Privacy policy
01Collection and use
Email-code sign-in requires your email address. Resend receives the recipient address, verification code and email language to deliver the login email. Profiles, listings, wishes, applications, chats and handoff arrangements are stored in server-side PostgreSQL; photos are stored in dedicated MinIO object storage. If you enable system notifications, we store a random installation ID, APNs device token and notification preference linked to your account and sign-in session, solely for chat, pickup applications, handoff updates and wish matches. Apple APNs receives the token and notification required for delivery. Lock-screen alerts contain no chat body or detailed address. You can disable notifications in the app or system settings; signing out revokes that session’s device binding. Device identifiers are not used for advertising tracking. Data supports listings, pickup, communication, moderation and support. Browsing does not require an account. Do not upload identity documents, passwords or other people’s private information.
02Who can see information
Approved item photos, descriptions, display names and general areas are visible to other users. Wishes and account email addresses are not public. Applications, chats and detailed pickup locations are available to the involved parties and authorized operators as needed to handle issues. Share full addresses only after agreeing on a handoff.
03Optional AI and separate permission
Before use, the app identifies the actual AI provider and asks for separate permission. Recognition sends the selected item photo; matching sends consenting users’ item descriptions, general areas and wish text. Account emails and chats are not sent, but personal information included in a photo or text may also be processed. Avoid unnecessary private details. Declining allows manual posting, wish saving and chat. Changing the provider, endpoint or disclosure version requires fresh permission. Withdraw in Settings to stop future calls. Review AI results before use.
04Storage, demos and security
Live records are stored on the server; sign-in uses HttpOnly cookies. The device stores necessary preferences and drafts. Demos use isolated sessions lasting up to two hours and do not create real transactions or send emails or AI requests. Authorized operators review listings and reports. Transport encryption and server access controls protect data. Task results are normally cleared after 30 days; business records remain until deletion or operator handling. Backups are not immediately rewritten upon each account deletion.
05Deletion, correction and contact
Signed-in users can request deletion directly under My → Settings → Delete account. This revokes sessions, anonymizes profiles and sent messages, closes arrangements, and deletes wishes and favorites. Photos stop being displayed and enter a physical deletion job; failed cleanup requires operator follow-up. The website deletion form records a request that requires ownership verification. For corrections, reports or deletion questions, contact us through the online support form in the help center.
The operator’s retention target for support and deletion requests is 30 days, handled by the team. This setting does not automatically erase all business records or backups.