Privacy Policy

1.1 Account information

• Email address and full name — obtained from your Google account when you sign in via Google.
• A unique user identifier issued by our authentication provider (Clerk).
• Optional profile fields you add yourself (city, currency, language).

1.2 Listings and transactions

• Item details you post for sale — title, description, category, condition, price.
• Photos of items you intend to sell.
• Pickup and delivery addresses you enter when scheduling a storage handover.
• Order history (your purchases and sales) and basic transaction metadata.

1.3 Device and usage data

• Anonymous device identifier, OS version, app version, locale.
• Product-interaction events (which screens you open, which actions you take) — collected by PostHog for product analytics.
• Crash and performance data — collected by Firebase Crashlytics if a crash occurs.

We do not collect your precise location, contacts, microphone audio, health data, or any other sensitive category outside what is listed above.

• To create and manage your account and authenticate you on each session.
• To operate the marketplace — match buyers and sellers, schedule storage pickups, display listings.
• To provide customer support when you contact us.
• To monitor reliability, fix crashes, and improve product quality (aggregate analytics).
• To enforce our Terms of Service and prevent fraud.

We do not use your data for advertising, profiling, or cross-app tracking. We do not sell your data.

We use the following processors. Each is bound by its own privacy commitments:

• Clerk — user authentication and session management.
• Google — OAuth sign-in (we receive only your email, name, and profile picture URL).
• Supabase — Postgres database and object storage for listings and photos.
• Amazon Web Services (AWS) — backend hosting (AWS Lambda).
• PostHog — product analytics (interaction events).
• Firebase Crashlytics — crash and performance reporting.
• Vercel — hosting for the web version and legal pages.

We keep your data for as long as your account is active. When you delete your account (Profile → Delete account, or by contacting us), we delete your personal identifiers and listings within 30 days, except where retention is required by law (e.g. tax records).

• Access — request a copy of the personal data we hold about you.
• Correction — fix incorrect personal data via your profile or by contacting us.
• Deletion — delete your account directly from the app (Profile → Delete account) or email us.
• Portability — request an export of your data.
• Complaint — lodge a complaint with your local data protection authority.

All traffic between the app and our servers is encrypted with TLS. Passwords are handled exclusively by Clerk and never stored on our servers. Data at rest is encrypted by our cloud providers (AWS and Supabase).

Relomate is not directed to children under 16. If you believe a child has registered with us, please contact us and we will delete the account.

We may update this Policy. The “Effective date” at the top reflects the latest version. Material changes will be highlighted in the app.