Everything we do with your data, on one page.

What we collect, in one list

• Account: name, email, photo, sign-in token
• Location while the app is open
• Your latest spot when you choose to share with friends (deleted when sharing ends; never a history)
• Contacts you pick to invite (not your whole address book)
• Flyer photos and moments you post
• Taste signals: likes, Yes/Maybe, opens, more/less like this
• Chat messages, including @fig threads
• Device info, crash reports, push token
• Paid feature status (a payment provider handles payment)

What we never do

• Sell your data
• Train AI models on your data
• Store a history of your location
• Read your social networks
• Show ads or share data with advertisers
• Ask for calendar or contacts permission just to add to your calendar
• Hide anything from your feed without your say

Who can see what

• Your profile: people you approve (private by default)
• Your live location: mutual friends you pick, for a window you set
• Your RSVP and chat: others in that plan
• Your moments: public by default; attendees-only per post; attendees-only by default at kids/family happenings
• Exact meetup spot of a public plan: only people who said Yes
• Venues: aggregate counts only

How to control it

• The location button at the top of Home: start, change or stop sharing
• Settings → Privacy: moment defaults, marketing use of your content
• Your taste: see, remove, pause or reset every signal
• Phone settings: location permission
• Settings → Account: export or delete

When you leave

Account deletion removes your data within 90 days. We keep payment records and safety reports only as long as the law requires, then delete those too.

Safety tools

• Block (both ways, instant)
• Report people, comments, messages — reviewed by staff
• "Something’s off" corrections, weighted by track record
• Remove-me requests on photos you appear in
• Appeals at safety@fig.social