Privacy Policy

Smivo ("we", "our", or "us") operates the Smivo mobile application and website (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

    Summary: We collect only what we need to run a trusted campus marketplace. We never sell your data. You can delete your account and all associated data at any time.
  

1. Information We Collect

1.1 Information You Provide

Data Type	Purpose	Required?
University email (.edu)	Account registration & identity verification	Yes
Display name	Profile display to other users	Yes
Profile photo	Visual identity in listings and chat	Optional
Listing photos	Item images for marketplace listings	Yes (to sell)
Chat messages	Communication between buyers and sellers	Yes (to chat)
Evidence photos	Documenting item condition during exchanges	Optional

1.2 Information Collected Automatically

Data Type	Purpose	Technology
Device identifier	Push notification delivery	OneSignal SDK
App usage data	Service improvement and debugging	Supabase Analytics
IP address	Security and fraud prevention	Server logs

2. How We Use Your Information

We use your information exclusively to:

Provide the Service — Enable listing creation, order processing, chat messaging, and transaction management.
Verify identity — Ensure users belong to a verified university community via .edu email validation.
Deliver notifications — Send order updates, new messages, and rental reminders.
Ensure safety — Prevent fraud, enforce community guidelines, and resolve disputes.
Improve the Service — Analyze usage patterns to enhance features and fix bugs.

    We do NOT:
    Sell your personal data to third parties.
Use your data for advertising or ad targeting.
Track you across other apps or websites.
Share your .edu email with anyone outside the Smivo community.

  

3. Third-Party Services

We rely on the following third-party services to operate Smivo:

Service	Purpose	Privacy Policy
Supabase	Database, authentication, file storage, real-time messaging	supabase.com/privacy
OneSignal	Push notifications	onesignal.com/privacy
Google Fonts	Typography	google.com/privacy

Each service has its own privacy policy. We encourage you to review them.

4. Data Storage & Security

Your data is stored on Supabase infrastructure (AWS, US regions) with encryption at rest and in transit (TLS 1.2+).
All database tables are protected by Row Level Security (RLS), ensuring users can only access their own data.
Photos are stored in secure cloud storage buckets with path-based access controls.
Passwords are hashed using industry-standard algorithms (bcrypt) and are never stored in plain text.

5. Data Retention

Active accounts: Your data is retained for as long as your account is active.
Deleted accounts: When you delete your account, all personal data (profile, listings, messages, orders) is permanently removed within 30 days.
Chat messages: Messages are retained for the duration of the associated transaction and deleted when both parties' accounts are removed.
Server logs: IP addresses and access logs are retained for up to 90 days for security purposes.

6. Your Rights

You have the following rights regarding your personal data:

Access: Request a copy of the data we hold about you.
Correction: Update inaccurate information via your profile settings.
Deletion: Delete your account and all associated data via Settings > Delete Account.
Portability: Request your data in a machine-readable format.
Opt-out: Disable push notifications via Settings > Notifications.

To exercise any of these rights, contact us at privacy@smivo.com.

7. Children's Privacy

Smivo is designed for college students (typically 18+). We do not knowingly collect data from children under 13 years of age. If you believe a child under 13 has provided us with personal information, please contact us immediately and we will delete such information.

8. Payments

Smivo does not process payments directly. All financial transactions (purchases, rental fees, deposits) are arranged between buyers and sellers outside the app via services like Venmo, Zelle, or cash. We do not collect or store any financial information such as credit card numbers or bank accounts.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting a notice within the app or updating the "Last updated" date above. Continued use of the Service after changes constitutes acceptance of the revised policy.

10. Contact Us

If you have any questions about this Privacy Policy, please contact us:

Email: privacy@smivo.com
Support: Smivo Help Center