Privacy policy

Updated 8 November 2026

FIFTY9 is operated by Sky Dream Solutions LLC. It is an adults-only, photo-first service with short-lived Moments and moderated public Notes. Contact privacy@fifty9me.com about privacy or your data.

Public anonymity is not account anonymity

Public Moments and Notes do not display your sign-in name or email. Notes use thread-specific labels and colours, not a public profile. We still maintain authenticated accounts to operate the service and enforce safety rules. Your photos, words and location labels may identify you if you choose to share identifying information. Notes are public, not private messages.

Information we process

• Account: authentication identifiers and sign-in details handled by Clerk and your chosen Apple or Google provider, plus app preferences and age-eligibility confirmation.
• Content: camera photos you submit, their city/country labels, publication and expiry times, pin/Notes permissions, public Notes, replies and reactions. Photos may be converted, resized and screened before publication. Private drafts and pending uploads are stored on your phone.
• Location: with permission, location is used to resolve posting or viewing places, Here and nearby requests. Precise coordinates are processed transiently to obtain place labels; they are not retained in the app database or published. Location labels and coarse place preferences can be retained for app features.
• Engagement: account-scoped views, private Hearts, Notes read positions and anonymous city/country totals. Posters see aggregates, not viewer names. Small or unrecognised places are shown only at country level.
• Notifications and devices: push tokens, installation identifiers, platform/build information, notification preferences and delivery state.
• Safety and reliability: reports, blocks, moderation assessments, limited report transcripts, account restrictions, administrative actions and error/session diagnostics. Do not include passwords or personal information in feedback.

Membership

When membership is enabled, RevenueCat processes an account identifier, app/device information and entitlement status to recognise FIFTY9+ access across devices. Complimentary Lifetime Tester access does not require a purchase or create recurring billing. An approved administrator records the grant against your account, and membership-related administrative records may be retained for accountability. RevenueCat receives no PINNED or Archive photos. Account deletion requests include removal of the RevenueCat customer profile; provider-required legal records may follow separate retention rules. Signing out or deleting the app is not an account-deletion request.

Why and with whom

FIFTY9 launches without ads. We do not use an advertising SDK, request an advertising identifier, or track you across other companies' apps and websites for advertising.

We use this information to authenticate you, deliver and moderate content, enforce expiry, prevent abuse, deliver requested notifications, investigate failures and respond to deletion or safety requests. We do not sell your personal information. Public content is shared with other app users. Service providers process data on our behalf: Clerk for authentication; Apple/Google for chosen sign-in; Replit for hosting, database and file storage; OpenAI for automated content screening; Expo and Apple/Google push services for notifications. An IP-location provider may receive an IP address to estimate a country when device or recent posting location is unavailable. IP-based city guesses are not displayed and we do not store IP addresses with moment views.

Providers may process information outside your country under their own applicable safeguards and terms. Hosting, security and provider logs have separate retention rules; public Moment expiry does not mean every operational log expires at the same time.

Expiry, pins, Archive and pending photos

The launch default for new Moments is six hours; each Moment's countdown gives its actual expiry. A separately configured 59-minute window may be used. Expired or removed Moments cease to be publicly available; physical file cleanup retries independently. Notes disappear with their subject. Individual view records are cleared at expiry or removal. Private aggregate-summary delivery receipts may remain until a phone saves them; country codes without viewer identities may remain in the poster's running country total.

Pins of permitted Moments and your own Archive are private, device-local copies, not cloud backups. They can outlast public expiry. They have no gallery export and are lost on uninstall. Archive defaults On and can be disabled or cleared in Settings. Removing a live Moment cannot recall copies already pinned on other phones. Moderation-removal instructions reach local storage only when that phone reconnects.

Pending photos remain privately saved on the phone until publication is confirmed or you deliberately discard them. The operating system may pause transfers, particularly after force-quit; reopening the app allows recovery. Do not uninstall while posting is pending.

Reports and retained safety records

Flagged/reported media and Notes report transcripts may be retained privately until 24 hours after the first flag/report, without extending public expiry. Repeated reports, deletion and retries do not restart that deadline. Reports, account bans, blocks and moderation/audit records may remain separately to protect users. A minimal non-public account identifier may remain after account deletion to reject stale sign-in tokens and preserve safety accountability. These records are not public profiles. Any legally required preservation or reporting must be handled under applicable law.

Your choices and deletion

Manage camera, location and notifications in phone settings. You can browse some feeds without location. Manage posting permissions, Archive and notifications in FIFTY9 Settings. Delete your own posts, report content, or block an author without learning their identity.

Use Settings → Delete Account to request irreversible account and associated-data deletion. The server revokes public access when it accepts the request and automatically retries remaining cleanup, including removal of the sign-in account. Limited safety exceptions above remain. Local cleanup applies to this installation; another offline phone cannot be remotely wiped immediately. You may also request deletion without the app. We verify account ownership before acting on email requests.

For access, correction, deletion or other privacy rights available in your jurisdiction, contact privacy@fifty9me.com. We may need to verify ownership. FIFTY9 is for people aged 18 or older; report suspected underage use to us.

Changes

We update this notice when practices change. Check the date above and contact us if you need an explanation.