Privacy Policy

This policy explains what data RiskyToys collects, how it is used, and what choices you have regarding your information.

LAST UPDATED: June 17, 2026

Information We Collect

We collect account details you provide, including email, name, and profile information used for authentication and account management.

When you create listings, we store titles, descriptions, photos, and approximate location (city, state, and coordinates you select — not GPS from your device).

Marketplace activity such as saved listings, comments, buyer/seller messages, listing views, and checkout records is stored to provide core product features.

If you enable notifications, we store a push token and basic device metadata (platform, app version) to deliver alerts.

How We Use Data

Data is used to operate search, saved listings, seller tools, messaging, moderation workflows, payments, and support operations.

We may use aggregated and de-identified usage patterns to improve marketplace quality, discover issues, and prioritize features.

Service Providers

We use trusted service providers to run the platform. They process data only on our behalf:

Supabase — authentication, database, file storage, and backend services.

Stripe — listing tier checkout on web and Android (payment processing; we do not receive your card number).

Apple — Sign In and in-app purchases on iOS.

Google — optional OAuth sign-in.

Mapbox — city and locality search when you set a listing location.

Expo — push notification delivery and over-the-air app updates.

Resend — transactional emails such as seller contact notifications and checkout receipts (sent from our servers).

Data Sharing

We do not sell personal data. Information is shared only with the service providers listed above, as needed to operate the app.

When required by law, we may disclose limited information in response to valid legal requests.

Retention and Your Choices

We retain data for operational, security, and legal compliance purposes, then remove or anonymize records when no longer required.

You can delete your account from the app, which removes your auth account and associated data from our systems.

For privacy requests, account questions, or data access inquiries, contact support@risky.toys from the email associated with your account.