01Information we collect
- Account information — your name and email address when you register, plus a hashed password. We never store your password in plain text.
- Location data — with your permission, your device’s location is used to show stalls near you and to plan routes in Trip Planner. This is “while using the app” only: we do not track your location in the background, and we do not store it against your account unless you explicitly turn on new-stall notifications, in which case we store a single approximate point and a radius that you choose.
- Photos — if you list or manage a stall, or add photos to a review, those photos are stored with our image host and shown publicly on the relevant listing.
- Content you post — stall listings, reviews and star ratings, stock updates (“what’s in stock today”), and favourites.
- Safety and moderation data — if you report a stall or a review, or block another user, we store that report or block (including who submitted it) so our moderators can act on it and so blocked content stays hidden from you.
- Basic usage counts — such as how many times a stall listing has been viewed or had directions opened, so stall owners can see interest in their stall. These are aggregate counters, not a log of who did what.
- Notification token — if you turn on push notifications, your device provides a notification token that lets us send them. Push notifications are not enabled in the current release of the app, so no token is collected today.
We do not collect payment information — the Service processes no payments. We do not use third-party advertising or analytics trackers, we do not track you across other apps or websites, and we do not sell your personal information.
02How we use it
- To run core features: showing stalls on a map, planning routes, and letting sellers manage listings.
- To let buyers and sellers interact — reviews, stock updates, favourites and reports.
- To verify your email address when you register, and to send account-related messages.
- To keep the Service safe — investigating reports of incorrect, misleading or objectionable content, and enforcing blocks you have set.
04What is visible publicly
Your name is shown next to reviews and stock updates you post. Stall listings show the stall’s details, not the owner’s personal contact details. Your email address is never shown publicly, and neither is your location.
05Overseas disclosure
Several of the providers above store and process data on servers outside Australia — primarily in the United States and the European Union. By using the Service you acknowledge that your information may be handled overseas by these providers. We choose providers that offer contractual protections consistent with Australian Privacy Principle 8, but we cannot guarantee that overseas recipients are subject to laws substantially similar to the Privacy Act 1988 (Cth).
06How long we keep it
We keep your account information for as long as your account exists. Content you post stays visible until you remove it, or until it is removed through moderation. Stock updates expire automatically after a short period. Reports and blocks are retained while they remain relevant to keeping the Service safe.
07Deleting your account
Go to Profile → Delete account and confirm with your password. This immediately and permanently removes your account, your stall listings, your reviews, your favourites and your stock updates. It cannot be undone.
Would rather we did it for you? Email haiphamcr@gmail.com.
08Your rights
You can access, correct, or request a copy of the personal information we hold about you at any time by contacting us. Under the Australian Privacy Principles you may also lodge a complaint with the Office of the Australian Information Commissioner (OAIC) if you believe we have mishandled your information. We ask that you contact us first, so we have a chance to put things right.
09Security
Passwords are stored only as salted hashes. Traffic between the app and our servers is encrypted in transit with HTTPS. Access to production data is limited to those who need it to operate the Service. No system is perfectly secure, but we take reasonable steps to protect your information from misuse, loss and unauthorised access.
10Children’s privacy
The Service is not directed at children, and we do not knowingly collect personal information from anyone under 13. If you believe a child has given us personal information, please contact us and we will delete it.
11Changes to this policy
We may update this policy as the Service changes. Material changes will be reflected by updating the “Last updated” date at the top of this page.
12Contact us
Questions about this policy or your data? Email haiphamcr@gmail.com — we read every message.