Privacy

Your email and name, from Apple or Google if you signed in that way, or from what you typed when you joined. Sign in with Apple can hide your real address behind a relay one; that relay is all we ever see, and it works exactly as well.

A city and country, worked out from your connection when you first arrive. It is a guess, it is shown to you so you can correct it, and it is never more precise than a city.

Your handle and photo, and for sellers, everything on the storefront.

Your contact channels — the Facebook, Viber or WhatsApp details you give so a seller can reach you about an order.

What you have done here: orders, follows, likes, and the posts you made.

Where to send a notification, if you turn them on in the app — an address Apple gives us for your phone, and nothing else about the device. Turning notifications off forgets it.

Anything you tell us — a report about a post, a shop or a buyer, a question, and our replies. The whole conversation is kept so you can read it back, and a report about somebody is shown to the people here who answer it.

Who you have blocked, which is only ever used to keep you apart. It is never shown to the person blocked and never used for anything else.

A sign-in log, with the time, the method, and the city your connection came from. It is how we spot somebody trying to get into an account that is not theirs.

There is no password on your account. You sign in with Apple, with Google, or with a code sent to your email.

A seller sees your name, photo, city and contact channels the moment you order from them, and again if you follow them. That is deliberate — an order they cannot ask a question about is worse than no order — but it is worth knowing before you tap Order.

Anybody can see a storefront, including its posts, its city and the socials on it. Storefronts are public pages with public links.

Nobody can see who you follow. A buyer never sees another seller's follower list, a seller never sees a buyer's following list, and only you see your own. The counts on a storefront are counts, and a seller can switch even those off.

sukimo does not sell anything about you and does not run advertising. It is stored and served by a small number of companies doing a specific job:

Supabase stores the database and the photographs. Vercel hosts and serves the site, and reports the country and city of a connection. Apple and Google handle sign-in, if you use them; Apple also handles plan payments made in the iPhone app. Resend sends the emails.

Anthropic receives a photograph only when a seller asks for a description to be written for it — never otherwise, and never anything about a buyer. It is used to write that one description and is not used to train anything.

Nothing else receives your data.

For as long as you have an account. A post you delete is kept for seven days so you can undo it, then removed for good.

Orders outlive the posts they were placed against, on purpose: an order is a record of something two people did, and the other person has a copy of that record too.

Sign-ins are the exception, and worth saying plainly. Every attempt to sign in — successful or not — is written down with the address it came from, so that someone trying passwords against your account can be spotted and stopped. Those records are kept apart from your account and last ninety days, after which the address, the device and the email address are erased from them for good. What is left cannot be traced to anybody: a date, a country, and whether it worked.

If you delete your account, that erasing happens straight away rather than in ninety days.

A report about somebody outlives the account that made it, without your name on it. A report and what was done about it is how the same thing happening twice is recognised, and deleting that would make this a place where nothing is remembered.

Delete your account from Settings, at the bottom, under the sign-out button. Your name, email, number, address, photo and handle are removed, every device is signed out, and your handle goes back so somebody else can use it. It cannot be undone.

Past orders stay on the other person's books, without your details on them. A sale is a record of something two people did, and the other person's copy is not ours to take away — so what is left is an order that no longer says who placed it.

It waits if an order is unfinished. A parcel still on its way has to arrive first — and the screen says which one, so nobody is refused without being told why. A plan you have paid for holds nothing up; the days simply go with the shop.

You can also change nearly all of it yourself — name, handle, photo, city, country and contact channels are all editable from your settings at any time.

This describes what sukimo actually does today, checked against the code rather than written from a template. It has not been reviewed by a lawyer, and it is not a substitute for one in a jurisdiction that requires specific wording.