This Privacy Policy explains how [Legal Entity Name] ("Amanatym," "we," "us," or "our") collects, uses, discloses, and protects personal information when you use the Amanatym mobile application, website, APIs, support channels, and related services (the "Service").
Amanatym connects people who want to send legal, allowed items with travelers who may be willing to carry those items. Users are responsible for complying with all applicable laws, airline rules, customs rules, border rules, and platform safety rules.
1. Contact
If you have privacy questions or want to exercise privacy rights, contact us using the email above or through Help & Support in the app.
2. Personal Information We Collect
We collect information you provide directly, information created through your use of the Service, and limited technical information needed to operate and secure the Service.
Account and Profile Information
- Email address and authentication information.
- Full name.
- Phone number.
- Country, city, citizenship, gender, user type, short bio, profile photo, and other profile details you choose to provide.
- Email and phone verification status.
Listings and Marketplace Activity
- Trip/listing details, including departure and destination locations, travel date, carrying capacity, accepted and rejected item types, expected fee, currency, notes, status, and timestamps.
- Search filters and listing interactions.
- Conversations, messages, read status, and related metadata.
Safety, Support, and Moderation Information
- User reports, report reasons, report details, blocked-user records, and moderation status.
- Support requests, category, subject, message, user email, and support status.
- Account deletion requests, including requesting email, request date, status, and deletion review timing.
Device, Log, and Security Information
Depending on your device and platform, we or our service providers may process technical information such as device type, operating system, app version, IP address, authentication logs, crash/error information, timestamps, and security events.
Photos and Files
If you upload a profile photo or other supported media, we process the file and related storage metadata. We do not access your device photos unless you choose to upload a photo or grant access through your device permissions.
Location Information
The Service currently uses location information that you enter, such as country and city. We do not intend to collect precise GPS location unless a future feature clearly requests it and you grant permission.
Payment Information
The current Service does not process in-app payments. Users may list expected fees or discuss compensation, but any payment arrangement is between users unless we introduce a separate payment feature with additional terms.
3. How We Use Personal Information
We use personal information to:
- Create, authenticate, and maintain accounts.
- Let users create profiles, listings, searches, conversations, reports, blocks, and support requests.
- Display listings, public profile information, verification signals, and other user-submitted content needed for the Service.
- Send account, verification, security, support, and service messages.
- Review reports, enforce safety rules, prevent fraud, investigate abuse, and protect users.
- Process account deletion requests and related cancellation requests.
- Maintain, debug, analyze, secure, and improve the Service.
- Comply with legal obligations and respond to lawful requests.
- Enforce our Terms of Service and other policies.
4. Legal Bases for Processing, Where Applicable
If privacy laws require a legal basis, we process personal information based on one or more of the following:
- Contract: to provide the Service and perform our Terms of Service.
- Legitimate interests: to secure, operate, improve, and protect the Service and users.
- Consent: where we ask for permission, such as optional device permissions or certain communications.
- Legal obligation: where processing is needed to comply with applicable law or lawful requests.
- Vital or public-interest safety reasons: where necessary to protect users or others from serious harm, fraud, illegal activity, or safety risks.
5. How We Share Personal Information
We do not sell personal information. We do not share personal information for cross-context behavioral advertising unless we update this Policy and provide any required choices.
We may share personal information as follows:
With Other Users
Some information is visible to other users as part of the Service, including profile details, profile photo, verification signals, listings, listing details, and messages you send. Reports and blocks are handled privately and are not shown to the reported or blocked user except as necessary for moderation or legal reasons.
With Service Providers
We use service providers to operate the Service, including database, authentication, storage, hosting, email, analytics, logging, and security providers. These providers may process personal information on our behalf only as needed to provide their services.
Current infrastructure includes Supabase for authentication, database, realtime, and storage, and Resend for email delivery. This list may change as the Service evolves.
For Safety, Legal, and Compliance Reasons
We may disclose information if we believe it is reasonably necessary to comply with law, legal process, government requests, safety obligations, customs or law-enforcement requests, protect rights and property, investigate fraud or abuse, enforce our Terms, or protect users and the public.
Business Transfers
If we are involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, personal information may be transferred as part of that transaction, subject to appropriate protections.
6. International Transfers
The Service may be operated from, and service providers may process personal information in, countries other than where you live. These countries may have different data protection laws. Where required, we use appropriate safeguards for international transfers.
7. Retention
We keep personal information for as long as needed to provide the Service, maintain security, comply with law, resolve disputes, enforce agreements, and support legitimate business purposes.
Typical retention practices include:
- Account and profile information: kept while your account is active.
- Listings, conversations, reports, blocks, and support requests: kept while needed to operate the Service, preserve safety records, resolve disputes, and comply with legal obligations.
- Verification, authentication, and security records: kept as needed for fraud prevention, security, and compliance.
- Account deletion requests: kept while the request is pending and as needed to document review, cancellation, or completion.
When information is no longer needed, we delete, anonymize, or otherwise handle it according to applicable law and technical limitations.
8. Account Deletion
You may request account deletion from the Account screen. For security and abuse-prevention reasons, account deletion is not immediate. We create a deletion request, review the account, and schedule deletion after 30 days unless the request is canceled.
You may cancel a pending deletion request in the app before the account is manually deleted. After deletion is completed, your account and associated app data may not be recoverable. Some information may be retained if required or permitted for legal, safety, fraud-prevention, dispute-resolution, or compliance reasons.
9. Your Choices and Rights
Depending on your location and applicable law, you may have rights to:
- Access or receive a copy of personal information.
- Correct inaccurate personal information.
- Delete personal information.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
- Appeal a privacy-rights decision.
- Lodge a complaint with a privacy regulator.
You can update some profile information in the app. To make another request, contact us at [privacy@amanatym.com]. We may need to verify your identity before responding.
10. California Privacy Notice
If the California Consumer Privacy Act, as amended, applies to us and to your information, California residents may have rights to know, access, correct, delete, opt out of sale or sharing, limit certain uses of sensitive personal information, and not be discriminated against for exercising rights.
We may collect the following categories of personal information: identifiers, customer records information, protected classification information you choose to provide, commercial or marketplace activity information, internet or electronic network activity, geolocation information you enter at city/country level, audio/visual information such as profile photos, inferences, and sensitive personal information where you provide it or where account security requires it.
We use and disclose these categories for the purposes described in this Policy. We do not sell personal information, and we do not share personal information for cross-context behavioral advertising unless this Policy is updated and required choices are provided.
11. Children's Privacy
The Service is not intended for children under 18. We do not knowingly collect personal information from children under 18. If you believe a child has provided personal information to us, contact us so we can take appropriate action.
12. Security
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No system is completely secure. You are responsible for keeping your login credentials confidential and for using the Service safely.
13. Third-Party Links and Services
The Service may contain links to third-party services or may involve user interactions outside Amanatym. We are not responsible for the privacy practices of third parties. Review their policies before providing information to them.
14. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If changes are material, we will provide notice as required by law, such as through the app, website, or email. The updated version will be identified by the "Last updated" date.