Friendor Privacy Policy
Last updated: October 31, 2026
This policy explains what Friendor collects, why, who helps us run it, how long we keep things, and what you can do about it. It replaces every earlier version of the Friendor privacy policy, in the app and on the web.
Who we are
Friendor is an invite-only network for wedding vendors. You use it to post and find gigs, apply, message other vendors and build your crew.
Friendor is run by Jose Hiram Photography LLC. “We” and “us” in this policy mean that company.
Contact: [email protected]
What we collect
Account
- Your email address and password. We use these to sign you in and to send messages about your account, such as email confirmation and password resets.
- The invite code you signed up with, and whose code it was.
Profile
- Name, handle, role, city, bio, gear, rate, website and Instagram handle.
- Your profile photo and portfolio images.
- Whether you say you are insured.
- Your supporter status, if you become a supporter.
What you do in Friendor
- Gigs you post, including title, pay, location, dates, times and description.
- Applications, comments, saved gigs and gigs you hide from specific vendors.
- Direct messages you send and receive.
- Crews, connections and collaborations with other vendors.
- Feedback you send us with “Send Feedback”.
Safety records
- Reports you file, including the reason, any note you add and the content you reported.
- People you block.
- If we suspend an account: the reason and a record of the decision.
Notifications
- A push token from your device so we can send notifications.
- Your notification settings for messages, activity and backfills.
Crash and performance data
- When the app crashes or runs slowly, we receive the error, a stack trace, your device model and iOS version, and your Friendor account ID. We scrub email addresses, phone numbers, passwords and tokens from these reports before they leave your phone. We do not record your screen.
Security logs
- When someone checks an invite code, we log a scrambled (hashed) version of their IP address to stop abuse.
Instagram, only if you connect it
- Your Instagram user ID and username, an access token, and up to 24 of your recent photos with their links and dates. See “Instagram” below.
Payments, only if you use them
- If you become a supporter or use payments, when they are available, we store your Stripe customer ID and your subscription or payment status. Stripe collects your card or bank details directly. We never see full card numbers.
We do not collect your device location, contacts or advertising identifier, and we do not track you across other apps or websites.
Why we use it
- To run Friendor: sign you in, show your profile to other members, publish your gigs, deliver messages and send the notifications you have turned on.
- To keep Friendor safe: check invite codes, review reports, enforce blocks and suspensions, and stop abuse.
- To fix bugs and keep the app fast, using crash and performance data.
- To answer you when you contact us or send feedback.
We do not sell your personal information, and we do not use it for advertising.
Who can see what
- Signed-in members can see your profile, your gigs and your comments. Gigs and comments are only readable by signed-in members. If you hide a gig from a vendor, that vendor does not see it.
- The person you message sees your messages.
- Anyone with the link can open your profile photo and portfolio images, because these images are stored at public web addresses. This includes photos copied from Instagram.
- Anyone you share a gig link with can open a page showing that gig’s title, role needed, location, date and pay.
- The person you report is never told who reported them.
Who we share it with
We use a few service providers to run Friendor. They process data for us, only to provide their service.
- Supabase hosts our database, sign-in, file storage and server functions. Almost everything in this policy is stored there.
- Sentry receives crash and performance data, linked to your account ID and scrubbed as described above. No screen recording.
- Expo push service and Apple Push Notification service deliver notifications to your phone. They receive the notification text. For a direct message, that is the sender’s name and the first 120 characters of the message. Notification text can show on your lock screen.
- Anthropic provides an AI model for an admin-only tool. When someone shares a screenshot of a gig post with us, an admin can use the tool to turn it into a gig listing. The screenshot may include names or contact details shown in the original post. Members never trigger this tool, and it does not read your messages or profile.
- Stripe processes supporter subscriptions and gig payments and payouts, when those features are available.
- Meta (Instagram), only if you connect Instagram. See below.
If you tap a link to an insurance partner, you leave Friendor and the partner’s own privacy policy applies. The link carries a random referral code and no personal information.
We may also share information if the law requires it, or to protect someone’s safety.
Connecting Instagram is optional. It fills your portfolio from your recent Instagram photos.
- We ask Meta only for basic access to your professional account (the
instagram_business_basicpermission). - We receive your Instagram username and a list of your recent media, and we store copies of up to 24 recent photos so your portfolio keeps showing.
- Your access token is encrypted on our servers and never shown in the app or to other members.
- A daily job keeps the photos in sync while you stay connected.
- We never post, comment, send messages or read insights for you.
- Disconnecting in the app deletes your token and every stored photo copy right away. Removing Friendor’s access in your Instagram settings, or deleting your Friendor account, does the same. Meta also notifies us when you ask Meta to delete your data, and we delete it then.
Linked to you, or not
Almost everything Friendor collects is linked to your account, including crash and performance data, which carries your account ID.
These are not linked to you:
- Feedback you send in anonymous mode. We store it without your account.
- The hashed IP addresses in our security logs.
How long we keep it
| What | How long |
|---|---|
| Your account, profile, gigs, comments, messages and other content | While your account is open. Deleted when you delete your account. |
| Security logs (hashed IP addresses) | 24 hours |
| Scheduled job history on our servers | A short period, then deleted automatically |
| Instagram sign-in check | 10 minutes |
| Instagram token and photo copies | Until you disconnect or delete your account |
| Crash and performance data at Sentry | A limited period under Sentry’s retention settings, then deleted automatically |
| Notification delivery records at Expo and Apple | Set by Expo and Apple |
| Feedback | Kept after you delete your account, without your name or account |
| Payment and subscription records | Kept after you delete your account, without your account link, for accounting |
| Reports other members filed about you | Kept for safety after you delete your account |
| Backups of our database | A short rolling period set by our database host, then overwritten |
Direct messages: when you delete your account, every conversation you were in is deleted for both people. That includes the messages the other person sent you. If you want to keep a conversation, save what you need before either of you deletes your account.
Your choices and rights
- Edit your profile, gigs and comments in the app at any time.
- Control notifications in Friendor’s Settings (messages, activity, backfills) or in iOS Settings.
- Hide a gig from specific vendors, block anyone, and report gigs, profiles or messages.
- Disconnect Instagram in the app at any time.
- Delete your account in the app: open the Help menu, choose Delete Account, and type DELETE to confirm. This deletes your profile, photos (including Instagram copies), gigs, comments, applications, connections, crews and conversations, then your sign-in. It also cancels any supporter subscription. You cannot delete your account while a payment involving you is being held. Finish or cancel that payment first, or email us.
- If your account is suspended and you cannot sign in, email us and we will delete it for you.
- Get a copy of your data: email us from your account email. We will answer within 30 days.
- Ask us to correct or delete anything: email us. We will answer within 30 days.
Reports and moderation
Reports go to a private review queue. We aim to review reports promptly. We may remove content or suspend accounts that break our Terms. A suspended person can read the reason in the app and appeal by email. A suspended account’s profile and gigs are hidden, and its past messages stay visible to the people who received them.
Age
Friendor is for working wedding vendors who are 16 or older. It is not meant for children, and we do not knowingly collect information from anyone under 16. If you think a child has an account, email us and we will delete it.
Security
- Data travels between the app and our servers over encrypted connections (TLS).
- Supabase encrypts stored data.
- Your Instagram token is encrypted with AES-256-GCM.
- Database access rules limit who can read what, and we rate-limit sensitive actions.
No system is perfectly secure. If we learn of a breach that affects you, we will tell you.
Where your data is processed
Friendor and its service providers process data in the United States and in other countries where those providers operate.
Changes
If we change this policy, we will update the date at the top. We will announce important changes in the app before they take effect.