Privacy Policy

Last updated: 29 May 2026 · Version 1.0

      Summary: We collect only what we need to run the marketplace. We never sell your data. Your phone number and email are never shown to other users.
    

Contents 1. Who We Are 2. What We Collect 3. How We Use It 4. Who We Share It With 5. How Long We Keep It 6. Your Rights 7. Security 8. Children 9. Changes 10. Contact

1. Who We Are

[COMPANY LEGAL NAME] trading as Metups, registration [REG NUMBER], [ADDRESS], Zimbabwe.

Privacy enquiries: privacy@metups.com
Data Protection Officer: dpo@metups.com

2. What We Collect

Information you provide

Account: name, email address, password (stored as a hash — we never see it), phone number (optional), date of birth, city
Listings: item title, description, price, category, condition, photos, location
Messages: content of in-app chats between you and other users
Profile: profile photo, bio

Information collected automatically

Device type, browser version, operating system
Pages visited, features used, session duration
City-level location (with your permission) for nearby listings
IP address (for fraud prevention)

From third parties

Google: if you sign in with Google, we receive your name, email, and profile photo

3. How We Use Your Information

Purpose	Legal basis
Create and manage your account	Contract
Display listings to buyers	Contract
Enable in-app messaging	Contract
Show nearby listings (location)	Consent
Send transactional notifications	Contract
Marketing emails (opt-in only)	Consent
Prevent fraud and ensure safety	Legitimate interest
Improve the platform	Legitimate interest
Legal obligations	Legal requirement

We do not sell your personal data. We share data only as follows:

With other users

Your display name, profile photo, city, and rating are visible to other users
Your phone number and email are never shown to other users

With service providers

Provider	Purpose	Location
Supabase	Database, authentication, storage	USA
Netlify	Web hosting	USA
Google	Sign-in only	USA

Legal requirements

We may disclose data if required by Zimbabwean law, court order, or law enforcement authority.

5. How Long We Keep It

Data	Kept for
Active account	While your account exists + 30 days after deletion
Listings	2 years after deactivation
Messages	1 year from last message
Deleted account data	Permanently purged within 30 days

6. Your Rights

You have the right to:

Access a copy of your personal data
Correct inaccurate data (via Settings → Profile)
Delete your account and data (via Settings → Delete Account)
Export your data in a portable format
Object to marketing (unsubscribe any time)

To exercise these rights, email privacy@metups.com. We'll respond within 30 days.

7. Security

We use HTTPS encryption, Supabase Row Level Security (so users can only see their own private data), JWT authentication tokens, and regular security reviews. Passwords are hashed — we cannot read them.

8. Children

Metups is not intended for users under 18. We do not knowingly collect data from children. Contact privacy@metups.com if you believe a child has registered.

9. Changes to This Policy

We'll notify you of material changes by email and in-app notice. The "Last updated" date above reflects the most recent version.

10. Contact & Complaints

Privacy: privacy@metups.com
DPO: dpo@metups.com
Address: [COMPANY ADDRESS], Zimbabwe

If unsatisfied, you may complain to your local data protection authority (South Africa: inforeg.org.za).