We'll update this page when our practices change and show the date of the last update at the top. For significant changes we will tell you in the app.

Contact

[Company legal name], [postal address].
Email: [contact email]

See also our Terms of Service.