Last updated: August 11, 2026
This Privacy Policy explains what Fan+Follow collects, why we collect it, who we share it with, and the control you have over it. Fan+Follow is a connection layer — one profile holding your official links — so most of what we hold is information you deliberately chose to make findable. This policy covers our website and app (the "Service").
Account details: your name, email address and the password or sign-in method you use.
Profile content: display name, bio, photos, header images, location, categories, tags, custom URL, and the social links, usernames and follower counts you add.
Verification information, only if you choose to get verified or claim a profile: government ID, a selfie, matching social accounts, and notes from a verification video call.
Messages and support: the messages you send through the Service, and anything you send us in a support ticket or partnership application.
If you sign in with Google, we receive your name, email address and profile picture from your Google account so we can create and secure your account.
We never receive your Google password, and we do not request or access your Gmail, Drive, Calendar, Contacts or any other Google service data.
Some profiles are created before their owner joins. We build them for one reason: to protect real accounts. A profile that already holds someone's verified official links means fans land on the genuine person, brand or business — and impersonation, which we do not allow, has nowhere to take hold.
The information on those profiles comes from publicly available sources — public social accounts, official websites and freely licensed public reference material.
These profiles contain public, professional information only. They are never monetized before they are claimed, and we do not build hidden or private records about people.
If a profile is about you, you can claim it and take full control, or ask us to remove it.
Public info only. Nothing sneaky, nothing bought.
Basic usage and device information: pages viewed, features used, device and browser type, approximate time of access, and error reports, used to run and improve the Service.
Local storage on your device for things like your theme choice, onboarding progress and staying signed in. We do not use third-party advertising trackers.
Profile view records, so account owners can see interest in their profile. What a viewer sees about you is controlled by your own Profile Visit and Privacy settings.
Payments and payouts are handled by Stripe. We never receive or store your full card number or bank credentials.
We keep transaction records — amount, type, status, date, platform fee and payout amount — because we need them to run monetization, support and accounting.
To create your account and display your profile, links and content to the people you've chosen to show them to.
To power discovery, search, categories and featured placement so fans can find real accounts.
To deliver messages, paid direct messages, calls, notifications and emails you have opted into.
To process payments, platform fees and payouts.
To verify identity and ownership, prevent impersonation, fraud, spam and abuse, and enforce our Terms.
To fix problems and improve the Service.
We do not use your personal information to train AI models, and we do not use your private messages for advertising.
Your profile — display name, photo, bio and the links you add — is visible to others and may be publicly viewable, depending on your visibility setting: public, business or private.
Individual social links can be marked private, so they appear only to you, to admins, to people on your Friends & Family list, or to someone opening your private QR link.
Your email address, payment details and verification documents are never shown on your public profile.
You can change visibility, activity status, search and discovery appearance at any time in Privacy & Security Settings.
We do not sell your personal information, and we do not share it for cross-context behavioural advertising.
We share only what's needed with the providers that run the Service: our hosting and application platform, Google for optional sign-in, Stripe for payments and payouts, and the AI provider we use for optional in-app features such as drafting a bio, where you have AI features enabled.
We may disclose information where legally required, to enforce our Terms, or to protect the safety and rights of our users.
If the business is ever sold or merged, account information may transfer as part of that, and this policy continues to apply until you're told otherwise.
Some optional features use AI to help you write a bio, tags or a proposal. When you use one, the text you submit is sent to our AI provider to generate that result.
You can turn AI assistance off entirely in Settings, and your private direct messages are not used to train any model.
We may remove this option entirely.
We keep your information while your account is active. You can hide your account temporarily, which removes you from public view while keeping your data intact.
Deleting your account permanently removes your profile and associated content. We keep limited records where the law requires it — for example transaction and tax records — and backups clear on a rolling schedule.
We protect your information with encrypted connections, access controls, role-based permissions and row-level rules that limit each account to its own records. Two-factor authentication is available in Settings.
No system is perfectly secure. If a breach ever affects your personal information, we will notify you and the relevant authorities as required by law.
Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent.
Under the CCPA/CPRA and similar US state laws you have the rights to know, delete, correct and to opt out of the sale or sharing of personal information — we do not sell or share it, and we honour Global Privacy Control signals. Under Canadian law (PIPEDA) you may access and correct your information and complain to the Office of the Privacy Commissioner. Under the GDPR you also have the right to data portability and to complain to your local supervisory authority.
You can exercise most of these rights directly in Settings, or by contacting us through Contact & Support. We will never treat you differently for exercising a privacy right.
Fan+Follow accounts start at age 13, the same minimum age used by YouTube and Google accounts, and higher where local law requires it. We do not knowingly collect personal information from anyone under 13, and if we learn of an under-13 account we remove it and its data.
For creators aged 13 to 17, a parent or legal guardian agrees to our Terms on their behalf. Payouts and monetization data are tied to the adult who owns the connected payout account, and a parent or guardian can contact us at any time to access, correct or delete their child's information.
We operate from the United States, and our providers may process information in the United States, Canada and the European Union. Where information moves across borders, we rely on appropriate safeguards such as standard contractual clauses.
Memorial "In Memory Of" profiles contain public, respectful information only, are never monetized, and are never used for advertising. Verified family, estates or authorized representatives can request corrections or removal at any time.
We may update this policy. If a change is material, we'll update the date at the top and, where appropriate, tell you in the app.
For any privacy question, request or complaint, reach us through the Contact & Support page in the app.