Privacy Policy

Scope

This policy covers the Chiviando mobile app and chiviando.com. It applies to all users, who must be at least 18 years old.

Chiviando is the controller of your data. If you have questions, email us at the address at the end of this policy.

Data we collect

We collect the following types of data when you use the app or website.

• Email for passwordless authentication.
• Public name, biography, profile photo, and service categories.
• Municipalities where you request or perform chivos (we do not use GPS or an exact address in v1).
• Content you post: titles, descriptions, comments, offers, messages, photos, and reviews.
• Identity-verification documents (a government photo ID, a selfie, and—for businesses—registration documents), collected only when you request verification.
• Boost and subscription purchase information processed by the stores (we do not receive your card numbers).
• Device identifiers and notification tokens used to deliver push notifications.
• Technical and diagnostic data (errors and performance) to keep the app stable.
• Account- and session-linkable usage events to understand which features are used and improve the app. This data is pseudonymous, not anonymous.
• On the website, the email you leave for the waitlist.

How we use data

We use data to show your content to the right people, keep the marketplace safe, and improve the experience.

• Show chivos in relevant municipalities and categories.
• Connect matching customers, chiviadores, and businesses.
• Moderate content before it is published and review verification requests.
• Detect and prevent fraud, abuse, and Community Rules violations.
• Process boosts and subscriptions and provide support.
• Send activity notifications and security or billing emails.
• Comply with legal obligations.

Automatic content moderation

To keep the community safe, the text and images you post or send are automatically reviewed before becoming visible. For that review, we send only that content to OpenAI, which processes it solely to detect material that violates our rules. We do not send your email or identity documents.

This review is a normal part of the service. It is not used to create advertising profiles or shared for marketing purposes.

Who we share data with

We do not sell your data. We share it only with providers acting on our behalf to operate Chiviando; each receives only what is necessary for its function and cannot use your data for its own purposes.

• Supabase: database hosting, authentication, and file storage, including private verification documents.
• OpenAI: text and images you post or send, only to moderate them before they become visible; it does not receive your email or identity documents.
• Sentry: failure and performance diagnostics to fix errors, not the content you post.
• Apple and Google: processing in-app purchases.
• Expo: push-notification delivery; notifications do not include the content of your messages.
• MailerLite: sync of the email address you submit to the website waitlist; Supabase remains the primary record for that list.
• Resend: delivery of transactional and authentication emails to the recipient email address.

What we do not share

Your identity-verification documents are not public. They are stored privately in Supabase and restricted to the owner and authorized reviewers for the verification process; they are deleted when you delete your account.

We do not use advertising networks or third-party trackers, and we do not share data for marketing purposes.

Public visibility

Your public name, photo, biography, categories, served municipalities, reviews, and published chivos are visible to other Chiviando users as appropriate.

Your email, verification documents, preferred language, and notification preferences are not public.

Data retention

We retain your information while your account is active and for as long as needed for the purposes described in this policy.

When you delete your account, we purge personal data as described in the section on your rights. Some de-identified records may be retained when required by law or fraud prevention, and backups are overwritten in their normal cycles.

Your rights

You can access and edit your profile data in the app at any time.

You can delete your account from Settings. When you do, we delete your identity-verification documents, erase your email, and remove your uploaded photos and the text of your messages, comments, and reviews; we retain only de-identified records we must keep for legal or safety reasons.

If you want to exercise an additional right over your data, email support@chiviando.com.

Security

We apply database-level controls so you can see only content that belongs to you.

Identity-verification documents are stored privately and are accessible only to you and our verification reviewers; they are deleted when you delete your account.

No system is perfect. Report any suspected unauthorized access to support.

Notifications and communications

We send push notifications and emails about account activity, such as offers, messages, and chivo updates, as well as security and billing notices.

You can adjust notification preferences in the app and control push permissions from your device settings.

Cookies and tracking

chiviando.com uses browser local storage only to remember your theme preference. We do not use advertising cookies or third-party trackers.

The app does not track you across other apps or sites and does not share data with advertising networks.

Minors

Chiviando is for people 18 or older only. We do not knowingly collect data from minors. If we discover that we created an account for a minor, we delete it.

Changes to this policy

We may update this policy when our practices or the law change. If we make material changes, we will notify you through reasonable means and update the date at the top of this page.

Contact

For privacy questions, email support@chiviando.com.