Privacy

Privacy is a design principle here, not an afterthought. We collect as little as we reasonably can, and delete what we no longer need.

What's public

Your username, your listings (type, category, description, approximate location) and any reports. These can be moderated. Choose a pseudonym — no real name is needed or wanted.

What stays private

Your email is used only to log in and recover your account — it is never shown to anyone. Your conversations are visible only to you and the person you're talking to.

Location

We never track your location in the background. Every listing's place is one you deliberately drop on the map.

For sensitive listings (like accommodation or welfare) you can mark the location approximate: we shift the point by a random 100–400 m and store only the shifted point, so the exact spot never reaches our database. Share the precise place in chat when you're ready.

What gets deleted, and when

  • Listings disappear from the map the moment they expire. A listing posted with no end date stays until its owner takes it down.
  • Exact locations and descriptions of long-finished listings are wiped after 30 days. This clock starts at expiry, so a listing with no end date is never wiped on a schedule.
  • Declined contact requests are deleted after 7 days.
  • Inactive conversations are deleted after 90 days.
  • Resolved reports are deleted after 90 days.

You can delete your whole account at any time from your profile — it removes your profile, listings and conversations for good.

Messaging

In-app messages are private to the two of you and protected by database access rules, but they are not yet end-to-end encrypted. Until they are, treat them as private-but-not-secret, and consider a secure messenger for anything especially sensitive. End-to-end encryption is on our roadmap.

A photo you send in a chat is stored privately — unlike listing photos it has no public address, and only you and the person you're talking to can open it. It is deleted with the conversation.

No popularity machinery

There are no likes, followers or star ratings. Trust is meant to come from account age, completed exchanges and community references — never from popularity.

Crash reports

When the app crashes, a technical report (the error, the screen it happened on, browser and app version) can be sent to our own error tracker so we can fix it. It contains no account details, messages or locations, and your IP address is not recorded.

Your data

You can export a copy of your data or delete your account from your profile.

Why we build it this way is explained in about Jāla.

Back to the map