The short version. FigureAte stores the account you sign in with and the lists, votes and comments you create. We do not sell your data, we do not track you across other apps or websites, and we run no advertising. You can delete your account from inside the app at any time, and we tell you below exactly what that does and does not remove.
Developer Treasures LLC (“we”) is the controller of the personal data described here. You can reach us at support@developertreasures.com or at 2108 N St, Ste N, Sacramento, CA 95816, USA.
When you sign up we hold your email address, your display name, your avatar image if you set one, whether your email is verified, your subscription tier, and the time you last signed in. Sign-in itself is handled by Clerk; if you use Apple or Google sign-in we receive the name and email address that provider releases to us, and never a password.
Everything you write in the app: list names and descriptions, list items and their notes, tags and categories, photos you attach, comments, reactions, who you follow, and the sessions you run — including which items you swiped, how you ranked them, and the display name you enter when you join a session through a shared link.
If you grant location permission and search for somewhere to go, your approximate coordinates are sent with that one query so results are nearby. We do not store your coordinates and we do not keep a location history. You can decline the permission and still search — results are simply not sorted by distance.
Our servers log each request with a timestamp, the path, the response status and your account id, so we can diagnose failures. If the app crashes, Sentry receives the error, your device and app version, and your account id — not the contents of your lists.
We do not build advertising profiles, we do not sell or rent personal data, and we do not use your list content to train machine-learning models.
We use the following service providers. Each processes data only to provide its service to us.
| Provider | Role | What reaches it |
|---|---|---|
| Clerk (Clerk.dev, Inc.) | Accounts and sign-in | Email address, name, avatar, password or third-party sign-in identity, session records |
| Neon (Neon, Inc.) | Application database | Your profile, every list and item you write, comments, reactions, follows, session participation and votes |
| Railway (Railway Corp.) | Application hosting | All of the above in transit, plus server request logs containing your account id |
| Cloudflare (Cloudflare, Inc.) | Domain, network and image storage | Request metadata including IP address; photos you attach to lists and items |
| Sentry (Functional Software, Inc.) | Crash and error reporting | Error messages, stack traces, device and app version, and your account id |
| Apple (Apple Inc.) | App distribution, and subscriptions if you buy one | Purchase and subscription status. We never receive your payment details |
| Expo (650 Industries, Inc.) | Mobile app builds and over-the-air updates | App version and update delivery metadata |
“Add from the web” sends your query to a third-party search provider chosen by what you are searching for. Those providers are independent controllers of the query you send them, and their own terms and privacy policies apply to it. Your query and, for place searches, your approximate coordinates go out; nothing about your account goes with it.
| Provider | Used for | What we send | What we keep |
|---|---|---|---|
| Google Places (Google LLC) | Place and business search, and place photos | Your typed query and, for place searches, your approximate coordinates | Name, address, rating and photo reference if you save the result to a list |
| Yelp (Yelp Inc.) | Restaurant and business search | Your typed query and approximate coordinates | Business name and details if you save the result to a list |
| Foursquare (Foursquare Labs, Inc.) | Place search | Your typed query and approximate coordinates | Place name and details if you save the result to a list |
| OpenStreetMap / Nominatim (OpenStreetMap Foundation) | Keyless place search fallback | Your typed query and approximate coordinates | Place name and address if you save the result to a list |
| TMDB (The Movie Database) | Film and television search | Your typed query | Title, overview text and poster reference if you save the result to a list |
| Open Library (Internet Archive) | Book search | Your typed query | Title, author and cover reference if you save the result to a list |
| MusicBrainz (MetaBrainz Foundation) | Music search | Your typed query | Artist, release and track metadata if you save the result to a list |
| Wikidata and Wikipedia (Wikimedia Foundation) | Keyless search fallback for people, places and things | Your typed query | Label and summary extract if you save the result to a list |
Making a list public is a choice you make per list and can reverse.
Your account data is kept while your account exists. When you delete something in the app it is marked deleted immediately, stops being served, and is permanently erased by a scheduled job after 30 days — the delay is what allows a device that was offline to learn about the deletion instead of resurrecting it.
You can delete your account from Profile → Settings inside the app. No email to us is required. When you do:
If you want content you contributed to someone else's shared list taken down as well, email support@developertreasures.com and we will handle it case by case, since it affects another person's list.
Depending on where you live you may have the right to access the personal data we hold about you, correct it, delete it, receive a copy in a portable format, object to a particular use, or withdraw consent you have given. Deletion and correction are built into the app; for access or a portable copy, email support@developertreasures.com and we will respond within 30 days. You can also complain to your local data protection authority.
Our database and servers are hosted in the United States. If you use FigureAte from outside the United States, your data is transferred there to provide the service.
FigureAte is not intended for children under 13, and we do not knowingly collect personal data from them. If you believe a child has created an account, email support@developertreasures.com and we will remove it.
Traffic is encrypted in transit. Authentication tokens are stored in the device keychain rather than in general app storage. Access to our production database is limited to what the application needs, and every API request is authenticated and checked against the permissions of the list or session it touches.
If we change this policy in a way that matters, we will update the effective date above and tell you in the app before the change takes effect for you.