Privacy Policy

Last Updated: October 9, 2026

1. Information We Collect

Information you provide:

  • Name
  • Email address
  • Date of birth (used for age verification; not displayed publicly)
  • Profile photo
  • Listings, descriptions, and photos
  • Messages sent through the Service

    • Technical information:

  • Device identifiers
  • IP address (used for approximate location — see Section 1a)
  • Usage logs
  • Notification tokens
  • Crash reports

    • Community information:

  • Group memberships
  • User connections

    • 1a. Location Data

    We use your IP address to determine your approximate city and region purely for internal analytics and to help us understand and improve the Service. This location data is never used to connect you with other users, groups, or communities — who you're connected to is based entirely on the friends and Groups you set up yourself. This is coarse, city-level location only — we do not access your device's GPS or precise location. Location data is collected at most once per day when you open the app, and is permanently deleted when you delete your account. We use a third-party IP geolocation service to determine this approximate location; your IP address is sent to that service to retrieve it.

    2. How We Use Information

    Information is used to:

  • Operate and maintain the Service
  • Enable listings and messaging
  • Improve performance and features
  • Detect fraud or abuse
  • Conduct analytics and research
  • Promote the Service, as described in Section 2a

    • 2a. Use of Listings in Marketing

    Under the Terms of Service, PassItOwn may use listing photos and item descriptions you post to promote the Service — for example, in advertising, social media posts, app store screenshots, or press materials. This means a listing you shared only with your friends or Groups could appear publicly in our marketing. When we do this:

  • We may crop, resize, or edit photos, and we will blur or remove anything that could identify a person, address, or license plate.
  • We will not identify you by name or show your profile photo or likeness without your separate, explicit permission.
  • We will never use your private messages, email address, phone number, date of birth, location data, friend list, friend nicknames, group names, or group memberships in marketing.

    • 3. Analytics and Tracking

    We may use analytics technologies to understand how users interact with the Service and improve performance.

    4. Advertising

    PassItOwn may display advertising or sponsored content. Aggregated or anonymized data may be shared with advertising partners to measure advertising performance.

    5. Information Sharing

    Information may be shared with:

  • Service providers such as hosting and analytics companies
  • Legal authorities when required by law
  • Parties involved in a merger, acquisition, or asset sale

    • 6. Data Retention

    Information is retained while your account is active. When you delete your account, we keep it hidden for 30 days so you can change your mind, and then permanently delete it. After deletion, we may keep limited information where needed to comply with legal obligations, respond to valid legal requests, prevent fraud or abuse, or resolve disputes. This includes:

  • Reports and feedback you submitted, kept without your account identifier
  • If other users reported your account, a minimal record (your email address, display name, sign-up and deletion dates, and report references) kept for up to 2 years
  • Messages you sent, which remain visible to the people you sent them to, shown with your display name
  • Information we are legally required to preserve, for example under a valid preservation request, subpoena, or court order, kept for as long as the legal requirement applies

    • Deleted information may also remain in our backups for up to 30 days after it is deleted, until those backups are overwritten or expire.

    7. Account Deletion

    You can delete your account from Settings in the app or on the website, or by contacting support. Your account and listings are hidden right away and permanently deleted after 30 days; you can restore your account by signing in during that time. Deletion removes your listings, photos, the groups you own, invitations, and your profile information, except as described in Section 6. Messages you sent are not deleted: they remain visible to the people you sent them to, shown with your display name, and those people can no longer reply. Deletion may be delayed where we are legally required to preserve information.

    8. Community Visibility

    Within the app, listings and profiles are visible to the friends and Groups you share them with. Listing photos and descriptions may also be used in PassItOwn marketing as described in Section 2a.

    9. Security

    Industry-standard safeguards including encrypted connections and access controls are used to protect data.

    10. Children's Privacy

    PassItOwn is intended for use by adults 18 and older and is not directed to children. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from a user under 18, we will take steps to delete it.

    11. U.S. State Privacy Rights

    If you live in a state with a comprehensive privacy law — including California (CCPA/CPRA), Colorado (CPA), Connecticut (CTDPA), Virginia (VCDPA), Utah (UCPA), and others — you may have the right to:

  • Know what personal information we have collected about you
  • Access a copy of that information
  • Correct inaccurate information
  • Delete your personal information
  • Opt out of the use of your information for targeted advertising

    • We do not sell personal information. To exercise any of these rights, contact us at support@passitown.app. We will respond within the time required by applicable law, and we will not discriminate against you for exercising any of these rights.

    12. Canadian Privacy Rights

    If you are located in Canada, this section applies to you in addition to the rest of this Policy. We process personal information about Canadian users in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, where applicable, Quebec's Act respecting the protection of personal information in the private sector (Law 25).

    You have the right to access the personal information we hold about you and to challenge its accuracy. You may withdraw consent to certain uses of your information at any time, subject to legal or contractual restrictions.

    Quebec residents: our privacy officer, responsible for overseeing our compliance with applicable privacy laws, can be reached at support@passitown.app.

    To exercise any of these rights or ask questions about how your information is handled, contact us at support@passitown.app.

    13. Mexican Privacy Rights (Aviso de Privacidad Simplificado)

    If you are located in Mexico, we process your personal information in accordance with Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP). PassItOwn is the party responsible ("responsable") for your personal information.

    You have the right to:

  • Access the personal information we hold about you
  • Rectify inaccurate or outdated information
  • Cancel (delete) your personal information, subject to any legal retention requirements
  • Object to certain uses of your personal information

    • These are known as your ARCO rights. To exercise them, contact us at support@passitown.app. We will respond within 20 business days, as required by Mexican law.

    Your information is transferred to and processed in the United States, as described in the International Users section below. By using the Service, you consent to this transfer.

    14. International Users

    PassItOwn is based in the United States, and your information is transferred to and processed here. This may not offer the same level of protection as the laws of your country or province. By using the Service, you consent to this transfer.

    15. Data Breach Notification

    Users will be notified of data breaches as required by applicable law.

    16. Policy Changes

    Policies may be updated periodically. For material changes, we will notify you in the app and ask you to accept the updated Policy.

    17. Contact

    support@passitown.app