Privacy Policy

Stoopify is a neighbor-to-neighbor bartering app — people offer items and trade them, with no money changing hands. This policy explains what we collect, why, and the choices you have. It is written to be read, not to hide things.

Who we are

Stoopify is operated by Satsuma Farms LLC ("we," "us"). You can reach us at hello@stoopify-nyc.com for any privacy question or request.

What we collect

• Account & identity. When you sign in with Apple or Google, we receive a unique account identifier and your email address (with Apple, possibly a private relay address). We do not keep the email itself: we store a one-way hash of it, used to keep each person to one account and to stop banned users returning. We store the name you choose to show neighbors (with Sign in with Apple, the app starts from the name Apple shares, and you can change it), a public handle, and an optional avatar and bio. You choose your handle when you join (we suggest one from your name) and can change it once; after that it is permanent, except that we may change one that impersonates someone or breaks our rules, and we tell you when we do. A handle that is released or changed is held for 90 days before anyone else can take it. If you sign in with Apple, we also keep a token Apple issues, so that we can revoke Stoopify's access to your Apple ID when you delete your account. We record which version of these Terms you accepted, and when. We never see your Apple or Google password — sign-in is handled by Apple and Google.
• Listings & photos. The items you post — titles, descriptions, categories, and photos. Photos you upload — to listings, your profile, or a chat — are automatically scanned by an image-moderation service to detect prohibited content before they go live; a photo that fails the scan is refused. Before a photo is shown to anyone, we remove any location data (GPS) it carries. A listing that includes contact details (a phone number, email address or link), asks for payment, or appears to offer a prohibited item is held for a quick review before neighbors can see it. Moving or animated images aren't accepted.
• Messages, trades & activity. The messages you send in a trade thread, your offers, the meetup places and times you agree, reports you file, people you block or follow, saved searches ("wants"), favorites, the trades you hide from your own lists and the threads you mute, your notification settings, when you were last active, and any feedback you send us. If another neighbor reports you, we keep that report and its outcome on your account. If a trade goes wrong, either person can leave a private note about the other (for example, that they did not show up); the person it is about isn't told, and a note does nothing on its own — our team looks at notes only when several point the same way, such as notes from several different neighbors about one account. We also record when someone cancels an agreed trade close to its meetup time (a "late cancel"); you can see your own, and other neighbors can't. To protect neighbors from scams, we automatically check chat messages and the notes on offers for common warning signs — a request for money or a code, a link, or a push to move to another app. We keep only a count of these signs, not the message or note, for 30 days, so our team can spot an account targeting many people. The person reading a message may see a safety tip under it. The sender isn't notified, though these counts are included if they download their data, and are deleted with their account.
• Location & neighborhood. When you join, we take a single reading of your device location to suggest which neighborhood you're in. You choose the neighborhood you trade from: you can pick a different one there, or change it later in your profile. If you ask us to check your location again, we take one more reading. Each reading is sent to our server, used only to determine your neighborhood (a point-in-polygon check), and is never stored — we keep only the neighborhood you choose, on your account and your listings (or, if you join the waitlist instead, the one a reading found, with your signup). If a reading when you join finds you in a neighborhood that isn't open yet and you choose an open one to trade in, we also add one to an anonymous count for the neighborhood you're in — just the neighborhood and the day, not linked to you or your account — to help decide where to open next.
• Waitlist. If Stoopify isn't open in your neighborhood yet and you join the waitlist, we keep the email address you give us, the neighborhood a reading of your location found you in (when it found one), and the name and area if you add them, so we can email you when it opens. It is linked to the Apple or Google sign-in you used. We use it for nothing else. It is kept until you ask us to remove it, you delete your account, or 90 days after we email you that your neighborhood has opened.
• Notifications. A device push token, so we can send notifications once you allow them. You choose which kinds you get in Settings → Notifications. A few always come through: notices about your account and its standing; your meetup's own messages (a plan set, moved or removed, "Still on?" on the day, and the reminder shortly before); "did the swap happen?" and the last reminder before a trade closes as done; and a change to a listing in one of your trades. Switching a kind off stops only its push: every notice still appears in the app, including a neighbor saying you didn't swap and the answer when you say so.
• Usage & diagnostics. Basic product events recorded by our servers (for example, that an offer was sent), under a pseudonymous identifier derived from your account — never your name or email; from the app, an occasional measurement of how long it took to start, and crash reports, which carry your device model, system version and app version under a random identifier, with account and trade identifiers removed; and, on our servers, your IP address and standard log data, which we use to run the service, secure it, and prevent abuse.

Our legal bases for processing (where the GDPR applies) are: performance of our contract with you (to run the service), our legitimate interests (to keep the community safe and prevent abuse), your consent (for push notifications), and compliance with law.

What we do NOT collect

• No payment information. Stoopify is barter-only — there is no checkout, so we never collect card or bank details.
• No location tracking. We read your location only when you join, to suggest your neighborhood, and again only if you ask us to check — and only while the app is open. We do not track your location in the background or over time, and we never store your coordinates.
• We do not sell your personal information, and we do not use it for third-party advertising.

How we use it

• To run the core service — show listings from the neighborhoods that are open, connect you with trade partners, and deliver messages and notifications.
• To keep the community safe — moderate listings, act on reports, and enforce our rules.
• To fix bugs and understand which features are used.

Who can see your messages and trades

The messages in a trade are seen by the two people in it. Our team sees one only if somebody reports it: then we see that message and the few before it, and that copy is kept with the report. If either person reports a problem with a trade, or leaves a note about it, the founders can also see that trade's record — the offers, the time and place of the meetup plan, and when each message was sent and by whom, but not what the messages said, apart from the app's one-tap meetup lines such as "I'm here." Every time one of us opens such a record, it is logged. That is why the meetup plan in the app says only the two of you can see it, and our team if either of you reports a problem with the trade.

Who we share it with

We share data only with the service providers that run Stoopify on our behalf. Each is bound by its agreement with us to use the data only to provide its service to us and to protect it at least as well as this policy describes, as Apple's App Store rules also require; none may use it for its own purposes or for advertising. They are:

• Apple and Google (sign-in)
• Our hosting and database provider, Railway (running the service)
• Our object-storage provider, Cloudflare (hosting your photos)
• Our content-moderation provider, OpenAI (automatically scanning your photos, and the text you write in listings, your profile, offers and meetup plans, for prohibited content)
• Our push-notification and app-update provider, Expo, and Apple (delivering alerts and app updates)
• Our email provider, Google (sending the email that tells you your neighborhood has opened, if you joined the waitlist)
• Our analytics provider, PostHog, and crash-reporting provider, Sentry (product usage and stability, pseudonymous)

We may also disclose information if required by law, or to protect the safety of our users. In particular, if we become aware of apparent child sexual abuse material (CSAM), we report it to the National Center for Missing & Exploited Children (NCMEC) and preserve it, and the account that posted it, for as long as the law and NCMEC require, as U.S. law requires.

Our website, stoopify-nyc.com, uses Cloudflare Web Analytics, which counts page visits without cookies and without identifying you.

Your rights and choices

• Access / export. You can ask for a copy of your data by emailing hello@stoopify-nyc.com. Before we act on a request by email, we check that the address you wrote from is the one you sign in with, by comparing it with the one-way hash of that email we keep; if they don't match, we can't act on it by email, and we'll tell you so. You can also ask from inside the app (Help & contact → Send feedback): a request sent there comes from your signed-in account, which confirms it's you — the way to ask if you signed in with Apple's Hide My Email. Once we've confirmed it's you, we send your copy within 30 days, to the address you wrote from or the one you give us in the app. Your copy includes the private notes other neighbors left about trades with you — the reason and the date, not who wrote them. If your account has been suspended or closed, you can download the copy yourself from the screen that tells you so.
• Deletion. You can delete your account in the app (Settings → Delete account, or from the suspended or closed account screen), or ask us to, by email, which we check the same way before we act, or from inside the app (Help & contact → Send feedback); we delete it the same way. When you do, we take down your listings and delete their photos, delete your avatar, anonymize your profile, release your handle so it no longer points to you (it is held for 90 days before anyone else can take it), and redact the text you wrote — chat messages, the meetup places you set, the notes on offers you made, the notes on reports you filed, the private notes you left about trades, appeals and feedback — leaving a "[deleted]" placeholder where a conversation needs one. In our own records, deletion keeps: an account record with no name, handle, photo or bio — only its dates, status and settings; your taken-down listings' text, hidden from everyone, because trade records refer to it; records of your trades with your name removed (which items were traded, when, and with whom), so your former trade partners keep an accurate history; reports you filed and reports about you, with the reason kept and your written note removed — and, where a report is about a chat message, the copy of that message and the few before it that the report was filed with, with your own lines removed from reports you filed — because safety records must outlive an account; private notes about trades — those you left, with the reason kept and your words removed, and those others left about you; blocks and "stop further offers" choices other people made about you, and our moderation records about the account (warnings, suspensions, appeal outcomes and the notes our team made on them), for the same reason; and one-way hashes of your sign-in email and of the Apple or Google account you signed in with — which cannot be reversed to recover either — to end every session the account had and to prevent banned or fraudulent users from returning. If you later sign in again with the same email or the same Apple or Google account, those blocks and choices, and any warning, suspension or ban on the deleted account, apply to your new account. Some things are kept for a short time for safety, even after you delete them or your account: a listing photo, chat photo or profile photo named in a report is kept privately until our team has reviewed the report and for up to seven days after; when our team takes down a listing, its photos leave public view at once and are kept privately for seven days before they are deleted; and if we have reported content an account posted to NCMEC, deleting that account does not delete what it uploaded, or the messages, offer notes and meeting places it sent, while that matter is open.
• Notifications. You control which push notifications you receive in Settings, and at the OS level.

Depending on where you live, you may have additional rights (such as under the GDPR or CCPA). Email hello@stoopify-nyc.com and we will honor applicable requests.

Data retention

We keep your information while your account is active. When you delete your account, we remove or anonymize personal data promptly as described above. What is kept afterwards, and why: an account record with no name, handle, photo or bio, and the text of your taken-down listings, hidden from everyone, so trade records still make sense; anonymized trade history — the items, dates and counterparties of your trades, with your name removed and the notes you wrote on offers redacted — so counterparties keep an accurate record; reports you filed and reports about you, with the reason kept and your written note removed, and the copy of any reported chat message with your own lines removed from reports you filed, as safety records, along with private notes about trades (with your own words removed), blocks, "stop further offers" choices and our moderation records about the account; photos named in a report, until the report is reviewed and for up to seven days after, and photos of listings our team took down, for seven days; server logs, kept by our hosting provider for a limited period (no more than 90 days) for security and debugging; pseudonymous analytics events and crash reports, which carry no name or email and stay with those providers under their own retention limits; and one-way hashes of your sign-in email and Apple or Google account identifier (to end the account's sessions and prevent ban evasion and fraud; they cannot be reversed). A waitlist email is kept until you ask us to remove it, you delete your account, or 90 days after we tell you your neighborhood has opened. Copies of our database are kept in encrypted backups for up to 30 days (35 if our backups stop being taken), so information you delete, or that we delete when you close your account, can remain in a backup until it ages out. If we ever restore a backup, we delete again any account that was deleted after that copy was made; to do this we keep a record of each deletion — only an internal account number and the time, no name or email — for as long as the backups that predate it. We keep information only as long as needed for these purposes or as the law requires.

California residents (CCPA/CPRA)

If you are a California resident, you have the right to know what personal information we collect and how we use it (described above), to request access to or deletion or correction of it, and to be free from discrimination for exercising these rights. We do not sell or share your personal information as those terms are defined under California law, and we do not process it for cross-context behavioral advertising. To exercise a right, email hello@stoopify-nyc.com or use Help & contact → Send feedback in the app; we verify it as described under "Access / export," by checking the address you write from against the one-way hash of the email you sign in with, or by the request coming from your signed-in account.

EU / UK residents (GDPR)

If the GDPR or UK GDPR applies to you, you have the rights of access, rectification, erasure, restriction, objection, and data portability, and the right to withdraw consent (for push notifications) and to lodge a complaint with your supervisory authority. Our legal bases are listed under "What we collect." To exercise a right, email hello@stoopify-nyc.com.

Children

Stoopify is not directed to children. You must be at least 18 years old to use it. If we learn that an account belongs to someone under 18, we close it and delete what they posted. A parent or guardian can write to hello@stoopify-nyc.com to ask us to.

Security

Data is encrypted in transit. No system is perfectly secure, but we work to protect your information and limit access to it.

Changes

We may update this policy; we will change the date above and, for material changes, tell you once in the app and record when you acknowledge it. Continued use after an update means you accept the revised policy.

Contact

Questions about privacy? Emailhello@stoopify-nyc.com.