Last updated 26 September 2026
Found & Felt reads your photo library to find the moments worth keeping. This page says what we collect, what leaves your phone, and what we never do with it.
An email address and a password. Our authentication provider stores the password hashed; we never see it.
With your permission, the app scans photos on your device within your book’s date range. Finding and grouping faces happens on your phone. We never upload or hold a copy of your library.
We store two sets of images, private to your account: the photos that become moments (about one per week) and the face crops used to recognise your people. They let your book open on a new phone and let us print it. They’re deleted with the moment, person, or account.
The names you enter and which face belongs to which name.
Your answers to each moment’s question.
If a photo has location data, we turn the coordinates into a place name (a city, a park, a beach). We store and cache that name.
After each scan we record counts, durations, and reason codes — photos checked, faces found, time taken, memory errors. No names, titles, or photo identifiers.
To recognise people and write each moment, we send face crops and a moment’s candidate photos to Anthropic’s Claude API, with the names you gave those people, the date, and the place name. Requests go through our own server, which forwards them and logs only the model name and token counts, never the images.
Face detection and grouping run on your phone. Claude sees only face crops (to double-check groupings), the few photos in the running for each moment (to pick one), and the chosen photo (to write). These are the same images stored in your account. Nothing else from your library is uploaded.
Anthropic’s commercial API terms say inputs and outputs aren’t used for training unless the customer opts in. We haven’t.
If you don’t want photos of your family processed by an AI provider, this app isn’t for you.
We use PostHog (hosted in the US) to see where people get stuck: onboarding drop-off, failed scans, abandoned answers. Automatic capture is off, so we collect only events we’ve explicitly coded. Events carry counts, durations, and opaque identifiers — never book titles, answer text, photo identifiers, or place names.
On this website, PostHog tracks page views and whether the early-access form works. Cloudflare Web Analytics counts visits and referrers without cookies, so there’s no cookie banner.
Each processes data only on our instructions, never for its own purposes.
We keep your book while your account exists. Delete any answer or moment in the app. To delete your account and everything in it, including stored photos, go to Profile → Delete account. It’s immediate and permanent. Backups expire shortly after.
Depending on where you live, you may also request a copy of your data, correct it, or object to how we use it. Email zenia@foundandfelt.com.
The app asks for photo library access. You can decline, allow selected photos only, or change it later in settings. Revoking access stops scanning; your book stays.
Accounts are for adults only. If a child has created an account, email us and we’ll remove it.
The app is in early testing, so things change quickly. We may review technical logs to debug failed scans. Those logs hold counts and reason codes, never your content.
If we change how we handle your data in a meaningful way, we’ll tell you in the app or by email before it takes effect.
Found & Felt is operated by O’Fung Studios, LLC, which is responsible for this data. Questions: zenia@foundandfelt.com.
