Privacy notice

Last updated: 7 October 2026

This notice explains what personal data YoFinders collects on yofinders.com and in the YoFinders app, why, who sees it, how long we keep it and what your rights are.

Who we are

YoFinders is a QR lost-and-found service launching from Dubai. There is no registered YoFinders company yet. A UK company, YOFINDERS LTD, is being incorporated. Until it is registered, the founders of YoFinders are responsible for your personal data (the "controller"). We will update this notice with the company's details once it is registered.

• E-mail: info@yofinders.com
• Phone: +971 56 511 0096
• Post: Office 209, Al Fattan Business Hub, JBR, PO Box 215615, Dubai, United Arab Emirates

The short version

• We set no cookies. We use no analytics, no advertising pixels and no third-party scripts.
• We only receive what you type into our forms, plus an approximate location on the finder page if you choose to add it.
• A finder never sees the owner's details. The owner receives only what the finder chooses to send.
• We do not sell your data or use it for advertising. Sponsors or partners who hand out tags never receive personal data, only totals.
• No payment is taken on this website.

If you register a tag (owners)

When you activate a tag on yofinders.com or in the app, we ask for:

• what the tag is on (for example "keys"). Please do not write a child's name or any medical details here;
• your first and last name and your country of residence;
• your mobile number and e-mail address.

We also record the tag code, the date, the language and which version of our terms you agreed to. You must be 18 or over to register a tag. A parent or guardian may register items a child uses.

We use this to tell you when someone finds your item, to pass you the finder's message, to let you add more tags without typing your details again, and to answer you. Your country helps us run the service in each country.

News and offers: only if you tick the separate, optional box. You can stop them at any time.

Legal basis: the contract between you and us (EU/UK GDPR Art. 6(1)(b); UAE Federal Decree-Law 45/2021 Art. 4). News: your consent.

If you only left your e-mail in the pre-registration form on our home page, we use it to tell you about the launch and to set up your account (steps you asked for before a contract, and your consent for launch news).

If you report a found item (finders)

Scanning a YoFinders tag opens a page at yofinders.com/t/ followed by the tag's code. You can read that page without giving us anything. If you send a report, you choose one of two options:

• I still have it: your name and phone or WhatsApp number (needed so the owner can reach you) and an optional note;
• I handed it in: where you handed it in (for example a lost & found desk, security, reception, a police station), the place and spot, and optionally the first name of the person who took it and a police or lost & found reference. Your own name and phone are optional in this case.

You may also tap "Add approximate location". We then receive your location rounded to about 100 metres. Nothing about your location is collected unless you tap it.

We send your report to the item's owner by e-mail, only so they can get the item back. If the tag is not registered yet, the report goes to the YoFinders team, who try to find the owner. Before you send, you tick a box confirming you agree to this. You must be 13 or over to send a report.

Legal basis: in the EU and UK, the legitimate interests of the owner and of you in getting the item back to its owner (Art. 6(1)(f)), and your consent for the location. In the UAE, your consent, which you give with the tick box (Federal Decree-Law 45/2021 Art. 4 and 6).

Found-item rules: in Dubai, the law asks finders to register a found item with Dubai Police within 24 hours and hand it in within 48 hours (Law No. 17 of 2025); in Abu Dhabi found items go to the police (Law No. 13 of 2023). Sending a report to YoFinders does not do that for you.

People named in hand-over reports

A finder may write the first name of the staff member who took the item (for example "Ahmed, security"). Only the item's owner sees it, so they know whom to ask. It is deleted together with the report. If this is you and you want it removed, write to us.

When the item is back

The e-mail to the owner has a one-tap "I got it back" link. When the owner taps it, we record the date. We use this to count returns and to close the case.

Counting scans

Each time a tag page is opened, we record the tag code and the time, so we can count scans. We record nothing about the person who scanned.

If you e-mail us

If you write to info@yofinders.com, we receive your e-mail address, your message and anything you attach. Our e-mail is handled in Microsoft 365. We use it to reply to you. Legal basis: our legitimate interest in answering you, or steps you asked for before a contract.

Technical data

No website can be delivered without your device's IP address. When you visit the site or send a form, our providers process technical data such as your IP address, browser type and the page requested. They do this to deliver the site and protect it from abuse, and keep it under their own log settings. We do not use this data to identify or profile you. Legal basis: our legitimate interest in running a working, secure website.

Cookies and your browser

We set no cookies. The site keeps two small items in your browser's local storage: the language you chose, and, after you register a tag, a random sign-in key so your next tag needs only the item name. Neither is used for tracking. "Not you?" on the tag page removes the sign-in key; clearing your browser data removes both. These are strictly necessary for features you asked for.

Who else handles your data

• Vercel Inc. hosts the website.
• Our database, where tags and reports are stored, is an application of Ligne Verte (our service provider, which runs it for us) hosted on the Higgsfield platform on Cloudflare. Only the YoFinders administrator can open YoFinders data there, and every opening is logged.
• Microsoft provides our e-mail (Microsoft 365). Owner alerts are sent from info@yofinders.com.
• Apple and Google deliver the app.
• The item's owner receives a finder's report, only to get the item back.

These providers act on our behalf. We do not share your data with anyone else unless the law requires us to, for example a police request about a found item.

International transfers

Your data may be processed outside your country, including in the UAE, the European Union, the United Kingdom and the United States. Where applicable, these transfers rely on the standard contractual clauses in our providers' terms (and the UK addendum). Under UAE law, they rely on the contract with you, your consent and our agreements with providers.

How long we keep it

• Owner details: while you have an active tag. We delete them within 30 days after you remove your last tag or ask us to.
• Pre-registrations from the home page: until 24 months after launch, unless you ask us to delete them sooner.
• Finder reports, including names of staff and location: 90 days after the item is returned or the case is closed.
• Records of what you agreed to: as long as the data they relate to, then up to 2 years as proof.
• Encrypted backups: 90 days.
• E-mails: as long as needed for the conversation.

Rewards and payments

No payment is taken on this website. It never asks for card or bank details. When rewards go live, they will be handled by a licensed payment partner, and we will update this notice before then.

Security

• Data travels over HTTPS only.
• Only the YoFinders administrator can open owner and finder data in our database; every opening is logged. Other staff of our service provider cannot see it.
• Sign-in keys and "I got it back" links are stored only as one-way hashes.
• A daily backup is encrypted (AES-256) before it is stored; the key is kept separately.
• Forms are rate-limited and checked against spam.

If a data breach is likely to put you at risk, we will tell you and the competent authority as the law requires.

Your rights

You have the right to:

• access the data we hold about you and get a copy;
• have it corrected;
• have it deleted;
• restrict how we use it;
• object to how we use it;
• receive the data you gave us in a portable format;
• withdraw your consent at any time. This does not affect anything we did before.

Some of these rights have conditions set by law. To use any of them, write to info@yofinders.com. We answer within one month. We may ask you to confirm your identity first.

We do not make decisions about you by automated means alone.

Complaints

If you are unhappy with how we handle your data, you can tell us at info@yofinders.com. We will acknowledge your complaint within 30 days and look into it without undue delay. You also have the right to complain to a supervisory authority:

• in the UK: the Information Commissioner's Office, ico.org.uk;
• in the EU: your local data protection authority;
• in Switzerland: the Federal Data Protection and Information Commissioner (FDPIC);
• in the UAE: the UAE Data Office.

Children

Owners must be 18 or over; a parent or guardian may register items a child uses. Please do not put a child's name or health details on a tag or in the item name. Finders must be 13 or over to send a report.

Changes to this notice

We will update this notice when YOFINDERS LTD is registered and whenever what we do with data changes. The date at the top shows the current version.