Privacy Policy

1. Information we collect

We collect the information needed to run a peer-to-peer marketplace. This can include your name, email address, username, profile photo, bio, phone number when you choose SMS updates, saved searches, notification preferences, likes, follows and followers, basket actions, listings, photos, videos and their audio tracks, messages, offers, reviews, reports, and support requests.

For purchases and sales, we collect order history, shipping details, tracking information, refund or dispute records, transaction status, seller earnings, payout status, marketplace fees, and refund balances. Stripe directly processes the payment fields shown during checkout and the seller payout details. Regemify does not store or read your full card number. We receive limited payment and account information needed to complete and support transactions.

We also receive device, browser, app-launch, page-view, tap, search, performance, network, and crash information used for security, rate limits, reliability, personalization, and product improvement. Abuse-prevention counters record an email, account, or network key so we can apply rate limits. Some of those keys are hashed before storage and some are not, and we are working to hash them all. Error reports can include internal account, order, seller, buyer, or listing identifiers so we can investigate a failure. Sentry is configured not to send default personal information. Our before-send filter removes email, IP, and username from Sentry's user field; removes cookies, authorization headers, query strings, and request bodies; and scrubs email-shaped text from error messages and breadcrumbs. If you enable app notifications, we store a device push token and the notification categories you select.

2. How we use information

We use information to create and secure accounts, publish listings, process purchases and seller payouts, provide shipping and order updates, power messages and reviews, personalize discovery, send requested notifications, answer support requests, prevent fraud and abuse, moderate content, fix errors, and improve Regemify.

3. What other people can see

Your username, profile photo, bio, listings, seller reviews, follower counts, and other public marketplace activity can be visible to visitors. Buyers and sellers receive the order and shipping information needed to complete a transaction. Messages are visible only to conversation participants and authorized Regemify support or safety reviewers when needed.

After you place an order, we take part in Google Customer Reviews. To show you the option to rate your experience, we share your email address, order number, and estimated delivery date with Google when that screen appears. If you accept there, Google emails you a short survey about your order; if you decline, Google does not, and either way your order is unaffected. Google handles the survey and that information under its own privacy policy.

4. Service providers

We share information only when needed to operate Regemify. Current providers include Supabase for accounts and marketplace data, Apple and Google for optional social sign-in, Stripe for checkout and seller payouts, ImageKit and legacy Cloudinary for images, Mux for listing videos, Shippo for shipping labels and tracking, Resend for email, Twilio for SMS you request, Vercel for hosting and product performance, and Sentry for error diagnosis. When selected at checkout, payment-method providers such as Cash App, Apple Pay, Google Pay, Link, Klarna, Afterpay or Clearpay, and Affirm can also receive the contact, transaction, device, and payment information needed to provide that method. If you enable native app notifications, Apple Push Notification service (APNs) and Google Firebase Cloud Messaging (FCM) process the notification data needed to deliver them. You control notification permission in your device settings and notification categories in Regemify settings. We require service providers to protect personal information in a manner consistent with this policy and applicable requirements. These providers also publish their own privacy terms. We may disclose information when required by law, to protect users, or during a business transfer.

5. Cookies, analytics, and tracking

Regemify uses essential cookies and local storage for sign-in, security, preferences, and app operation. We use cookieless Vercel analytics and performance measurements to understand page visits and reliability. Vercel derives approximate city, state, and country from a request, then discards the underlying network address. It also creates a daily anonymous request identifier for aggregate measurements. During checkout, Stripe and Link may use cookies or similar storage and collect network address, device, online-activity, and approximate-location signals linked to a transaction for payment authentication, fraud prevention, analytics, and service improvement. You can read the Stripe Privacy Policy. These tools do not collect precise location or track you across unrelated apps or websites for Regemify advertising. The native iOS and Android apps do not use an advertising ID, advertising pixels, or cross-app tracking, and Regemify does not sell personal information. If that changes, we will update this policy and any required consent controls before using the new tool.

6. Retention and account deletion

We keep information only as long as needed for the purposes above. You can delete your account in the app at Settings, Account & security, Delete account. You can also use our public account and data deletion page. Active checkouts, accepted unpaid offers, or another unresolved transaction can temporarily delay deletion so money or another user's order is not lost.

Deletion removes or anonymizes your profile, contact details, private preferences, social data, review text, the message and offer text in your conversations, and the text and photos of any listing with no order attached to it. Copies held for safety review, and the item title recorded on an offer at the moment it was made, are kept as part of the records described below. Your public identity goes: everywhere on the marketplace, retained records show an anonymous deleted-account label instead of your name or handle.

Two things are kept rather than erased, and we would rather say so plainly than leave you to discover them. First, a listing with an order attached to it, including a sale that was later cancelled or refunded, is removed from the marketplace like every other listing, but its title, description, photos, and video are kept. It is the record of a real transaction with a buyer who keeps their side of it. Nobody can browse to it; it stays in that buyer's own order history and in our transaction records.

Second, an order record keeps the delivery details of the transaction itself: the name, postal address, and email address given at checkout. Those are not part of your public profile and are not shown anywhere on the marketplace, but they are how a completed sale, a refund, a dispute, or a tax record can be proved afterwards, so they are retained rather than anonymized. We keep the minimum transaction, fraud, tax, refund, dispute, safety, and legal records required to protect buyers, sellers, and Regemify, including evidence attached to a dispute after it closes.

7. Your choices and rights

You can update your profile and notification settings in Regemify. Optional SMS and app notification choices can be turned off in Settings. You may withdraw other consent or ask for access, correction, deletion, or a copy of your information by emailing support. Depending on where you live, you may have additional privacy rights. We will verify requests before releasing or changing account information.

8. Security and children

We use access controls, encrypted connections, monitoring, and provider security features to protect information. No online service can promise absolute security. Regemify accounts are for people age 18 or older, and we do not knowingly collect personal information from children.

9. Changes and contact

Regemify is operated by Citrine South Bay 1243 LLC, doing business as Regemify, at 1968 S. Coast Hwy #1406, Laguna Beach, CA 92651. Citrine South Bay 1243 LLC is the data controller responsible for the personal information described in this policy.

We may update this policy as Regemify changes. We will post the new date here and provide additional notice when a change is significant. Questions or privacy requests can be sent to support@regemify.com.