Privacy Policy
This Privacy Policy explains how Spivvy ("we," "us," or "our") collects, uses, shares, and protects your personal information when you use the Spivvy mobile application and related services (the "Service").
By using Spivvy, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
1. Information We Collect
1.1 Information You Provide
Account Information
- University email address (required for verification)
- Username
- Full name
- Profile picture
- Bio/description
Listing Information
- Item titles and descriptions
- Photos of items
- Pricing information
- Item categories, sizes, brands, and other details
Transaction Information
- Offers and counter-offers
- Purchase and rental history
- Meetup locations and times
- Damage claims and dispute details
Communication Data
- Messages sent through in-app chat
- Reviews and ratings
Payment Information
- Payment card details are collected and processed by Stripe. We do not store your full card number on our servers.
- We store Stripe customer and account IDs to facilitate payments.
1.2 Information Collected Automatically
Device Information
- Device type and model
- Operating system version
- Unique device identifiers
- Push notification tokens
Usage Information
- App features used and screens viewed
- Actions taken (listings viewed, offers made, etc.)
- Search queries and time spent in app
Log Data
- IP address, access times, error logs, and performance data
1.3 Information from Third Parties
University Verification: We verify your student status through your university email domain.
Payment Processors: Stripe may provide us with limited payment information such as payment status, last four digits of your card, and transaction confirmations.
2. How We Use Your Information
- Create and manage your account and facilitate transactions
- Process payments and payouts
- Enable in-app messaging and push notifications
- Detect and prevent fraud and enforce our Terms of Service
- Respond to inquiries and support requests
- Improve app performance and features
3. How We Share Your Information
3.1 With Other Users
Your username, profile picture, and listings are visible to other users. When you make or accept an offer, relevant information is shared with the other party.
3.2 With Service Providers
| Provider | Purpose | Data Shared |
|---|---|---|
| Supabase | Database and authentication | Account data, listings, messages, transactions |
| Stripe | Payment processing | Payment information, identity verification for sellers |
| PostHog | Analytics | Usage data, anonymized behavior analytics |
| Sentry | Error tracking | Crash reports, error logs |
| Expo | Push notifications | Device tokens, notification content |
3.3 For Legal Reasons
We may disclose your information if required to comply with applicable laws, respond to lawful requests, protect our rights, or prevent fraud.
4. Data Retention
We retain your information while your account is active and as required by law. Transaction data is retained for 7 years for tax and legal compliance. When you delete your account, we delete or anonymize your personal information within 30 days, except where retention is required by law.
5. Your Rights and Choices
- Access and Portability: Access your data through app settings or by contacting us.
- Correction: Update your profile information at any time through the app.
- Deletion: Delete your account through app settings.
- Push Notifications: Opt out through your device settings.
- Marketing: Opt out via the unsubscribe link in any marketing email.
6. Data Security
We use TLS/SSL encryption in transit, encryption at rest for sensitive data, and row-level security on our database. No method of transmission or storage is 100% secure.
7. Children's Privacy
Spivvy is not intended for users under 13. If you believe we have collected information from a child under 13, contact us at support@spivvy.app.
8. California Privacy Rights (CCPA)
California residents have the right to know, delete, and opt out of the sale of personal information. Note: Spivvy does not sell personal information. We will not discriminate against you for exercising your privacy rights.
9. European Privacy Rights (GDPR)
If you are located in the EEA, UK, or Switzerland, you have rights including access, rectification, erasure, restriction, portability, and objection. Contact us at support@spivvy.app to exercise these rights.
10. Changes to This Policy
We may update this Privacy Policy from time to time and will notify you of material changes through the app. Continued use after changes constitutes acceptance.
11. Contact Us
Spivvy
Email: support@spivvy.app