Privacy Policy

Data Controller

Fennec Hint is provided by a natural person, not by a company. The controller of your data is Honore Moustapha Pekaou.

• Privacy contact: [email protected]

It is the same address you'll find at the bottom of your profile inside the app. We answer personally: Fennec Hint is a small project — there is no call centre, there is a mailbox that gets read.

What data we handle

Only what the service needs to work. Nothing is collected “in case it turns out useful one day”.

• Account: username, name, email address. Your password is never stored in readable form — the database holds only its cryptographic hash (bcrypt).
• Profile, optional: gender, age, physique, shoe size, preferred sports, preferred brands. You can leave these empty — they make recommendations more relevant, they don't let you in.
• Wardrobe: the clothing, accessories and gear you save, with name, season or category, sport, purchase date and expected lifespan when you provide them.
• Photos: the images you upload for your items and, if you choose to have one, your profile picture.
• City: the one you type. The app neither asks for nor uses your device location.
• Club: the posts you publish and the single message you send to join someone else's.
• Service usage: how many recommendations and photo recognitions you have used this month, and your current plan. They exist to apply the limits, and for nothing else.

Why we handle them

Almost everything rests on the contract: without a wardrobe there is no recommendation, without an email address there is no way to recover your account. These are data the service you asked for needs in order to exist.

The profile picture is the one exception, and it rests on consent. The app works exactly the same without it: no recommendation changes, no limit moves. That is why we ask with a checkbox that starts unticked, and why you can remove it whenever you like — removing it deletes the file, the reference and the consent together.

Your declaration that you are at least 18, and the fact that you were shown these documents, are recorded at sign-up so that we can show they were given.

Location and weather

Fennec Hint does not ask for location permission and does not read your phone's GPS. This is not a matter of restraint: the permission is not even declared in the app.

You type the city. From there our server does the work: it turns the city name into coordinates through Nominatim (OpenStreetMap), rounds those coordinates, and uses them to ask MET Norway for the forecast.

The rounded coordinates go into a technical cache that is not linked to your account: they describe an area, not a person. Your device never contacts Nominatim or MET Norway directly.

Photos and metadata

The photos you choose are sent to our servers over an encrypted connection (HTTPS).

Metadata is stripped on our servers, before the image is stored or passed to an AI provider. GPS coordinates, camera make and model, date and comments are removed.

We are precise about where this happens: the stripping is ours, not your phone's. The image leaves your device carrying its metadata and travels encrypted to us; it is at our end that it loses them. Anyone telling you they are removed before the image leaves would be describing something else.

One technical value survives — orientation — without which every portrait photo would appear lying on its side.

The stores holding your images are private: a public address will not open them. When the app shows you one, the server mints a signed link valid for one hour.

Artificial intelligence

Fennec Hint uses Anthropic models for two things: recognising an item from a photo, and composing the recommendations about what to wear and what to bring.

For recognition we send the already-stripped image, plus the item category and the language you want the answer in. We do not send your name, username, email or city.

For recommendations we send the situation: the chosen sport, the weather, the items in your wardrobe and — on paid plans — your gender and age if you provided them, and how often you have trained recently. We never send who you are: username, name, email, coordinates and photo references stay out.

We do not promise you that Anthropic retains nothing. That would be a promise about infrastructure that is not ours, and we are not making it. We tell you what we send and what we don't, which is what we can actually guarantee.

The Club

The Club board is anonymous: whoever reads a post sees the sport, the place, the day and the note, but not who published it.

Your username becomes visible to another person only after an accepted contact, following the flow the app implements: whoever wants to join sends a single message, and only then do the two names reveal themselves to each other.

There is no chat, there are no public profiles, and there is no feed to follow.

Any content can be reported, and any person can be blocked.

Who we share data with

We do not sell data and we do not hand it to anyone for advertising or commercial profiling. These are the providers involved, and the only ones:

• Supabase — the infrastructure running the database, the image store and the server functions.
• Anthropic — the AI models, for photo recognition and recommendations.
• Nominatim / OpenStreetMap — turning a city name into coordinates.
• MET Norway — the weather forecast.
• Gmail (SMTP) — sending service email: address confirmation, password recovery and operational messages.

Your device contacts none of them directly: every call starts from our server. The database is in London; the server functions run in the region closest to whoever calls them, and may therefore run elsewhere.

How long we keep them

Your account data stays for as long as your account exists. Some things have a life of their own:

• Club posts — 12 months from the date of the session.
• Reports — 24 months. They exist for whoever has to decide whether content breaks the rules.
• Monthly usage counters — the current month and the previous one.
• Password recovery and address confirmation codes — until used or expired.
• Technical caches — recommendations and forecasts are held for a few hours, and forecasts for one hour partly because the provider requires it.

Your rights

You may ask us to access your data, correct it, delete it, restrict its processing, object to the processing, or receive it in a machine-readable format. Where processing rests on consent — the profile picture — you may withdraw it at any time, and withdrawing it does not make what happened before unlawful.

Write to [email protected]. Many of these things you can do yourself, immediately: the profile is edited in the app, the picture is removed by tapping the avatar, and the account is deleted from the profile without writing to us at all.

If you believe the handling of your data breaks the law, you have the right to complain to the competent supervisory authority.

Deleting your account

You can delete your account from inside the app, without asking anyone: Profile → Delete account. Deletion is immediate and irreversible.

Only two things remain, and it is right that you know which: the reports you had submitted, in anonymised form and for at most 24 months, and some technical operating records that contain no identifier at all.

The dedicated page walks through the steps.

How we protect your data

Passwords are stored as a bcrypt hash, never in readable form. Traffic between the app and our servers is encrypted.

No database table is reachable directly from the app: every read and every write goes through a server function that establishes who you are from a signed token and filters the data to your account.

The image stores are private and open only through short-lived signed links.

What we do not do

This list is verified against the app's code; it is not a statement of intent:

• No behavioural analytics tooling.
• No advertising tooling.
• No install-attribution tooling.
• No device advertising identifier, and no cross-app tracking request.
• No location permission.

The site you are reading uses no cookies, has no forms and loads nothing from third parties: the typefaces are served from here.

Minimum age

Fennec Hint is for people aged 18 or over. At sign-up you are asked to declare it, and our server refuses the registration if the declaration is missing.

It is a declaration, not a verification. We do not ask for a document and we do not check a date of birth: no system can establish someone's age without verifying their identity, and we do not verify identity. We would rather say so than let you believe otherwise.

Changes to this policy

If the product changes in a way that affects your data, this page changes with it and the date at the top is updated. When the change is substantial, we tell you inside the app.