LikedByFriends

Privacy Policy

Last updated 9 October 2026

This explains what LikedByFriends collects about you, why, and what you can do about it. We have tried to write it in plain language rather than the usual fog.

Who is responsible

LikedByFriends is operated by GTD Fast OÜ, registry code 17582638, Narva mnt 5, 10117 Tallinn, Estonia. We are the controller of the personal data described here.

Privacy questions: privacy@likedbyfriends.com.

What we collect, and why

WhatWhyLegal basis
Name, email address, profile photo, usernameTo create and run your accountPerformance of a contract
Country, language, currencyTo show the right shops, prices and shipping optionsPerformance of a contract
The country you signed up from (worked out from your IP address, which is not stored) and your phone's region settingTo know which countries our users come from, so we can bring the right shops and languages thereLegitimate interest
Delivery addressesTo have your orders shipped to youPerformance of a contract
Orders, invoices, returnsTo process purchases and meet our bookkeeping dutiesContract; legal obligation
Products you like or skip, and your category preferencesTo decide what to show you nextPerformance of a contract
The partner-shop products you tap through to buy, the days you use the app, and the purchases a partner network reports for those taps (amount and our commission)To see whether LikedByFriends works: who buys, whether people buy again, whether they come back. Shops only see totals, never whoLegitimate interest
Friends, friend groups, votes on each other's picksThe social part of the app is the productPerformance of a contract
Email addresses from your phone's contacts, when you choose to look for friendsTo tell you which of your contacts already use the appYour consent
Photos you uploadYour profile picture, and product photos if you sellPerformance of a contract
Device push tokenTo send you notifications you asked forYour consent
Reviews, reports, blocksTo run the marketplace and act on abuseLegitimate interest; legal obligation (DSA)
If you win a gift drop: your full name, phone number, date of birth and delivery addressTo check you may take part and to deliver the prizePerformance of a contract
Technical logs and error reportsTo keep the service working and to catch fraudLegitimate interest
Visits to our website: pages viewed, the site you came from, browser, device type, screen size, language, and your country and city (worked out from your IP address, which is not stored)To count visitors and see which pages work. We use Umami on our own server: no cookies, nothing shared with anyoneLegitimate interest
Contacts, specifically. If you use "find friends", your phone's contact email addresses are sent to our server so we can tell you which of them already have an account. We do not store the addresses that do not match, we do not build a shadow profile of people who are not users, and we never contact anyone on your behalf. You can use the whole app without ever granting contacts access. If you have granted it, the app also looks at the most common country dialling code among your contacts to guess which country you shop from, when your account does not say. That guess is made on your phone and never leaves it.

Your country, from your IP address. When you sign up, our server looks up which country your IP address belongs to, in a database that sits on our own server (IP geolocation by DB-IP, licensed CC BY 4.0). We keep only the two-letter country code, never the address, and nobody else is involved. It does not change which shops you see; it tells us where our users are. Accounts created before 9 October 2026 get it the next time the app starts.

Purchases at partner shops, and what shops see. When you tap through to a partner shop, the link carries a random code that means nothing outside LikedByFriends. The partner network (Awin) reports the purchase back with that code — the amount and our commission, never your name — so we can count it for your account. Shops see how many people liked or skipped each of their products, per day and per product; a breakdown by country only for groups of at least five people. They never see who.

What we do not do

Who else processes your data

We use a small number of providers to run the service. They act on our instructions under a data processing agreement.

ProviderWhat for
StripePayments and payouts. Stripe receives what it needs to take a payment; we never see your full card number.
Google (Firebase)Sign-in, and delivering push notifications.
Cloudflare (R2)Storing the images you and shops upload.
HostingerOur servers, and sending email.
ExpoDelivering app updates.
SentryError reports, so we can fix what breaks.

Some of these are based outside the European Economic Area, or use infrastructure that is. Where that happens, the transfer rests on the European Commission's Standard Contractual Clauses or an adequacy decision.

Shops you buy from

The shops on LikedByFriends are independent businesses. When you place an order, the shop receives what it needs to fulfil it — your name, delivery address and the order itself. From that moment the shop is a controller in its own right for that data, and its own privacy policy applies to what it does with it.

Some products come from partner shops, such as AliExpress, where you finish the purchase on their site. Tapping through takes you there; from then on that site's own privacy policy applies, and it may set its own cookies — including one that tells it you came from us.

How long we keep it

Deleting your account

You can close your account yourself, in the app: Profile → Delete your account. It takes effect immediately.

When you do, we erase your name, email address, profile, photos, addresses, friends, groups and notification settings, every product you liked or skipped, the partner shops you tapped through to and the days you used the app, the questions you asked your friends and your messages with them, the comments you left on theirs, your gift-drop entries and claim details, and any credit you had not spent. You disappear from other people's friend lists. A gift-drop prize that has not been delivered yet lapses, because there is no one left to deliver it to.

Some things stay, without your name or photo on them:

If you would rather we did it for you, or you cannot get into your account, write to privacy@likedbyfriends.com and we will take care of it.

One exception: if you own a shop on the platform, you will need to transfer it to a colleague or close it first. A shop with no owner behind it is not something we can leave running.

Your rights

Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, hand it over in a portable format, or stop a particular use of it. You can do the first and the third yourself in the app — Profile → Delete your account has a "download my data" button — and for anything else, write to privacy@likedbyfriends.com. We answer within a month.

If you think we have got it wrong, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), or to the supervisory authority in the country where you live.

Children

LikedByFriends is not intended for anyone under 18. You have to be 18 or older to have an account; we do not knowingly create accounts for minors, and if you believe we have, tell us and we will remove it.

Changes

If we change something that matters, we will say so in the app before it takes effect, not quietly edit this page.

Contact

Privacy: privacy@likedbyfriends.com
Digital Services Act contact point, for users and authorities, in English, Estonian or Dutch: dsa@likedbyfriends.com
GTD Fast OÜ · registry code 17582638 · Narva mnt 5, 10117 Tallinn, Estonia