Consumer Health Data Privacy Notice

Foundplace is operated by Erol Kütükcü, a sole proprietor in Türkiye, at CEVİZLİ MAH. ZUHAL CAD. A BLOK NO: 46 İÇ KAPI NO: 50, MALTEPE / İSTANBUL, Türkiye. Contact support@foundplace.app for consumer health data requests. This notice describes consumer health data processed when you use Foundplace and the rights provided by applicable Washington and Nevada law.

Health data we collect and why

What you choose to save may identify your physical or mental health, symptoms, conditions, treatment interests, medications, reproductive or sexual health, or efforts to obtain health services. Notes, selected photos or screenshots, saved URLs, source captions and articles, and AI-generated summaries and library connections may contain or infer this information. Account identifiers connect that information to your library. A health-related Interest or Research context can itself reveal health information. Foundplace does not require a medical history or access to Apple Health, and does not provide medical diagnosis.

We use this information only to provide the library you ask for: to save, summarize, search and organize your saves into Interests, Research and Decisions. When you add new saves or edit a note, related earlier saves may be processed again to keep your library organized. If you include health information in a support or privacy request, we use it only to answer that request. We do not sell your health information, use it for advertising, or use it to train AI models.

Sources

We receive information directly from you, from source content associated with links you intentionally save, and from inferences generated while organizing your library. We do not buy consumer health profiles or automatically import your entire photo library.

Sharing

Supabase processes the account, library and operational data necessary to host Foundplace. OpenAI processes selected saved content, notes and relevant library context when AI permission is valid. Apify receives supported public source URLs and public source content when extraction is enabled; the extraction flow does not send your private uploaded photos, notes or account session to Apify. Cloudflare stores encrypted backup copies of photos and screenshots you upload, in the EU; backups are deleted automatically after 30 days. A URL can itself reveal a health interest. Support email providers process what you email us. Authorized professional advisers or public authorities may receive information where a lawful necessity applies. We have no corporate affiliates to which we share consumer health data. We do not sell consumer health data, share it for advertising, or use geofencing around healthcare facilities to identify or track people seeking healthcare.

Your rights and choices

We do not sell your health data or share it for advertising. You can ask us to confirm what health data we collect and which service providers process it and why, request a copy, withdraw your consent, or ask us to delete it.

To stop future AI processing, turn off AI permission in the app's Settings. For any other health-data request, email support@foundplace.app. We respond within 45 days. Where the law allows, we may extend this once by another 45 days and will tell you why.

While AI permission is off, new AI processing is paused. Your existing saves stay available and are not deleted. The app may ask you to turn AI permission back on before accepting a new save. Work already accepted but waiting for AI can resume when you turn permission back on. Turning it off does not undo processing that already happened.

We verify requests in a way that fits the request, without routinely asking for identity documents or extra health details. If we deny a request, you can appeal by replying to our answer. We will respond to your appeal within 45 days and tell you how to contact the Washington or Nevada Attorney General if you are not satisfied.

When you delete your account, we delete your health information from our active systems and notify our service providers of your deletion request, as the law requires. Backups are encrypted and deleted automatically within 30 days, and deleted information is never restored from a backup.