Privacy Policy

Effective Date: August 31, 2026 · Last Updated: November 11, 2026

This Privacy Policy describes how Bun Technologies LLC, a California limited liability company doing business as MarketBun ("MarketBun", "we", "us"), collects, uses, and shares information about you when you use the MarketBun app. By using the Service, you agree to the practices described here.

    The short version: We collect only what we need to run the app. We don't sell your data or show you ads. You can delete your account at any time, and your data goes with it, apart from the few records listed in section 4.
  

1. Information We Collect

1.1 Information You Provide

Category	Examples
Account info	Email address, username, password (stored as a secure hash — we never see it)
Profile info	Display name, bio, profile photo, city/region (text you enter — not GPS)
Yard sale listings	Title, description, street address, dates, times, photos you upload
Single-item listings	Title, description, price or Free, category, condition, photos you upload, and the city and ZIP code you enter. We place the listing at a spot within about 1 km of that area, not at your address
Messages	Messages you send to other users through the in-app messaging feature
Social actions	Users you follow, users you block, items you save
Reports and support requests	What you report and why; for a support request (Help & support in the app, which includes bug reports), what kind of request it is, what you and we write in it, any screenshots you add, and your app version, phone model, iOS version and language
Purchases	If you buy a Boost or MarketBun Pro: what you bought, when, the price and currency, Apple's transaction ID, which listing a Boost is on, and whether your subscription is active and when it renews or ends. Apple handles the payment — we never receive your card or bank details
Fill in with AI (optional)	If you tap "Fill in with AI" while writing a listing: up to 4 of that listing's photos and the condition you picked, sent to get a suggested title, category, description and price. We also record that you agreed to use it, and each time you use it (when, how many photos, whether it worked and how long it took), so we can count your monthly AI drafts. We don't keep the photos you sent or the suggestion unless you post the listing
Sales and ratings	If you mark a single item as sold, you can tell us which of the people who messaged you about it bought it; we record that sale between the two of you. Either of you can then rate the other, within 3 days: 1 to 5 stars and, if you like, tags from a fixed list (such as "On time" or "As described"). We record the stars, the tags, when, and which sale. There are no written reviews

1.2 Automatically Collected Information

Device info: Device type, OS, unique device identifiers
Usage data: Screens viewed, features used, time spent, actions taken, and how many sales were shown near you (a count only; it does not include your location) — collected without your name, email or account ID, and not linked to your account. Each event also carries an approximate city and postal area (estimated when the event is received, not from your device's GPS)
Listing views: When you open a listing, an item in it, or directions to it, we count it so the seller can see how many times it was viewed. Sellers see numbers only, never who. To keep the counts fair (a seller's own visits don't count, and one person can't flood a listing) we note your account (or, if you are not signed in, a random ID your phone or browser makes up, not linked to you) for that day only; overnight we keep just the day's totals and delete the rest
Promoted listings: For each Boost or Pro promotion, how many times the listing was shown in the Promoted spots and how many times it was tapped, so the seller can see how it did. These are counts only; we do not record who saw or tapped it
Log data: IP address, access times, crash reports
Push token: A device token to send push notifications (if you grant permission)
Location (only if you allow it): While the app is open, it uses your phone's location to show listings near you, show how far away they are, plan a route between sales, and fill in your city and ZIP code when you post. To find listings near you, your location is sent to our server with the search; it is used to answer that search and is not saved to your account or kept anywhere else, except that our server's request logs keep the area searched, rounded to about a kilometer, for as long as other log data (see Data Retention). MarketBun never uses your location in the background. If you don't allow location, the app shows listings around a default area instead, or around a town or ZIP code you choose ("Your area"). That choice is kept on your phone only and is used the same way: sent with a search to answer it, and not saved to your account. You can turn location off at any time in your phone's settings

1.3 From Third Parties

If you register via Apple or Google, we receive basic profile info (typically your name and email) as permitted by your settings with that provider.

2. How We Use Your Information

Provide the Service — create accounts, display listings, deliver messages, enable app features
Personalize your experience — show relevant local sales
Suggest listing details — only when you tap "Fill in with AI" (see Anthropic in section 3.2)
Communicate with you — send account emails, push notifications you opt into, and service announcements
Safety and security — detect fraud, enforce our Terms, protect users
Improve the Service — analyze usage, fix bugs, develop new features
Legal compliance — respond to lawful requests and fulfill legal obligations

We do not use your information to serve third-party ads, and we do not sell your data.

3. How We Share Your Information

3.1 With Other Users (By Design)

The following is visible to other users as part of the app's core functionality:

Your username, profile photo, bio, and city/region on your public profile
Your listings, including their photos and description. For a yard sale, signed-in users see the street address you entered in the app, because buyers need it to find the sale. For a single item, everyone sees only your city and an area about 1 km wide, never your address
On marketbun.com, a shared sale's page is public to anyone with the link, and it also lists a few other upcoming sales nearby. Those web pages show the title, dates, photos and city of a sale, plus an approximate area on a map, but never the street address. The exact address is only shown inside the app.
Your username and photo in messaging conversations
Whether you are a MarketBun Pro member (a "Pro" badge by your name), and a "Promoted" label on a listing you have Boosted or promoted with Pro
Your rating: the average of the stars you have been given, how many ratings that is, and how often each tag was given. Other users see these totals, not who gave which rating. The person you traded with sees the rating you gave them, and you see theirs, once you have both rated or the 3 days have passed; until then neither of you sees the other's
If a seller names you as the buyer of their item, you get a notification asking you to rate the sale. Nobody else is told who bought an item

Other users can't see your email address, your settings (such as notifications and language), or anything about your purchases beyond the Pro badge and the Promoted label. You control what personal information you include in your profile and listings.

3.2 With Service Providers

Provider	Purpose
Supabase	Database, authentication, and file storage
Expo / EAS	App builds and app updates, and delivery of push notifications: a notification's text (for example, who sent you a message and its first words) passes through Expo's push service on its way to Apple
Apple / Google	App Store distribution and push notifications. Apple also takes the payment when you buy a Boost or MarketBun Pro
PostHog	Product analytics — which screens and features are used. Events are not linked to your account. They carry an anonymous device identifier, an approximate city, and basic device details (model, OS version, app version)
OpenStreetMap	The approximate-area map on shared sale pages at marketbun.com. Your browser loads the map images directly from OpenStreetMap, which receives your IP address as part of that request. Nothing about your account is sent
RevenueCat	Confirms with Apple what you bought and whether your MarketBun Pro subscription is active, so we can turn the feature on for your account. It receives your MarketBun account ID (a random code, not your name or email), what you bought and Apple's purchase records, and your phone's region and currency setting. It does not collect your location or device diagnostics, and it never receives your card details
Resend	Delivery of account emails, such as your sign-up confirmation code and password resets
hCaptcha	Checks that a real person, not an automated program, is signing in, signing up or resetting a password. The check receives your IP address and information about your device and how you interact with the check
Cloudflare	Hosts the marketbun.com website, including shared sale pages. Like any web host, it receives your IP address and browser details when you visit the website
Anthropic	Writes the suggested title, category, description and price when you tap "Fill in with AI". It receives up to 4 photos of the listing you are writing and the condition you picked, sent from our server; it does not receive your name, email, account ID or IP address. Under its commercial terms, Anthropic does not use them to train its AI models. It may keep them for a limited time under its own data-retention policy, and then deletes them

These providers may use your data only to provide their services to us, under their agreements with us. OpenStreetMap is different: we have no agreement with it, because your browser asks it for the map directly, and it handles your IP address under its own privacy policy.

3.3 For Legal Reasons

We may disclose your information to comply with applicable law, respond to legal process, enforce our Terms, or protect the rights and safety of MarketBun, our users, or the public.

3.4 Business Transfers

If MarketBun is involved in a merger or acquisition, your information may be transferred. We will notify you before that happens.

4. Data Retention

Account and profile data — retained until you delete your account. If you start signing up with an email address and never enter the confirmation code, the unfinished account is deleted automatically 7 days after the last code we sent; you can sign up again at any time
Sale listings — the text of a listing (title, description, dates, items) is retained until you delete it or your account. Photos of a sale and of its highlighted items are deleted automatically 30 days after the sale's last day; deleting a listing or an item deletes its photos straight away
Single-item listings — a single item stays listed for 30 days and can be renewed. If it expires and is not renewed, or you mark it sold, the listing, its photos and the saves on it are deleted automatically 7 days later. Messages about it stay in your conversations
Messages — kept until the conversation is deleted. If you delete your account, the people you were talking with keep their copy of your conversations, including your messages, shown as from a deleted account, without your name or photo. A conversation is deleted for good once nobody in it can see it any more: when both people have deleted their accounts, or when one has and the other deletes the conversation
Sales and ratings — if neither of you rates a sale within the 3 days, our record of who the item was sold to is deleted within two days after that. If either of you rates, that record is kept for as long as a rating from the sale is. A rating you received is kept until you delete your account, and is deleted with it. A rating you gave is kept after you delete your account, with no link to you, so that the other person's average does not change because you left
Fill in with AI — the record of each use, and of your agreement to use it, is kept until you delete your account. We don't store the photos you sent or the AI's suggestion; if you post the listing, it is kept like any other listing
Log and diagnostic data — typically retained for up to 90 days
Listing views — which account or random ID opened which listing is deleted the next morning (Pacific time); only daily totals per listing are kept, and they are deleted with the listing
Analytics events — kept by PostHog for up to 1 year on our current plan (up to 7 years if we move to a paid PostHog plan), then deleted automatically
Purchase records — kept for as long as tax and accounting law requires us to keep them (generally up to 7 years), including after you delete your account; once your account is deleted they are no longer linked to a profile. The Promoted counts for a Boost or Pro promotion are kept with that purchase record. RevenueCat keeps its own record of your purchases under your account ID for the same purposes
After account deletion — data is deleted or anonymized within 30 days, except where required by law and except as described for purchase records and for ratings you gave above, and for safety reports, moderation records and security flags below, and except your messages in other people's copies of your conversations (see Messages above). Analytics events are not linked to your account, so account deletion does not reach them; they contain no name, email or account ID, and expire as described above
Safety reports — when someone reports a listing, a profile or a conversation, we keep the report together with a copy of what was reported, taken at the moment it was reported: the listing's text, items and photo links; the profile's username, bio and location; or the conversation's messages (up to the last 100). If an account is reported, we also keep a one-way hash of its email address. We keep this even if the listing, the conversation or either account is later deleted, we use it only to review the report, investigate abuse and prevent fraud on the Service, and we delete it 1 year after the report is resolved
Support requests and bug reports — if you contact us through Help & support in the app (including to report a bug), we keep the conversation: what you and we wrote, any screenshots you added, and the app version, phone model, iOS version and language attached when you opened it. Only you and we can see it, and we use it only to help you and to find and fix problems. We delete a request and its screenshots 1 year after it is resolved, or when you delete your account
Moderation records — if we act on an account under our rules (a warning, a hidden or removed listing or item, a pause on messaging, a suspension or a ban), we keep a record of what we did, when, which rule was involved, and our internal notes. We use it only to enforce our rules consistently and to prevent abuse. While a restriction is still in force (for example, a ban), we keep its record for as long as it applies; otherwise we delete these records 1 year after the most recent action on the account, including when the account has been deleted
Security flags — to protect the Service, we automatically check our server's request logs and activity on the Service for signs of abuse, such as automated scraping, attempts to reach data without permission, password guessing or spam. When something matches, we record a flag with the account or IP address involved and the counts and request details that triggered it, for us to review. Nothing is decided automatically: a person looks at every flag before any action is taken. We delete a flag 90 days after it was last seen, or 1 year after we acted on it

5. Security

We use reasonable safeguards including TLS/HTTPS encryption for data in transit, industry-standard password hashing, and restricted access controls. However, no method of electronic storage is 100% secure. If you believe your account has been compromised, contact us immediately at support@marketbun.com.

6. Children's Privacy

The Service is intended for users who are 18 years of age or older. We do not knowingly collect information from anyone under 18. If we learn that an account belongs to someone under 18, we will close it promptly and delete its data, apart from records we are required to keep (see section 4). If you believe a minor has used the Service, please contact us at support@marketbun.com.

7. Selling, Sharing, and Do Not Track

We do not sell your personal information, and we do not share it for advertising or cross-context behavioral advertising. We do not track you across third-party websites or services.

Some browsers offer a "Do Not Track" signal. There is no common industry standard for how these signals should be handled, and MarketBun does not currently respond to them.

You can review and update your information, or delete your account entirely, at any time from within the app — see "Your Choices" below. If you have a question about the information associated with your account, email support@marketbun.com.

8. Your Choices

Edit profile info — anytime through "Edit Profile" in the app
Delete your account — permanently, through "Delete Account" in the app
Push notifications — opt out through your device's system settings at any time
Subscriptions — manage or cancel MarketBun Pro in your Apple ID's subscription settings (on iPhone: Settings › your name › Subscriptions). Deleting your MarketBun account does not cancel it
Location — allow or turn off location access at any time in your phone's settings. MarketBun uses it only while the app is open (see section 1.2), never in the background. You also choose what location appears in your listings
Fill in with AI — optional. Nothing is sent to Anthropic unless you tap the button, and you can always write a listing yourself

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we'll update the "Last Updated" date above. For material changes, we'll notify you through the app or by email at least 30 days before they take effect. Continued use after the effective date means you accept the updated policy.

10. Contact Us

MarketBun
Operated by Bun Technologies LLC
Email: support@marketbun.com
Website: marketbun.com