Privacy Policy
PebbleShed ("we," "our," or "us") is operated by DataMinded.ai. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and website (collectively, the "Service").
1. Information We Collect
Account Information: When you create an account, we collect your email address and display name. Authentication is handled via Magic Link (passwordless email login) through our backend provider, Supabase.
Profile Information: You may voluntarily provide your full name, role (adult or teen), and other profile details during onboarding.
Usage Data: We collect information about how you interact with the Service, including chores posted, chores completed, tool listings, rental activity, karma earned, and trust scores.
Photos: When you submit proof-of-work photos for chore completion or tool condition documentation, those images are stored securely in our cloud storage.
Device Information: If you enable push notifications on a mobile device, we collect your device's push notification token. We also collect basic device information (platform type: iOS, Android, or web).
Location Data: We request location permission to display your territory on the map. Location data is used only for territory assignment and is not continuously tracked.
2. How We Use Your Information
- To create and manage your account
- To facilitate the chore and tool-sharing marketplace
- To calculate and display karma scores and trust ratings
- To send push notifications about chore status changes, rental updates, and community activity
- To display neighborhood activity on the territory map (with privacy blurring for inactive tasks)
- To enable the parental oversight system for teen accounts
- To improve and optimize our Service
- To communicate with you about updates, support, and feedback
3. Data Storage & Security
Your data is stored on Supabase infrastructure with row-level security (RLS) policies ensuring users can only access their own data. Photos are stored in secure, access-controlled storage buckets. We use industry-standard encryption for data in transit (TLS/SSL).
4. Data Sharing
We do not sell, trade, or rent your personal information to third parties. We may share limited data in the following circumstances:
- Community Visibility: Your display name, karma score, and trust score are visible to other users in your territory. Your email address is never shared with other users.
- Chore Activity: When you post or complete a chore, the chore title, bounty amount, and your display name may be visible in the community activity feed.
- Service Providers: We use Supabase (database and authentication), Expo (push notifications), and Resend (transactional emails). These providers process data on our behalf under their respective privacy policies.
- Legal Requirements: We may disclose information if required by law or to protect the rights, safety, or property of PebbleShed, our users, or the public.
5. Minor Users (Teens)
PebbleShed supports teen accounts with parental oversight. Teen profiles require a linked parent/guardian account. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us immediately.
6. Identity Verification
In future releases, we may implement identity verification through Stripe Identity. When this feature is active, verification metadata is processed ephemerally — we follow a "Burn" protocol where sensitive verification data is purged from our systems after successful verification, retaining only the verification status.
7. Your Rights
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request deletion of your account and associated data
- Opt out of push notifications at any time via device settings
- Withdraw consent for location access via device settings
8. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required to retain certain information by law. Anonymized, aggregated data (such as community karma totals) may be retained indefinitely.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy in the app and updating the "Last updated" date above.
10. Contact Us
If you have questions about this Privacy Policy or your personal data, contact us at:
Email: support@pebbleshed.com
Organization: DataMinded.ai
Location: Wind Lake, WI