1. Who is responsible
TurboDuck LLC operates FORFANS and forfans.top. Contact us about privacy at turboduck@foxmail.com or 2461 Charmaine Lane, Monticello, FL 32344, United States. This Policy covers our app, website and communications with us. External platforms have their own policies.
2. Information you provide
Account and authentication information: Sign in with Apple provides an account identifier and may provide a name and email address, including an Apple private relay address. We handle authentication credentials to verify access and revoke the FORFANS authorization when you delete your account. Your FORFANS profile includes a nickname, uploaded profile photo and assigned user ID. Account email and company or brand name are optional.
Activity you choose to save: saved and blocked creators, reports, conversation records, text messages and proposal details. A proposal can include a collaboration type, selected platforms, budget range, timing and message. These records currently organize outbound submissions; the current release does not deliver them to creators or receive creator replies.
Support information: feedback type, description, required contact email, optional screenshots and associated app and device details. If you email us, we receive your address, message and attachments. Avoid including sensitive information that is not needed to explain your request.
3. Technical information and permissions
When you register, sign in or submit feedback, the app and service can record the time, IP address, device model, operating system, app version, language, system region and time zone. We may derive a rough country or city from an IP address using a locally hosted lookup database. This is network-based location information; the app does not request GPS location for this purpose.
The app sends limited diagnostic events, such as fixed error codes, the affected component, app version and device details, to help diagnose failures. Diagnostic reporting is designed to exclude message bodies, photos, passwords, authentication credentials and signed media links.
If you enable reply notifications and grant system permission, we register the installation identifier, notification preference, device token and related device details. The current release registers preferences and tokens but does not send reply notifications. You can disable the preference in FORFANS or change notification permission in iOS Settings.
Camera access is requested when you choose to take a profile photo. The system photo picker lets you choose images to upload. We receive the images you select, not unrestricted access to your photo library. Uploaded images are processed for display and image metadata is removed. The app also stores local image caches, preferences, authentication state and recent search history on your device.
4. This website and its demonstrations
The website’s animated app story runs in your browser using prepared sample content. It does not collect searches, accept proposal text, create an account or contact a creator. The illustrated reply is fictional and does not represent a message or endorsement from the creator shown. Playback controls only affect the animation in your browser.
This website does not use analytics cookies, advertising trackers or persistent demo storage. The website host, Amazon Web Services, may process technical request information such as IP addresses, browser details and access logs to serve and protect the website. Email links open your email application; information is sent to us only if you choose to send the email.
5. How we use information
We use information to authenticate you, create and maintain your profile, store your shortlist and proposals, apply your preferences, handle feedback and privacy requests, diagnose problems, prevent abuse and operate the service. We also use limited activity counts to understand service usage.
Where applicable law requires a legal basis, account and requested service functions are handled to perform our agreement with you; proportionate security, diagnostics and service administration support our legitimate interests; permissions or other optional processing rely on consent where required; and necessary compliance processing addresses legal obligations. You can withdraw permission-based consent through device settings or by contacting us, without affecting processing that already took place.
6. Access, providers and external links
Authorized personnel and providers that support authentication, hosting, storage, support communications and security may handle information for those functions. Apple provides authentication and notification infrastructure. Amazon Web Services hosts this website. App data also uses cloud hosting and object storage providers; website hosting and app data storage are separate services.
We may disclose information when reasonably necessary to comply with a valid legal requirement, protect people or the service, or address fraud and abuse. We may also make a disclosure you specifically request. Creator directory content includes publicly sourced names, biographies, social handles, platform links, audience snapshots and images. Creators can contact us to request a correction or raise a privacy or ownership concern.
Opening a creator's platform profile or the App Store connects you to an external service. That service receives technical information according to its own practices. Service providers may process data in countries other than yours, where privacy laws can differ. Contact us for information about the processing of your data.
7. Retention and account deletion
Profile information and linked account records are kept while your account exists and are needed to provide its functions. Unfinished Sign in with Apple profile prefill is kept for up to 30 days so registration can be resumed. Recent search history is kept on your device. Entries are shown for 30 days and can be cleared in the app. Detailed application error events follow a 30-day retention period; summarized error reports are kept for up to 100 days.
Initiate deletion from the app's Account area and complete confirmation with Apple. Once deletion is accepted, your sessions are invalidated and linked profile, saved creator, message, feedback and device records are removed from the active database. User images are queued for deletion from object storage, so that cleanup may complete after the database deletion. A minimal request receipt is retained for up to 24 hours to recognize a retry. The minimal encrypted credential needed to revoke Apple authorization is removed when that task ends, with a maximum task window of 7 days.
Encrypted database backups follow a 30-day retention policy. Deleted information may remain in an existing backup until it is removed under that policy; recovery procedures include deletion checks. We retain unlinked registration and deletion time facts for 365 days for service statistics. These facts do not contain an Apple identifier, user ID, email, device information or a link to the former account.
If a specific legal obligation requires additional retention, we will retain only the information required for that obligation. Email correspondence and website hosting logs are kept as needed for their purpose and applicable obligations; contact us for details.
8. Your choices and rights
You can edit your profile, clear recent searches, change preferences, manage system permissions and initiate account deletion in the app. Disabling notifications or signing out unbinds the installation's active notification token. Account deletion removes the account's notification records.
Depending on your location and applicable law, you may have rights to access, correct, delete or receive a copy of your personal information, restrict or object to certain processing, withdraw consent, and complain to a data protection authority. Send requests to turboduck@foxmail.com. We may need to verify your identity before providing information or acting on a request. We will handle applicable requests under the law that applies to them and will not discriminate against you for exercising a legal privacy right.
9. Children and security
FORFANS is for people aged 13 and older and is not offered to children under 13. If you believe a child under 13 has provided personal information, contact us so we can investigate and take appropriate action. Users below the age of legal majority must have a parent or guardian's permission and supervision.
We use HTTPS, access controls and private storage with limited media access to help protect information. No online service can guarantee absolute security. Keep your devices and Apple Account secure, and do not put passwords or sensitive financial information in messages or feedback.
10. Changes and contact
We may update this Policy when our practices or the service change. The updated date appears on this page. We will provide additional notice or obtain consent where required by law. For privacy questions, requests or creator profile concerns, email turboduck@foxmail.com.