Privacy Policy

Who we are

LOFO is a lost and found matching service. When someone finds an object, they photograph it. When someone loses an object, they describe it. Our AI matches them and coordinates the return. That's the entire product.

What we collect

We collect only what's necessary to make a return possible:

• Phone number — used to verify identity and send match notifications. Stored as a one-way hash after verification. The plaintext number is never retained.
• Item description — text or photo describing the found or lost object. Used solely for matching.
• Approximate location — grid-snapped GPS coordinates, sufficient for proximity matching but not precise enough to identify a specific address.
• Secret detail — a detail only the true owner would know, used to verify ownership. Hashed immediately with Argon2id. We never see the plaintext.

What we don't collect

• No name, email, or account profile
• No payment card details (processed entirely by Stripe)
• No precise GPS coordinates stored beyond the moment of submission
• No browsing history or tracking pixels
• No data sold or shared with advertisers — ever

How we use your information

Information is used exclusively to match lost and found items and coordinate their return. We do not use your data for marketing, profiling, or any purpose unrelated to your specific submission.

SMS notifications

By tapping "Send Code" or "Confirm Phone Number" in the LOFO app, you consent to receive SMS messages from LOFO. These messages include:

• One-time verification codes when you verify your phone number
• A match alert notification if a found item matches your lost report

Message and data rates may apply. Reply STOP to opt out at any time. Reply HELP for support. We do not send marketing messages.

Data retention

Unmatched item submissions are automatically deleted after 30 days. Precise location data is deleted immediately upon successful handoff. Secret detail hashes are deleted upon handoff confirmation. We do not archive personal data.

Third parties

We use a small number of third-party services to operate:

• Supabase — database hosting
• Anthropic — AI image and text analysis
• Stripe — payment processing (we never see card details)
• Twilio — SMS delivery

Each provider processes only the minimum data required for their function. We do not share data across providers for any secondary purpose.

Your rights

You can request deletion of any data associated with your submission at any time by emailing support@lofoapp.com. Because we store phone numbers only as hashes, we may ask you to verify ownership of the submission before deletion.