WeFoundIt

Privacy Policy

Last updated: August 25, 2026

1. Introduction

WeFoundIt ("we", "us", "our") is operated by DG Enterprise in Cameroon. This Privacy Policy explains how we collect, use, store, and protect your personal information across all WeFoundIt modules: Lost & Found, WeFood, WeSell, WeHire, Delivery, and WeGive.

This policy applies to the WeFoundIt mobile app (iOS and Android), web app (https://app.wefoundit.space), and landing site (https://wefoundit.space).

By using any WeFoundIt service, you agree to the data practices described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information

  • Full name, email address, phone number
  • City and region (for location-based services)
  • Profile photo (optional)
  • Authentication tokens from Google Sign-In or Apple Sign-In
  • Institutional affiliation (for verified institutions)

2.2 Location Data

  • GPS coordinates (when you grant location permission)
  • City-level location for displaying nearby items, restaurants, and services
  • Real-time location for delivery tracking (drivers only, when online)
  • Geofence data for proximity-based alerts (nearby lost items, deliveries)

2.3 Photos and Media

  • Item photos (Lost & Found reports, marketplace listings, donations)
  • Food photos (vendor menus, order evidence)
  • Portfolio images (service provider profiles)
  • Sensitive documents (ID cards, passports, driving licenses) uploaded for verification purposes

2.4 Payment References

  • Mobile Money transaction references (MTN MoMo, Orange Money)
  • Transaction amounts, dates, and status
  • We do NOT store your Mobile Money PIN, account passwords, or full financial account details

2.5 Device and Technical Data

  • Device type, operating system, app version
  • Firebase Cloud Messaging (FCM) device tokens for push notifications
  • Usage patterns (features accessed, session duration, interactions)
  • Crash reports and error logs (via Sentry)
  • IP address and browser information (web app only)

3. How We Use Your Information

  • Service delivery: To provide, maintain, and improve all WeFoundIt modules
  • Item matching: To power AI-driven lost and found item matching algorithms
  • Notifications: To send push notifications about matches, orders, bookings, messages, and platform updates
  • Payments: To process transactions, commissions, and payouts
  • Analytics: To understand usage patterns and improve the platform experience
  • Safety: To detect and prevent fraud, abuse, and policy violations
  • Identity verification: To verify user identity, institutional affiliation, and charity status
  • Communication: To enable in-app messaging between users engaged in transactions
  • Location services: To display nearby content, enable delivery tracking, and send geofence alerts

4. Image Processing

All images uploaded to WeFoundIt are processed as follows:

  • Compression: Images are automatically compressed to reduce storage and improve loading times while maintaining visual quality.
  • Content moderation: Images are analyzed by AWS Rekognition (an AI-powered image analysis service) to detect inappropriate content including nudity, violence, and other policy-violating material.
  • Rejection: Images flagged as inappropriate are automatically rejected and are not stored or displayed on the platform.
  • Metadata: Image metadata (EXIF data) may be stripped for privacy protection.

5. Sensitive Document Handling

When users upload sensitive documents (ID cards, passports, driving licenses) for verification or lost document reporting:

  • Documents are stored securely with encryption at rest and in transit.
  • Sensitive information on documents is automatically blurred for regular users viewing the platform.
  • Only authorized administrators and verified institutional partners (e.g., police stations, schools) may view unblurred document images when processing claims.
  • Document access is logged and audited.

6. Location Data

WeFoundIt collects and uses location data for the following purposes:

  • Nearby items: Displaying lost and found items, marketplace listings, restaurants, and services near your location.
  • Delivery tracking: Real-time GPS tracking of active deliveries (visible to sender, recipient, and driver).
  • Geofence alerts: Notifying you when a potentially matching lost item is reported near your location.
  • Driver availability: Showing available drivers in your area for delivery requests.

Location data is collected only when you grant permission. You can disable location access at any time through your device settings, though this may limit platform functionality.

7. Push Notifications

  • Push notifications are delivered via Firebase Cloud Messaging (FCM).
  • FCM device tokens are stored on our servers to enable notification delivery.
  • Tokens are deleted from our servers when you log out of the app.
  • You can disable push notifications at any time through your device settings or in-app notification preferences (Settings > Notifications).
  • Notification types include: item matches, order updates, booking confirmations, chat messages, delivery status, and platform announcements.

8. Payment Data

  • Payments are processed by Fapshi, our third-party payment gateway, which handles MTN Mobile Money and Orange Money transactions.
  • We store only transaction references (transaction ID, amount, status, date) for record-keeping and dispute resolution.
  • We do NOT store your Mobile Money PIN, account number, or any sensitive financial credentials.
  • Payment data is shared only with Fapshi for processing purposes. Fapshi's own privacy policy governs their handling of your payment information.

9. Data Storage and Security

We take the security of your data seriously and implement the following measures:

  • Hosting: All data is stored on Amazon Web Services (AWS) in the EU-West-1 region.
  • Encryption at rest: All stored data is encrypted using industry-standard encryption.
  • Encryption in transit: All communications use HTTPS/TLS encryption.
  • Backups: Daily automated database backups with 90-day retention.
  • Authentication: JWT-based authentication with automatic token refresh and bcrypt password hashing.
  • Access control: Role-based access control limits data access to authorized personnel only.
  • Monitoring: Continuous security monitoring and regular audits.

10. Data Sharing

We do not sell your personal data to third parties. We share information only in these limited circumstances:

  • Between users: When you engage in a transaction (buy, sell, book, order, deliver), relevant contact information is shared as needed to complete the transaction.
  • Payment processors: Fapshi receives necessary payment details to process Mobile Money transactions.
  • Cloud infrastructure: AWS (hosting and storage), Cloudflare (CDN and security), Firebase (push notifications and analytics).
  • Content moderation: AWS Rekognition processes uploaded images for content safety checks.
  • Error tracking: Sentry receives crash reports and error logs to help us fix bugs.
  • Legal requirements: If required by Cameroonian law, court order, or to protect the safety of users or the public.

11. Data Retention

  • Active accounts: Data is retained for as long as your account remains active.
  • Database backups: Retained for 90 days, then automatically deleted.
  • Deleted accounts: Personal data is permanently removed within 30 days of account deletion. During this period, deletion can be reversed by contacting support.
  • Transaction records: Financial transaction records are retained for 5 years after the transaction date, as required by Cameroonian financial regulations.
  • Anonymized data: Aggregated, anonymized usage data may be retained indefinitely for analytics and platform improvement.

12. User Rights

You have the following rights regarding your personal data:

  • Access: View your personal data at any time through Settings > Profile.
  • Correction: Update or correct inaccurate personal information through your profile settings.
  • Deletion: Delete your account and all associated personal data from Settings > Delete Account.
  • Export: Request a copy of your data by contacting team@wefoundit.space.
  • Opt-out: Disable promotional notifications, marketing communications, and non-essential data collection.
  • Restriction: Request restriction of processing in certain circumstances by contacting our Data Protection Officer.

13. Children's Privacy

WeFoundIt is not intended for use by children under the age of 13. We do not knowingly collect personal information from children under 13. Users must be at least 16 years old to create an account.

If you believe that a child under 13 has provided us with personal information, please contact us immediately at team@wefoundit.space and we will take steps to delete such information.

14. Cookies and Tracking

Our web application (https://app.wefoundit.space) and landing site (https://wefoundit.space) may use:

  • Essential cookies: Required for authentication and session management.
  • Analytics cookies: To understand how users interact with our web services (anonymized).
  • Preference cookies: To remember your settings and preferences.

The mobile app does not use cookies. Analytics in the mobile app are handled through Firebase Analytics with anonymized identifiers.

You can manage cookie preferences through your browser settings.

15. Changes to This Policy

We may update this Privacy Policy as our platform and services evolve. When we make significant changes, we will:

  • Update the "Last updated" date at the top of this page
  • Notify users via push notification, email, or in-app notice for material changes
  • Provide a summary of key changes

Your continued use of WeFoundIt after changes are posted constitutes your acceptance of the revised policy. If you do not agree with updates, you should discontinue use of the platform and delete your account.

16. Contact

For privacy concerns, data requests, or questions about this policy: