Privacy policy

Effective 10 November 2026

This policy explains how the folks app and website (“folks”, “we”, “us”) collect, use, share, and protect your information. folks is a community app that lets neighbours borrow and lend everyday items. It applies to everyone who uses folks. If you don’t agree with it, please don’t use folks.

Information we collect

We collect only what we need to run folks:

  • Account & profile: your name, the community (sub-area) you choose, a username, your email address, and — if you create an account with an email and password — a password, which is stored only in a securely hashed form (we never see it in plain text).
  • Google sign-in: if you choose “Continue with Google”, we receive your name, email address, and profile picture from Google to create your account. We do not receive your Google password.
  • Content you create: listings, item photos and descriptions, “Wanted” requests, prices and optional deposits, and the ratings and reviews you leave.
  • Communications: messages you exchange with other members, and borrow requests and bookings you take part in.
  • Notifications: if you turn them on, a push-notification token for your browser or device so we can send you alerts.
  • Technical data: standard information our hosting and infrastructure providers process to operate and secure the service, such as your IP address, device/browser type, and basic log data.

folks is not directed to children. We do not knowingly collect data from anyone under 18.

How we use your information

  • To provide folks — create your account, show listings, and connect borrowers and lenders.
  • To show other members what they need to decide whether to lend or borrow: your name, community, rating, and your listings.
  • To send you notifications (by email and, if enabled, push) when a neighbour requests your item, responds to you, or sends a message, and to send account emails such as sign-in confirmation and password resets.
  • To keep folks safe — verify residents, prevent abuse, and moderate inappropriate content.
  • To maintain, secure, and improve the service.

How we share your information

With other members: your profile (name, community, photo, rating) and your listings and “Wanted” posts are visible to other folks members, and your messages are shared with the neighbour you’re talking to. Your email address and password are never shown to other members.

With service providers who process data only to run folks on our behalf:

  • Supabase — database, account authentication, file storage (for photos), and real-time messaging.
  • Vercel — website and app hosting.
  • Brevo — delivery of our notification and account emails.
  • Google — sign-in, when you choose to log in with Google.
  • Push delivery — your browser or device’s push service (operated by Google or Apple), and, for our mobile app, a push-notification provider, used only to deliver alerts.

We may also disclose information if required by law, or to protect the rights, safety, and security of folks and its members.

We never sell your personal information, and we don’t use it for advertising.

International transfers

Our service providers may store and process your information on servers located outside your country, including in the United States and the European Union. We rely on these providers’ safeguards to protect your data wherever it is processed.

Data retention & deletion

We keep your information for as long as your account is active. You can delete your account and all associated data at any time:

Deletion removes your account, profile, listings, requests, messages, bookings, and notification settings immediately. Residual copies in encrypted backups are purged within 90 days.

Your choices & rights

  • Access and edit your profile details and listings any time in the app.
  • Turn push notifications on or off from the prompt in the app.
  • Request deletion of your account and data (see above).
  • Contact us to access or correct your information.

Security

We protect your data with industry-standard measures: encrypted connections (HTTPS), hashed passwords, and access controls that limit each member to their own data. No method of transmission or storage is 100% secure, but we work to protect your information and review our practices regularly.

Changes & contact

We may update this policy as folks grows. We’ll change the “Effective” date above and post the new version here.

Questions about your privacy, or want your data removed? Email us at dxbfolks@gmail.com.

Back to browsing