Privacy Policy
Last updated: October 30, 2026 · CoFoundr is operated by BZM, LLC ("we", "us").
What we collect
- Account: your email address, and a password only if you choose to set one (stored as a one-way hash — we can never see it).
- Profile: what you put on your card — first name, photo, city, skills, one-liner, personal note, sectors, stage, goals, what you're looking for in a co-founder, and prompt answers. If you invest: firm, sectors, stages, and typical check size.
- Optional investor details: an accreditation self-attestation, a linked X handle, and a private deploy signal. The deploy signal is never shown to other members.
- Activity: who you connect with or pass on, your matches, the messages you send, referrals, reports, blocks, and any skills or sectors you suggest adding.
- Device: a push-notification token if you allow notifications.
- Usage and diagnostics: in-app events (for example, that a deck was viewed or a match was made) and crash reports (error message, app version, and platform) so we can fix problems.
- Purchases: if you subscribe to CoFoundr Plus, Apple processes the payment. We receive only what Apple signs for us — which plan, when it renews or expires, and a transaction ID. We never see your card or Apple account details.
- Website waitlist: your email and the role you selected, if you join the waitlist at cofoundr.tech.
Who sees what
- Your card is shown to other signed-in members in their daily decks. Before you match, they see your top five skills; after you both connect, they see your full card.
- Messages are only visible in the app to you and the person you matched with. They are encrypted in transit and at rest. They are not end-to-end encrypted, and we may review a conversation if it is reported to us.
- We never show other members your email address, password, deploy signal, or purchase details.
How we use it
- To build your daily deck — matching uses your profile fields and city, and skips people you've already passed on, connected with, or blocked.
- To deliver matches, messages, and the notifications you've turned on.
- To run the referral program — we store a one-way hash of an invitee's email, not the address.
- To keep the community safe through reports, blocks, and enforcement.
- To understand how the app is used and fix crashes.
What we never do
- We do not sell or rent your personal information.
- We do not show ads, and we do not use your messages for advertising.
Service providers
A small set of processors runs CoFoundr, each receiving only what it needs:
Supabase (database, sign-in, photo storage, and server functions),
Resend (sign-in and account emails),
Apple (App Store purchases and push delivery), and
Expo (push-notification delivery). Our data is stored in the United States.
Keeping and deleting your data
We keep your information while your account is open. Delete your account anytime in the app
(Profile → Settings → Delete account): your profile, photo, swipes, matches, and messages are
permanently removed, and residual copies are purged from backups within 30 days. Usage events and
crash reports are kept only as long as we need them to run and improve the service. Apple keeps its
own purchase records under Apple's privacy policy.
Age
CoFoundr is for adults 18 and older. We do not knowingly collect information from anyone under 18,
and we delete any account we learn belongs to a minor.
Contact
Privacy questions or requests: cofoundr@bzm.global.
Changes
If we materially change this policy, we'll update this page and tell you in the app before the change takes effect.