Privacy Policy
Effective November 5, 2026
This policy explains what the Community Market apps for iPhone and Android, this website and our back office collect, why, who sees it, how long it's kept, and how to delete it. Community Market is operated by [legal operator name] ("we").
In short: we never sell your personal information. There are no ads, no advertising identifiers and no third-party tracking in the app. Other people see your display name, not your private details. Authorized staff can read private details and chats when there's a safety, support or legal reason, and each review is logged.
1. What we collect
| Type | What it includes |
|---|---|
| Sign-in | The name, email and account identifier you allow through Sign in with Apple or Google. Apple's private relay address works too. |
| Profile | Display name, photo, phone number if you add it, general area, date of birth, and your choice about marketing messages. |
| Private details (optional) | Full legal name, contact email and phone, home address and its map coordinates. These start and end your day routes. |
| Selling | Listing names, stories, hours, photos, products, prices, allergen notes and rules; the listing's address and map location; organization or team membership. |
| Activity | Reservations, items, prices and statuses, pickup codes and confirmations, no-shows, class bookings and attendance, library visits, saved day plans and check-ins. A recorded pickup doesn't prove payment. Buyers pay sellers in person. |
| Messages | Chat text and photos, when each was sent, and read receipts showing how far each person has read. |
| Community and support | Reviews and responses, follows, watched items, blocks, reports you file and what they're about, problem reports, and feedback you send us. When a listing or product is reported, we may save a copy of what it showed at that time. |
| App usage | Our own analytics: actions such as opening a listing, searching, reserving or posting a review, with the listing or product involved, search words and filters, app version, iPhone or Android, the time, and an approximate area. Linked to your account when you're signed in. |
| Device | A push notification token, if you allow notifications. |
| Agreement record | Which version of the Terms and Privacy Policy you accepted, and when. It doesn't include your IP address or device details. |
| Changes | A log of edits to listings, products, orders and similar records, including who made them, with sensitive profile fields hidden. |
Paid features. In-app payments, Seller Pro and Boosts aren't switched on at launch. If we turn them on, Apple handles in-app purchases and Stripe handles card payments and seller identity and bank details. We'd receive purchase and payout records, never full card numbers.
We don't collect your contacts, browsing history, advertising identifier, or medical or Apple Health data. If you book a fitness class, your booking and attendance are kept like any other class.
2. Location
- While using the app: your location, or the map area you're viewing, is sent to our database to find what's nearby. It's used for that search and isn't saved to your account.
- Check-ins: when you check in to a class, your coordinates go to our server to confirm you're at the class. They're compared and not stored; we store that you checked in and when. Day-plan arrival checks run on your phone, only while that day's screen is open.
- Always (optional): if you choose Always, the phone watches for arrival at classes you've booked in the next day and checks you in even with the app closed. It doesn't record where you go.
- Analytics: events carry an area about 1.2 by 0.6 km, never exact coordinates. We don't keep a location trail.
- Saved locations: an area alert stores the center point and radius you set, and your home address stores its coordinates until you change or delete them.
- Sellers: a listing's map pin can be exact or approximate. Its private address is shared according to your listing settings.
3. Phone permissions
Each of these is optional, and you can turn it off in your phone's Settings. Features that need it stop working; the rest of the app keeps working.
| Permission | Why |
|---|---|
| Location | Nearby stands and sales, check-ins, day routes |
| Camera and photos | Pictures for listings, products, your profile and chats. You choose each photo. |
| Calendar | Adds classes you book and days you plan, and removes them if you cancel. Calendar contents stay on your phone. |
| Notifications | Reservation updates, messages, followed stands, area alerts and reminders |
4. How we use it
- To run the app: accounts, maps, listings, reservations, classes, messages, reviews and notifications.
- To keep people safe: age checks, reports, moderation, suspensions, fraud and no-show limits. Our own servers automatically check text you post or send and refuse clearly objectionable language. Refused text isn't saved.
- To support you and answer feedback.
- To understand and improve the app, with our own analytics.
- To send marketing messages only if you opted in.
- To meet legal, tax and accounting duties.
We don't use your data for advertising, and we don't send your content to third-party AI services.
5. Who can see it
- Everyone in the app: your display name, photo, public listings, and reviews you write.
- People you deal with: sellers see your reservations, bookings and messages with them, and you see theirs. Seller teams and organization managers can see their store's conversations.
- Sellers' customer lists: sellers may see display names, visits and spending with their own store, plus your birthday's month and day if you choose to share it.
- Local businesses: we may sell anonymous, area-level trends. Groups have at least 20 adults, areas are no smaller than about 5 km or a ZIP code, and they never include names, contact details, device IDs, exact locations or per-person rows. Data from 13 to 17 year olds is left out.
- Authorities and legal requests: we disclose data when the law requires it, such as a valid subpoena, or to protect someone's safety or our rights.
- A business transfer: if the service is sold or reorganized, data may move to the new operator under this policy.
6. Staff access to chats and accounts
Chats aren't end-to-end encrypted. Our back office keeps a working copy of account, listing, order and report data, including names, email, phone, town and ZIP code. Authorized moderation leads can load a person's private details and chats, including messages the sender archived, when there's a report, dispute, safety concern or legal request. They must record a purpose first, and each load and export is logged. Copies made for a case expire after 30 days unless a lead records a reason to preserve them.
7. Service providers
| Provider | What it does |
|---|---|
| Supabase | Database, sign-in, photo storage and server functions |
| Apple | Sign in with Apple, push notifications, maps and directions, and in-app purchases if offered |
| Google sign-in, maps and directions in the Android app, and push notifications on Android through Firebase Cloud Messaging. Google's sign-in software also reports its own device and usage data to Google. | |
| Stripe | Card payments and seller payouts, only if we turn payments on |
| Cloudflare | Domain and network services for this website |
These companies process data only to provide their services to us, under their own terms and privacy policies. We choose providers that protect data at least as well as this policy describes. Data is processed in the United States and wherever these providers operate.
8. How long we keep it
| Data | How long |
|---|---|
| Account, profile and private details | Until you change them or delete your account, except as described in section 9 |
| Chat photos | 30 days, then removed |
| Chat text, including archived originals | Kept for safety and dispute handling. Archiving hides a message from both people; the original stays in restricted storage. |
| Reservations, bookings and order records | As long as needed for records, disputes, tax and accounting |
| Reports, moderation and access logs | As long as needed for safety and legal reasons |
| Analytics events | As long as they're useful for reporting. There's no fixed deletion date today. |
| Agreement records | Kept as proof of what you accepted, including after you delete your account |
| Staff case copies | 30 days unless preserved with a recorded reason |
9. Deleting your account
In the app, open Account and tap Delete account. If you can't open the app, contact us using the details in section 14. Deletion can't be undone.
What's removed or cleared
- Your profile name, photo link, phone and date of birth, and your private details, including your home address
- Follows, watched items, area alerts, blocks, notifications, push tokens, team memberships and day plans
- Your holds are released, your listings are taken down, and their private addresses are deleted
- The text of messages you sent is replaced with "[deleted]"
- Analytics and feedback are separated from your account
- Your sign-in is closed, and Sign in with Apple access is revoked
What we keep
- A back-office record: your account is archived, not erased, in our back office. Your name, email, phone, town, ZIP code and links to your orders stay in that restricted record for safety, disputes, fraud prevention, tax and legal reasons. It has no fixed end date.
- Transactions: reservations, bookings and related records stay for accounting and disputes.
- Reviews: reviews you wrote stay, shown as "Deleted user".
- Inactive listings: listing records and photos may remain in storage, hidden from the app.
- Archived messages and reports: originals you archived, and reports by or about you, stay in restricted storage.
- Copies elsewhere: messages others received on their devices, and our backups until they're replaced.
To ask us to remove more of what we keep, contact us. We'll do so unless we need to keep it for a safety or legal reason.
10. Your choices and rights
- View and edit your profile and private details in Account, and see your history in My activity.
- Turn location, camera, calendar and notification access off in your phone's Settings.
- Turn off birthday sharing and marketing messages, or withdraw any consent, in the app or by contacting us.
- Ask us for a copy of your data, or to correct or delete it. We'll verify the request and answer within 45 days.
- Depending on where you live, you may have further rights, including appealing our decision. We won't treat you differently for using them.
Analytics can't be switched off inside the app today. Actions taken while signed out aren't linked to an account.
11. Children and teens
You must be at least 13 to have an account, and we ask for your date of birth to check this. We refuse accounts for anyone under 13. If we learn we've collected data from a child under 13, we'll delete it; contact us if you think this has happened. Hosting a stand or sale and any paid feature require you to be 18 or older. Teens can run a kid-run listing under a parent's account.
12. This website
This site uses cookies needed to run it, such as session and language cookies, and our server records basic visit information such as pages viewed, approximate country, browser and IP address. It has no advertising cookies.
13. Security
We limit data by account with database access rules, keep private details apart from public profiles, restrict and log staff access, and encrypt connections. No system is perfectly secure. If a breach affects you, we'll notify you as the law requires.
14. Changes and contact
We'll post changes here and update the effective date. For significant changes, we'll also tell you in the app or ask for your consent where required.
[legal operator name]
[mailing address]
Phone:
[phone]
Email:
[support email]