Privacy Policy

Effective date: 1 October 2026

Last updated: 1 October 2026

1. Introduction

Find My Sponsor is a mobile application that connects people who are seeking support with people who are willing to give it.

Users use the Platform to:

• create a personal profile as a Seeker or as a Sponsor;
• publish Needs, as a Seeker, or Offers, as a Sponsor;
• find Needs and Offers and show interest in them;
• chat with another user once a request between them has been accepted;
• confirm that a sponsorship is complete, and rate it;
• report or block other users;
• verify their identity, which is optional;
• subscribe to FMS Pro, as a Seeker.

Find My Sponsor does not handle money. No payment between users passes through the Platform, and we do not hold bank or card details.

This Privacy Policy explains how NonPlus Sdn Bhd collects, uses, stores, shares and otherwise processes personal information through:

• the Find My Sponsor application for iOS and Android;
• the website at findmysponsor.club, including the preview pages of shared links;
• the tools our staff use to moderate the Platform and to support users;
• our customer-support channels.

In this Privacy Policy:

• “Find My Sponsor,” “we,” “our” or “us” refers to NonPlus Sdn Bhd.
• “Platform” refers collectively to our application, website, services and systems.
• “User,” “you” or “your” refers to a person who accesses or uses the Platform.
• “Seeker” refers to a user seeking sponsorship or support.
• “Sponsor” refers to a user offering sponsorship or support.
• “Post” means a Need or an Offer.

2. Who Is Responsible for Your Information

The organisation responsible for the processing described in this Privacy Policy is:

NonPlus Sdn Bhd

Privacy contact: fmssupport@nonplus.my

Where required by applicable law, Find My Sponsor acts as the data controller, data user or equivalent responsible party for your personal information.

Certain service providers process information on our behalf. Others, including optional sign-in services and app stores, process information independently under their own privacy policies. Section 10 describes the categories of providers involved.

3. Where the Platform Is Offered

Find My Sponsor is operated from Malaysia. The app is offered in the countries where it is made available in the Apple App Store and Google Play.

Because privacy rights and legal requirements vary by country, certain rights may differ depending on where you live.

Where local law gives you stronger rights than this Privacy Policy, the local law prevails.

4. Minimum Age

4.1 Minimum age

You must be at least 16 years old to create or use a Find My Sponsor account.

By creating an account, you confirm that you meet this minimum age requirement.

4.2 Accounts below the minimum age

If we learn that an account belongs to someone below 16, we may restrict or close it and handle the associated personal information as required by law.

A parent or guardian who believes a child below 16 has given us information may contact fmssupport@nonplus.my.

5. Personal Information We Collect

We collect information:

• that you give us directly;
• that is created as you use the Platform;
• that other users give us about you;
• that our service providers send us;
• that our systems work out from the above.

What we collect depends on the features you use.

5.1 Account and sign-in information

When you create or use an account, we collect:

• your full name;
• your email address;
• your role, as a Seeker or a Sponsor;
• how you sign in;
• your language;
• the date on which the account was created.

We use an account service for registration and sign-in. If you sign in with an email address, that service processes your password and sends codes to confirm your email address or reset your password. Find My Sponsor does not receive your password.

You may sign in using:

• an email address and a password;
• Google;
• Apple, on Apple devices.

When you sign in with Google or Apple, we receive your name, your email address and an identifier for your account with that service. We do not receive your Google or Apple password.

We do not ask for a telephone number.

5.2 Profile information

Your profile holds:

• your full name;
• your gender, which we ask for when you first set up your account;
• and, if you choose to add them:
  • a profile photograph and a cover photograph;
  • a headline and a biography;
  • your date of birth;
  • your city;
  • your occupation and organisation;
  • your interests, chosen from our categories;
  • links to Instagram, Facebook, X and LinkedIn, and to a website or portfolio.

Section 8 explains which of these other users can see.

5.3 Preferences

You may tell us:

• the categories you are interested in;
• a region and a distance;
• an amount range;
• how often you seek or offer support;
• an age range;
• which notifications you want.

We use these preferences to decide the order in which posts are shown to you.

5.4 Identity verification information

Identity verification is optional. If you choose to verify your identity, we collect:

• photographs of your Malaysian identity card (MyKad), front and back, or of the photo page of your passport;
• a photograph of your face (a selfie);
• the text read from the document, which includes your name, the document number and the other details printed on it;
• a face template, which is a set of measurements made from the selfie and from the photograph on the document, used only to compare the two;
• the results of the automated checks;
• the decision, the reason for it, and a record of any review by our staff.

A photograph of an identity card shows everything printed on it, which may include your address and your religion.

We use this information for identity verification and protect it as described in section 13.

We use this information to:

• confirm your identity;
• show the Verified badge;
• calculate your trust score;
• prevent impersonation;
• investigate abuse.

Your identity document and your selfie are never shown to other users. They are stored privately and can be opened only by authorised staff.

A face template may be classed as biometric or sensitive personal information. By submitting your document and selfie you consent to their use, and to the making of the face template, for identity verification. Section 12 says how long each is kept.

5.5 Needs and Offers

When you create a post, we collect:

• its title and description;
• its category;
• whether it is for money or for an item;
• its amount or estimated value, in Malaysian Ringgit;
• how often the support is sought or offered;
• its deadline, if any;
• whether a Need is urgent;
• the name of a place and, if you chose the place from the search or used your current location, its coordinates;
• up to five photographs or videos;
• whether an Offer is anonymous;
• when it was created and changed;
• whether it has been held, approved, taken down or removed by our staff.

We also record which posts you have viewed, bookmarked or marked as not interesting to you.

A post may say something about your education, work, health, family, finances or other personal circumstances. Include only what is needed to explain it.

A post must not contain telephone numbers, links or payment details.

5.6 Sensitive information

We do not ask you for sensitive information, other than the identity document and selfie used for identity verification.

What you choose to write or show in a post, a profile or a message may nevertheless reveal sensitive information, for example about your health, a disability, your religion, your family or financial hardship.

We do not treat such content differently from other content. It is shown and stored as described in this Privacy Policy. Please do not include more than is needed.

5.7 Location

We collect your location only when you choose to give it:

• a city on your profile;
• a place on a post.

Where you choose a place from the search, or use your current location, we save the name of the place and its exact coordinates, on your profile or on the post.

The app uses your device’s location only while you are using the app, and only if you have given permission. It does not collect your location in the background. On the Home screen it may read your location to show nearby posts; that reading is rounded and is not saved.

We do not work out your location from your IP address.

When you search for a place or use your current location, the words you type or your coordinates are sent to a place-search service.

You can withdraw location permission in your device settings.

5.8 Chat

We use a messaging service to provide Chat.

When you use chat, the following are processed:

• the text of your messages;
• photographs and voice messages you send;
• reactions;
• whether a message has been sent, delivered and read, and whether you are typing;
• changes to and deletions of messages;
• who has blocked whom.

Messages are held by our messaging service. Photographs and voice messages sent in Chat are held in our file storage, as described in section 8.5.

Our own systems record which users have a conversation and the time of its last message. When a message arrives, our server sends the recipient a push notification that carries the sender’s name and the first part of the message.

Messages are intended for the two users of a conversation. We do not routinely read them, we do not screen them automatically, and our staff cannot read conversations in our administration tools. We may obtain and review messages from the chat provider where reasonably necessary to:

• investigate a report or a suspected breach of our Terms;
• protect a user;
• respond to a legal request.

Chat is not end-to-end encrypted.

5.9 Requests, matches, completion and ratings

We record:

• the requests you send and receive on posts, and any note sent with them;
• whether each request was accepted, skipped or withdrawn;
• your matches;
• proposals and confirmations that a sponsorship is complete;
• the rating, from one to five stars, and any note given when a sponsorship is completed.

5.10 Reports, blocks and safety information

When a user reports another user or a post, we collect:

• who made the report;
• the user, post or conversation reported;
• the reason chosen and any note added;
• the date;
• our decision, the action taken and our internal notes.

When you block another user, we store who blocked whom and when.

We also keep a record of warnings, suspensions and blocks applied to an account, with the reason for each.

We do not tell a user who has been reported who made the report, unless required by law.

5.11 Support

When you send us a support request in the app, we collect its category, your message, any screenshot you attach and our reply. When you write to us by email, we keep the correspondence.

5.12 Device and technical information

We collect:

• a push-notification token for your device, with its platform (iOS or Android) and the version of the app;
• your device type and operating-system version, through the analytics and crash-report services described below;
• your language.

Your IP address is processed by our hosting and service providers whenever your device connects to them, and may appear in server logs.

The app does not collect your contacts or use advertising trackers.

5.13 Analytics and crash reports

We use product analytics to understand how the app is used. This records the screens you open and the actions you take. These records may include your account identifier, email address, role and verification status. Product analytics is on by default, and you can turn it off in Settings.

We also collect crash, error and limited performance reports to diagnose faults. These reports may include technical details about your device and account. They cannot be turned off because they help us keep the Platform working.

We do not use these records to show you advertising or follow you across other companies’ apps or websites.

5.14 Subscriptions, promotional codes and referrals

FMS Pro is bought through the Apple App Store or Google Play. A subscription service confirms whether your access is active.

We receive:

• the product bought;
• the dates of purchase, renewal and expiry;
• whether the subscription is active, in a grace period, cancelled or refunded;
• the store used;
• transaction identifiers.

We do not receive or store your payment-card details. The store processes the payment under its own privacy policy.

We also record:

• promotional codes you have used and the access they gave;
• your referral code, who invited whom, and any reward given.

5.15 Notifications

We send notifications by push and keep them in the notifications list in the app. They tell you about:

• interest shown in your posts;
• decisions on requests, matches and completion, and reminders about them;
• chat messages and reactions;
• identity verification;
• a post nearing its deadline;
• moderation decisions, such as a post taken down or a warning;
• replies from support;
• announcements from Find My Sponsor about the service and the product.

We record which kinds of push notification you have switched on or off. Section 16 explains which can be switched off.

5.16 Information received from other users

Other users give us information about you when they:

• report you or one of your posts;
• send you a request, with a note;
• rate a sponsorship you gave;
• block you;
• send you messages.

5.17 Information generated by our systems

From the information above, our systems work out:

• your trust score and trust level;
• how complete your profile is;
• the badges you have earned;
• a match percentage between you and a post;
• the totals shown on your profile, such as the amount shown as given or raised and the number of completed sponsorships;
• whether a post should be held for review;
• the results of the identity checks.

Section 9 explains how.

6. How We Use Personal Information

6.1 Providing the Platform

To:

• create and maintain accounts;
• sign users in;
• show profiles;
• publish Needs and Offers;
• let users find posts and show interest;
• provide chat;
• enable reporting and blocking;
• manage subscriptions, promotional codes and referrals;
• provide customer support;
• deliver notifications.

6.2 Verification and trust

To:

• verify identity;
• prevent impersonation;
• show the Verified badge;
• calculate trust scores, profile completeness and badges.

6.3 Ordering posts

To:

• decide the order in which posts are shown to each user;
• show nearby posts;
• show a match percentage;
• order search results.

6.4 Safety and moderation

To:

• check posts against our rules before and after they are shown;
• investigate reports;
• identify fraud, scams or spam;
• warn, suspend or block users who break our rules;
• preserve evidence;
• enforce our Terms;
• respond to emergencies where legally permitted.

6.5 Product improvement

To:

• understand how the Platform is used;
• diagnose errors;
• improve design and performance;
• test new functionality.

6.6 Communication

To:

• send service notifications;
• answer support requests;
• tell you about moderation decisions;
• send announcements about the service and the product.

6.7 Legal and compliance purposes

To:

• comply with laws;
• respond to lawful requests;
• enforce contractual rights;
• establish or defend legal claims;
• maintain required records;
• protect users and the public;
• investigate suspected illegal activity.

7. Legal Bases for Processing

Depending on the applicable law, we rely on one or more of the following grounds.

7.1 Performance of a contract

Where processing is necessary to:

• create your account;
• provide Platform features;
• publish your content;
• handle requests and matches;
• operate chat;
• manage your subscription;
• provide support.

7.2 Consent

Where you give consent for:

• access to your device’s location, camera, microphone or notifications;
• optional profile information;
• identity verification, including the comparison of your face with your identity document;
• sensitive information that you choose to include in a profile, a post or a message.

You may withdraw consent, although this may prevent use of the features that need the information.

7.3 Legitimate interests

Where permitted, we process information for legitimate interests such as:

• securing the Platform;
• detecting fraud;
• moderating content;
• ordering the posts shown to users;
• calculating trust scores and badges;
• understanding how the Platform is used, through the analytics described in section 5.13, which you can switch off;
• finding and correcting faults;
• protecting users;
• enforcing our rules.

We will balance these interests against your rights.

7.4 Legal obligation

Where processing is required to comply with:

• applicable laws;
• court orders;
• regulatory requirements;
• law-enforcement requests;
• child-safety obligations;
• recordkeeping requirements.

7.5 Protection of vital interests

In exceptional circumstances, information may be processed to protect someone’s life, safety or health.

8. What Other People Can See

8.1 Your profile

A signed-in user who opens your profile can see:

• your first name and the first letter of your last name;
• your profile and cover photographs, or, where you have no profile photograph, a placeholder that reflects the gender you gave;
• your headline and biography;
• your city;
• your occupation and organisation;
• your role;
• your interests;
• the links you added to Instagram, X, LinkedIn and a website or portfolio;
• the Verified badge, and whether you have confirmed your email address, verified your identity and added a social link;
• your trust level, shown as High, Moderate or Low;
• your badges;
• the month and year in which you joined;
• the number of your active posts and of your completed sponsorships;
• the total shown as given or raised, and the number of people you have helped or been helped by;
• up to five of your recent posts.

The owner of a post may also be shown the trust score of a user who sends a request on that post.

8.2 Your posts

Your Needs and Offers are shown to other signed-in users, with your first name, the first letter of your last name, your photograph and the Verified badge.

Other users are shown the name of the place on a post. At the effective date, the coordinates saved with a post are also sent to the apps of users who can see the post, although the app does not display them.

If you are a Sponsor and publish an Offer anonymously, other users see “Anonymous” in place of your name, photograph and Verified badge, and the Offer is not listed on your profile. When you accept a request on that Offer, the user you accepted can see your name and photograph in chat. We always know which account published an anonymous Offer.

8.3 Shared links

Any user may share a link to a profile or a post. The preview page of a shared link can be opened by anyone, without an account. It shows:

• for a profile: the first name and the first letter of the last name, the headline and the profile photograph;
• for a post: its title, its amount or that it is for an item, the first part of its description, its first photograph and, in some cases, the owner’s first name and the first letter of the last name, or “Anonymous” for an anonymous Offer;
• for a referral link: the name of the user who sent it, in the same short form, and their referral code.

8.4 What other users cannot see

We do not show other users:

• your email address;
• your full last name;
• your date of birth;
• your identity document and selfie, and the text read from them;
• the coordinates saved with your profile;
• how complete your profile is;
• a link you added to Facebook;
• ratings given to you, which are visible only to you and to the user who gave them;
• your reports, or reports made about you;
• your support requests;
• your subscription;
• your analytics data.

The Platform does not show anyone whether you are online or when you were last active.

8.5 Photographs, videos and voice messages you upload

Identity documents and selfies are stored privately.

Every other file you upload is stored differently. This applies to:

• profile and cover photographs;
• photographs and videos on posts;
• photographs and voice messages sent in chat;
• screenshots attached to support requests.

Each of these files is stored at a web address that is long and is not published or listed, but is not protected by sign-in. Anyone who obtains the address of a file can open it.

At the effective date, deleting a post, a message or an account does not delete the stored file.

Please do not upload identity documents, bank or card details, medical records or other sensitive documents as a photograph on a post, in chat or in a support request.

8.6 Copies made by other people

Anything another user can see, they can copy, photograph or share. We cannot prevent it.

Do not show or send information that you are not comfortable sharing.

9. Automated Processing and Profiling

We use automated processing to help verify identity, review posts, order content and provide trust indicators. We do not use generative AI to create User Content.

9.1 Identity verification

If you choose identity verification, automated checks read your identity document and compare your selfie with its photograph. A member of our staff reviews submissions that need further assessment.

9.2 Checks on posts

Needs and Offers may be checked for compliance with our rules. A post may be held for staff review before it is shown.

9.3 Ordering of posts

We may use your interests, preferences, location, activity and the information in posts to determine their order and show relevance. The exact rules may change as the Platform improves.

9.4 Trust indicators and badges

Account, verification, profile and activity information may contribute to trust indicators and badges. These indicators are informational and do not guarantee another user’s honesty or safety.

9.5 Human review

Staff make decisions about warnings, suspensions, blocks and removal of accounts or posts. If you believe an automated process has led to a wrong decision about you, you may ask us to review it by writing to fmssupport@nonplus.my.

10. How We Share Information

We do not sell personal information, and we do not share it for advertising.

We share information in the following circumstances.

10.1 With other users

As described in section 8.

10.2 With service providers

We use service providers to help operate the Platform. The categories of providers include:

• account and sign-in services;
• messaging and notification services;
• app stores and subscription services;
• hosting, storage, security, analytics and support services;
• place-search services, when you choose to search for or share a location.

Depending on the feature you use, these providers may process account details, messages and media, purchase status, notification data, usage and error information, selected location information and website visit data. We share information only as needed for the relevant service and require providers acting on our behalf to protect it. Some providers, including the app stores and optional sign-in services, also process information independently under their own privacy terms.

10.3 Professional advisers

We may disclose information to:

• lawyers;
• auditors;
• insurers;
• accountants;
• compliance advisers.

10.4 Corporate transactions

Information may be disclosed in connection with:

• a merger;
• an acquisition;
• financing;
• restructuring;
• a sale of assets;
• insolvency;
• a transfer of the Platform.

Where appropriate, we will require the recipient to respect applicable privacy obligations.

10.5 Legal and safety disclosures

We may disclose information where reasonably necessary to:

• comply with law;
• respond to a court order;
• respond to lawful government requests;
• investigate fraud;
• prevent harm;
• protect rights;
• enforce agreements;
• report illegal conduct, including to child-protection authorities;
• respond to an emergency.

11. International Data Transfers

Your personal information is stored or processed outside Malaysia where our service providers operate. Other countries may have different privacy laws.

The provider categories and purposes of these transfers are described in section 10.2.

Where required, we use appropriate safeguards for international transfers, such as contractual protections, access controls, data minimisation and encryption.

12. Data Retention

We keep information for as long as it is needed for:

• Platform operations;
• the purposes described in this policy;
• safety;
• fraud prevention;
• legal compliance;
• dispute resolution;
• enforcement.

At the effective date:

12.1 Account deletion

You can ask to delete your account in the app, under Settings, or by writing to fmssupport@nonplus.my.

When you ask to delete your account:

• you are signed out and the account can no longer be used;
• your profile and your posts are hidden from other users at once;
• your posts stop receiving interest;
• conversations you have had, and requests that were already accepted, remain visible to the other user;
• a subscription bought through the App Store or Google Play is not cancelled: you must cancel it in your store account.

You can restore the account by signing in again and choosing to restore it.

At the effective date, we keep the account record and the information linked to it after a deletion request, hidden from other users. It is not erased automatically.

12.2 Erasure on request

You may ask us to erase your personal information by writing to fmssupport@nonplus.my. We will handle the request as applicable law requires.

We may keep limited information after erasure where necessary to:

• comply with law;
• prevent fraud;
• maintain a ban;
• respond to a dispute;
• protect another user;
• preserve evidence;
• enforce agreements;
• maintain subscription records;
• defend legal claims.

For example, we may keep:

• moderation decisions;
• report records;
• evidence associated with serious abuse;
• purchase and refund records;
• legal-request records.

Messages you sent remain with the users who received them.

13. Security

We use reasonable administrative, technical and organisational measures designed to protect personal information.

These include:

• encryption of information in transit;
• encryption at rest, as provided by our hosting provider;
• sign-in controls for users and for staff;
• staff roles that limit who can do what;
• a record of the actions our staff take;
• private storage for identity documents and selfies, which staff open through links that expire after a few minutes;
• database backups.

Section 8.5 explains how other uploaded files are stored, and its limits.

No internet-based system can be guaranteed to be completely secure.

You are responsible for:

• maintaining account security;
• protecting your device;
• not sharing access credentials;
• reporting suspected compromise promptly.

14. Personal Data Breaches

If we become aware of a security incident affecting personal information, we will:

• investigate;
• contain the incident;
• assess risks;
• take remedial action;
• notify authorities where legally required;
• notify affected users where legally required or appropriate.

15. Your Privacy Rights

Depending on your location, you may have rights to:

• access your personal information;
• obtain a copy;
• correct inaccurate information;
• update incomplete information;
• delete information;
• restrict processing;
• object to processing;
• withdraw consent;
• request data portability;
• object to profiling;
• request human review of an automated decision;
• complain to a regulator.

15.1 Exercising your rights

In the app, you can:

• change your profile and your preferences;
• switch product analytics off;
• switch kinds of push notification on or off;
• grant or withdraw device permissions, in your device settings;
• block and unblock other users;
• ask to delete your account.

For anything else, including a copy of your information, the correction of something you cannot change yourself, erasure, or a review of a decision, write to fmssupport@nonplus.my. The app has no feature for downloading your information.

We may need to verify your identity before completing a request.

We may refuse or limit a request where:

• we cannot verify identity;
• the request affects another person’s rights;
• retention is legally required;
• information is required for safety;
• an applicable exemption applies.

We will respond within the timeframe required by applicable law.

16. Your Privacy Controls

At the effective date, the Platform has no settings for hiding individual profile fields or a profile as a whole.

You control what other users see and what we collect by:

• leaving an optional profile field empty;
• publishing an Offer anonymously, if you are a Sponsor;
• blocking another user;
• switching product analytics off in Settings;
• granting or refusing device permissions for location, camera, microphone and notifications.

You can switch the following kinds of push notification on or off: interest received, matches, chat, verification updates, post reminders and announcements.

The following notices are always delivered, because they concern your account: warnings and other moderation notices, notices about the status of your posts, badges earned, referral rewards, a change of role and replies from support.

Your choices do not prevent us from processing information internally where necessary to operate, secure or moderate the Platform.

17. Reporting and Blocking

You can report a post, or another user from their profile or from the menu of a conversation with them. You choose one of these reasons and may add a note:

• Spam;
• Harassment;
• Scam;
• Inappropriate content;
• Other.

A report made from a conversation identifies the conversation. It does not send us the messages. If you want us to see particular messages, send screenshots to fmssupport@nonplus.my.

You may block another user. Blocking hides each of you from the other, stops requests between you and prevents both of you from sending messages in your conversation. It does not delete past messages. You can remove a block in Settings.

Reports should be truthful and submitted in good faith.

Submitting false or malicious reports may result in account action.

18. Announcements and Marketing

We do not send marketing emails. The only emails sent in connection with your account are the codes that confirm your email address or reset your password, which our sign-in provider sends, and our replies when you write to us.

We may send announcements about the service and the product. An announcement appears in the notifications list in the app and, if you have left announcements switched on, as a push notification.

If we begin to send marketing by email, we will ask for your consent first where the law requires it, and every message will say how to stop.

19. Cookies and the Website

The mobile app does not use cookies. Our website uses cookies and similar tools for security and to understand visits.

Visit information may include the page you open, the page you came from, campaign tags in a link, your browser and device type, language, an approximate country and a session identifier. The website does not ask for your name or email address and does not show advertising.

The same website practices apply to preview pages of shared links. You can block or delete cookies in your browser settings; the website remains usable.

20. Third-Party Links and Off-Platform Activity

Profiles may contain links to:

• websites;
• portfolios;
• social-media profiles.

We are not responsible for the privacy practices of external services.

When you leave the Platform or communicate outside the Platform, the other service’s privacy rules apply.

You should exercise caution before sharing:

• telephone numbers;
• home addresses;
• identity documents;
• banking details;
• passwords;
• confidential information.

21. Changes to This Privacy Policy

We may update this Privacy Policy to reflect:

• new features;
• changes in processing;
• changes in providers;
• changes in law;
• security improvements;
• operational changes.

When material changes are made, we will tell you through one or more of:

• a notice in the app;
• a notice on the website;
• email.

The date at the top of this policy shows when it was last updated.

Where required, we will obtain renewed consent.

22. Contact Us

Questions, complaints or privacy requests may be directed to:

NonPlus Sdn Bhd

Email: fmssupport@nonplus.my