FAVES PRIVACY POLICY

Effective date: October 9, 2026
Last updated: October 9, 2026

This Privacy Policy explains how 816 Ventures, LLC ("Faves," "we," "us") collects, uses, discloses and retains personal information when you use the Faves mobile apps for iOS and Android, the web app at my.faves.club, the website at faves.club, and the connected-application service known as Faves MCP (together, the "Service").

Faves is a free app for keeping, ranking and sharing lists of your favorite movies, TV, video games, songs and albums. This policy describes the Service as it is actually built. Where a feature is in limited testing or not yet available, we say so rather than describing something we do not do.

SUMMARY OF KEY POINTS

This summary is for convenience only. The full policy controls.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We do not use advertising identifiers and we do not embed third-party advertising or analytics trackers.

Faves is a public product by design. Lists are public unless you make them private, and custom lists are always public. Your handle, display name, profile photo, and who you follow and who follows you are visible to anyone.

Accounts held by users under 18 are private by default. We apply additional protections to those accounts, described under "Children and teenagers."

You must be at least 13 to use Faves. We do not knowingly collect personal information from children under 13.

"Takes" — the selfie videos you can record in the app — are created and stored on your device. Faves does not upload or receive them.

You can request access to, correction of, deletion of, or a copy of your personal information. In-app account deletion and data export are being built; until they are available, we handle these requests by email at admin@816.ventures.

WHO WE ARE AND HOW TO CONTACT US

The Service is operated by 816 Ventures, LLC, a California limited liability company.

Mailing address: 7347 W 89th St, Los Angeles, CA 90045
Privacy contact: admin@816.ventures

Faves is intended for users in the United States. We do not currently offer the Service in the European Economic Area or the United Kingdom, and this policy does not address the GDPR or UK GDPR.

INFORMATION WE COLLECT

We collect information in three ways: information you give us, information created automatically when you use the Service, and information we receive from third parties you choose to connect.

Information you give us

Account information. To create an account you provide an email address, or you sign in with Google. If you sign in with Google, Google provides your name, email address and profile photo, which become your starting display name and avatar. There are no passwords for ordinary accounts; we send a sign-in link and a one-time code to your email address. Your email address is held in our authentication system and is not displayed on your profile.

Profile information. A unique public handle, a display name, and an optional profile photo.

Age band. During setup we ask you to confirm your age. We collect your age band — for example 13 to 18, or 19 to 24 — and we do not ask for or store your exact date of birth. We use the band to apply the protections described under "Children and teenagers" and to tailor recommendations, and it is recorded in our internal analytics.

Your content. The lists you create, the titles you add to them, the order and tiers you assign, your head-to-head picks, written notes, and voice notes of up to 60 seconds. Voice notes are audio recordings of your voice and are stored on our servers so they can be played back by anyone who can see the list.

Images you upload. Your profile photo and any images you add to a custom list, each up to 2 MB.

Catalog entries you create. If a title is missing from our catalog you can add a text-only entry for it.

Communications. If you email us — for example to make a privacy request or report content — we receive your message, your email address and anything else you include.

Information created when you use the Service

Social activity. Who you follow, who follows you, lists and boards you follow, lists you pin to your home screen, lists you start from someone else's list, and recommendations you send to and receive from other users.

Ranking history. We keep a record of how your rankings change over time so the Service can show how long something has been a favorite and how it has moved.

Usage analytics. We collect first-party analytics about how the Service is used: the screens you open and actions you take, together with your user ID, a randomly generated session ID, your platform and your app version. These analytics are our own; we do not use a third-party advertising or analytics network and we do not collect advertising identifiers.

Technical information. When you load my.faves.club or faves.club, our hosting and content providers process standard web request information, including IP address, browser type and the pages requested. IP address is processed in transit for security and delivery; we do not use it to build a profile of you.

Information from third parties you connect

Google. If you sign in with Google, we receive your name, email address and profile photo.

Spotify. If you choose to link Spotify, we receive your top artists, the artists you follow and your saved library, which we use to suggest music to add to your lists. Your Spotify access tokens remain on your device and are not stored on our servers. This feature is currently switched off in the shipping build; this paragraph will apply when it is enabled.

Connected AI applications. If you authorize a third-party AI assistant to act on your account, that assistant can read your lists, read public lists, create lists and add favorites as you, and see your handle and your email address. This is described in detail under "Connected AI applications."

Information we do not collect

We do not collect payment card or other financial account information; Faves is free and has no purchases, subscriptions or advertising.

We do not collect your exact date of birth, your phone number, an advertising identifier, or precise location history.

We do not collect your contacts. The app may display a system prompt asking for permission to access your contacts. If it does, nothing is read and nothing is uploaded; we record only whether you granted or declined the permission. We will not read, upload or match your contacts without first giving you clear notice and obtaining your consent for that specific purpose.

We do not receive your "takes." Takes are recorded and stored on your device only.

We do not use a third-party crash-reporting service.

DEVICE PERMISSIONS

The apps ask for the following device permissions. You can grant or decline each one, and you can change your decision at any time in your device settings. Declining a permission disables the related feature but does not otherwise prevent you from using Faves.

HOW WE USE PERSONAL INFORMATION

We use personal information to:

Create and maintain your account, sign you in, and keep you signed in.

Provide the core features of the Service: building and ranking lists, notes and voice notes, following, feeds, recommendations and community boards.

Display your public profile and public content to other users and to visitors who open a shared link.

Tailor recommendations of lists and titles, based on the categories you choose and your age band if you provided one.

Apply age-appropriate protections, including defaulting accounts held by users under 18 to private.

Operate, secure, debug and improve the Service, including through first-party usage analytics.

Respond to your requests, including privacy rights requests and reports of content or conduct.

Enforce our Terms of Service, investigate suspected violations, and protect the rights, safety and property of our users, the public and Faves.

Comply with law, including responding to lawful requests and meeting reporting obligations relating to child safety.

We do not use personal information to build advertising profiles, and we do not use it to train artificial intelligence models.

CHILDREN AND TEENAGERS

You must be at least 13 years old to create a Faves account.

Age screening. When you create an account we ask for your age in a neutral format. If you indicate that you are under 13, we do not create an account and we record that result on your device so the screen cannot simply be retried. We keep your age band and, where needed, your birth year; we do not ask for or store a full date of birth.

Children under 13. Faves is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, email admin@816.ventures with the handle or any identifying detail. We will review the report, disable the account, delete the personal information associated with it, and confirm the outcome to you.

Users aged 13 to 17. Accounts held by users under 18 are private by default. For those accounts:

Lists are private unless the account holder deliberately changes the setting.

Follower and following lists are not visible to people who do not follow the account.

The account is excluded from public search, from discovery surfaces and from community board attribution that would identify the account publicly.

The account is not suggested to adult users through discovery features.

Share cards and shared links to the account's content are disabled unless the account holder makes the relevant list public through a deliberate confirmation step that explains what becoming public means.

We do not sell or share the personal information of any user we know to be under 18, for any purpose, and we do not use minors' information for targeted recommendations beyond the age-band tailoring described above.

Parents and guardians. If you are the parent or guardian of a user under 18 and you want to review, correct or delete your child's personal information, or close the account, email admin@816.ventures. We will verify your relationship to the account before acting on the request.

WHAT IS PUBLIC ON FAVES

Faves is a social product and much of what you create is visible to others. Please read this section before you post.

Always public. Your handle, display name and profile photo. Custom lists. Lists created on your behalf by a connected AI application. Who you follow and who follows you.

Public by default, with a control. Ordinary lists are public when you create them. A "Public faves" switch makes a list private. If you try to share a private list, we ask you to make it public first. Accounts held by users under 18 are private by default, as described above.

Visible to anyone who can see a list. Your text notes and your voice notes, including the sound of your voice.

Not visible to others. Your email address, except as described under "Connected AI applications." Your age band. The lists and people you pin to your home screen. Your usage analytics.

Shared links. A shared link opens at my.faves.club and can be viewed by anyone who has it, whether or not they have a Faves account, and whether or not they are signed in. Treat a shared link as public.

Content that has been public may have been copied, cached, indexed by search engines or shared onward by others. Making a list private or deleting it does not retrieve copies that already exist elsewhere.

HOW WE DISCLOSE PERSONAL INFORMATION

We disclose personal information in the following ways, and not otherwise.

To other users and the public, as described under "What is public on Faves."

To service providers who process personal information on our behalf, under contract, and only to provide services to us. They are listed in the next section.

To connected AI applications you authorize, as described below.

To platforms you choose to post to. When you share a take or a share card to TikTok, Instagram, YouTube or any other app, we hand that file to the app you chose. What happens next is governed by that platform's own privacy policy, not ours.

For legal reasons. We may disclose information if we believe in good faith that it is reasonably necessary to comply with law or legal process, to enforce our Terms of Service, to detect or address fraud or security issues, or to protect against harm to the rights, property or safety of our users, the public or Faves. Where we are required by law to report apparent child sexual abuse material, we will do so.

In a corporate transaction. If Faves is involved in a merger, acquisition, financing, reorganization or sale of assets, personal information may be transferred as part of that transaction. We will give notice through the Service before your personal information becomes subject to a materially different privacy policy.

SERVICE PROVIDERS AND INFRASTRUCTURE

We work with a small number of providers. None of them is an advertising network or a third-party analytics vendor.

Our database and file storage are hosted by Supabase in the us-east-2 (Ohio) region. The Service is operated from, and personal information is stored in, the United States.

CONNECTED AI APPLICATIONS

Faves offers a service, known as Faves MCP, that lets a third-party AI assistant act on your account at your request. This feature is in private testing and is available only to users we have allow-listed.

What the assistant can do. If you sign in at faves.club and tap "Allow," the connected application can read your lists, read public lists, create lists and add favorites as you, and see your handle and your email address. Lists it creates are public. There are no finer-grained permissions at present.

Content created this way is attributed to you and is treated as your content under our Terms of Service.

How we treat the recipient. A connected application is an independent third party, not our service provider, if it uses your information for its own purposes. Before we allow-list any connected application we require a written agreement that limits it to the purpose you authorized, prohibits secondary use, expressly prohibits training artificial intelligence models on Faves user content, imposes security and breach-notification obligations, and requires deletion of your information when you revoke access.

Revoking access. There is not yet a screen in the app where you can see or revoke a connected application. Until there is, email admin@816.ventures and we will revoke the connection and instruct the provider to delete the information it received. We will complete revocations within five business days of receiving your request. We will add in-app visibility and one-tap revocation, with per-permission consent, before this feature becomes generally available.

Once a connected application has received your information, this policy no longer governs what it does with it. Review that provider's own privacy policy before you authorize it.

TAKES, SHARE CARDS AND THIRD-PARTY PLATFORMS

Takes are short selfie videos recorded by the front camera and microphone while you count down a list, with list artwork and trailers on screen. On Android 15 and later, your screen is also captured after a system prompt, and the app may enable Do Not Disturb while you record.

Takes are created and stored on your device. Faves does not upload them, does not receive them and cannot see them. Nothing is posted automatically.

If you choose to share a take or a share card — through your phone's share sheet or a "Post to" button for TikTok, Instagram or YouTube — the file is handed to the app you selected. From that point the receiving platform's terms and privacy policy apply, not ours, and the content may be public and permanent on that platform. We have no ability to retrieve or delete it.

Takes and share cards usually contain third-party artwork and clips. Your use of that material on other platforms is subject to those platforms' rules and to the rights of the owners; see our Terms of Service.

WE DO NOT SELL OR SHARE YOUR PERSONAL INFORMATION

We do not sell your personal information, and we have not done so in the preceding twelve months.

We do not share your personal information for cross-context behavioral advertising, and we have not done so in the preceding twelve months.

We do not use or disclose sensitive personal information for any purpose other than those permitted without a right to limit under California law.

We do not knowingly sell or share the personal information of consumers under 16 years of age.

Because we do not sell or share personal information, we do not act on opt-out preference signals such as Global Privacy Control for that purpose; there is nothing to opt out of. If this ever changes, we will update this policy and provide the required controls before the change takes effect.

HOW LONG WE KEEP PERSONAL INFORMATION

We keep personal information for as long as your account is active, and then for the periods below. Where a longer period is required by law, or where information is needed to resolve a dispute, enforce our agreements or address safety or security issues, we keep it for that longer period.

Some information is kept on your device rather than on our servers, including cached list data, Spotify tokens if you linked Spotify, and your takes. Signing out ends your session but does not remove that device-side data. To remove it, delete the app from your device.

YOUR PRIVACY RIGHTS

Depending on where you live, you may have some or all of the rights below. We extend these rights to all United States residents, whether or not your state has a law that grants them.

Know and access. Request confirmation of whether we process your personal information, and obtain the specific pieces we hold, together with the categories collected, the sources, the purposes, and the categories of recipients.

Delete. Request deletion of the personal information we hold about you, subject to the exceptions permitted by law.

Correct. Request correction of inaccurate personal information.

Portability. Obtain a copy of your personal information in a portable, readily usable format.

Opt out of sale, sharing and targeted advertising. We do not engage in these activities, as explained above.

Limit use of sensitive personal information. We do not use sensitive personal information for purposes that would trigger this right.

Non-discrimination. We will not deny you service, charge you a different price or provide a different level of service because you exercised a privacy right.

Appeal. If we decline your request, you may appeal by replying to our decision. We will respond to an appeal within 45 days, or 60 days where the law allows an extension, and we will tell you how to contact your state attorney general if you disagree with the outcome.

How to make a request

In-app account deletion and data export are being built and will be available before public launch. Until they are, we handle every request by email.

Email admin@816.ventures with the subject line "Privacy Request." Tell us what you want us to do and include the email address or handle associated with your account.

We acknowledge requests within 10 business days and respond substantively within 45 calendar days. If we need more time, we will tell you within that period and may extend by a further 45 days where the law permits.

Verification. We verify your identity by confirming that you control the email address registered to the account, usually by sending a code to it. For a deletion request we will ask you to confirm a second time before we act, because deletion cannot be reversed. We do not ask for more information than we need to verify you.

What deletion means. We close the account and delete your lists, favorites, ranks, ranking history, notes, voice notes, uploaded images, follows and analytics records associated with your user ID, on the timetable set out in the retention table. We cannot retrieve content you shared outside Faves, content others have copied, or takes stored on your own device.

Authorized agents. You may use an authorized agent to make a request on your behalf. We will ask for written permission signed by you and will verify your identity directly.

ADDITIONAL DISCLOSURES FOR CALIFORNIA RESIDENTS

This section is provided under the California Consumer Privacy Act, as amended. The table sets out the categories of personal information we have collected in the preceding twelve months, the sources, the business purposes for collection, and the categories of recipients to whom we disclose it for a business purpose. We do not sell personal information and we do not share it for cross-context behavioral advertising.

Shine the Light. California Civil Code section 1798.83 allows California residents to request information about disclosure of personal information to third parties for their direct marketing purposes. We do not make such disclosures.

Financial incentives. We do not offer financial incentives or price or service differences in exchange for personal information.

Minors. California law gives users under 18 the right to request removal of content they posted. Email admin@816.ventures and we will remove it from public view on Faves. Removal does not guarantee complete or comprehensive removal of content that others have copied or that was shared to other platforms.

SECURITY

Your information is held with Supabase. Database access rules restrict who may read and write each table. Voice notes are held in private storage and are served through the app. Profile photos and custom-list images are held in public storage, which means a direct file link may be accessible to anyone who has it — do not upload an image you would not want to be public. Automatic Android backups of app data are disabled.

No method of transmission or storage is completely secure. We cannot guarantee the security of your information, and you share content on Faves at your own risk. If we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

THIRD-PARTY CONTENT AND LINKS

The Service displays catalog material supplied by third parties, including posters, cover art, track metadata, trailers and clips, and it embeds the YouTube player. Those third parties may process information as part of delivering that content under their own policies. The Service also contains links to other sites and apps. We are not responsible for the privacy practices of any third party.

CHANGES TO THIS POLICY

We may update this policy from time to time. If we make a material change, we will post the updated policy with a new effective date and give notice through the Service before the change takes effect. Where the law requires your consent to a change, we will obtain it. Your continued use of the Service after a change takes effect means you accept the updated policy.

CONTACT US

Questions, privacy requests and reports:

816 Ventures, LLC
7347 W 89th St, Los Angeles, CA 90045
admin@816.ventures