Privacy Policy

Last updated: June 2025

Trade Anything (“we”, “us”, or “the app”) helps people swap items. This policy explains what we collect, why we collect it, and the choices you have. By using the app you agree to this policy.

1. Information we collect

• Account info: name, email, profile photo, password hash, and — if you sign in with Google — the basic Google profile fields.
• Listing content: titles, descriptions, photos, prices, categories, condition, location text you choose to share.
• Messages & trades: content of chats you exchange after subscribing, plus trade offer history and ratings.
• Payment info: handled by Stripe — we never store full card numbers. We only store your subscription status.
• Device info: push tokens (so we can notify you), basic crash and usage logs.
• Location: only the city/region text you type into a listing. We do not collect precise GPS in the background.

2. How we use it

To run your account and listings, to power search and matching, to deliver messages and push notifications you opt into, to process the $2.99/month subscription that unlocks messaging, to keep the platform safe (anti-fraud, moderation, reports), and to comply with the law.

3. Who we share it with

We share data only with the providers we need to run the service: Stripe (payments), Resend (password-reset emails), Emergent’s push relay (notifications), Google (sign-in if you choose it), and our MongoDB hosting provider. We do not sell your data.

4. Your choices

• Edit your name, photo, and bio in Profile.
• Manage your subscription from the Subscription screen (Stripe customer portal).
• Block users or report listings from any item or chat.
• Turn push notifications on/off in your device settings.
• Delete your account by emailing tradeanything@yahoo.com — we will remove your profile and listings within 30 days.

5. Children

Trade Anything is not directed at children under 13. If we learn that a child under 13 has provided us personal info, we will delete it.

6. Security

Passwords are stored as bcrypt hashes. Sessions use opaque tokens. Payment cards are handled exclusively by Stripe under PCI-DSS. We encrypt data in transit (HTTPS). No system is perfect, so please use a strong password and keep your device locked.

7. Changes

We may update this policy. Material changes will be announced in the app or by email. Your continued use of the app means you accept the updated policy.

8. Contact

Questions or data-access requests: tradeanything@yahoo.com.