Privacy.

What we collect, who else sees it, and how to have it deleted.

What we collect

  • The email address on the Google or Apple account you sign in with.
  • Your school, and your school email address when you verify it.
  • The meal plan details you enter, including your plan and the balance you report.
  • Your order history: what you bought or sold, and what it cost.
  • Basic analytics about how the site is used, such as pages viewed and buttons pressed.

Who processes it

Running the site means other companies handle some of your data for us. These are the ones that do.

  • Supabase. Accounts and the database.
  • Vercel. Hosting and the requests that reach it.
  • Stripe. Payments. Card details go to Stripe and never to us.
  • PostHog. Product analytics.
  • Sentry. Error reports when something breaks.
  • Resend. Email we send you.
  • Twilio. Text messages we send you.

Payments run in Stripe test mode until trading is live at your school, so no real card is charged before then.

What we do not do

We do not sell your data. We do not share your name or your email with another student. Someone you trade with sees only what the trade needs.

Deleting your data

Email [email protected] and ask. We delete your account and the data attached to it. Records of completed payments are kept, because we are required to keep them.

Questions

Write to [email protected]. A person reads it.