StuffidyBack to Home

Privacy Policy

Stuffidy

Last Updated: July 25, 2026

Stuffidy is a peer-to-peer marketplace that allows users to buy, sell, and rent items. This Privacy Policy explains how we collect, use, disclose, retain, and protect personal information when you use Stuffidy, including the mobile application, the website located at www.stuffidy.com, related marketplace features, and related support and communications services.

By using Stuffidy, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the service.

1. Who We Are

Stuffidy is operated as a peer-to-peer marketplace that allows users to buy, sell and rent items. For privacy or support questions, or to submit an account deletion request, you may contact:

Support Email: support@stuffidy.com

2. Scope of This Privacy Policy

This Privacy Policy applies to personal information we collect through Stuffidy, including:

  • The Stuffidy mobile application for iOS and Android;
  • The Stuffidy website and related web services;
  • User accounts, listings, photos, chats, reviews, ratings, public profiles, purchases, rentals, and marketplace transactions;
  • Customer support, security, moderation, and fraud-prevention functions; and
  • Transactional and marketing communications, including email, SMS/MMS, push notifications, and in-app messages.

This Privacy Policy does not apply to third-party services that are governed by their own privacy notices.

3. Personal Information We Collect

We collect personal information you provide to us, information generated through your use of Stuffidy, and certain information collected by service providers that help us operate the platform.

3.1. Account and Contact Information

We collect information such as your name, username, account ID, email address, phone number, mailing address, and other account profile information when you register for and use Stuffidy.

3.2 Payment and Transaction Information

Stuffidy facilitates marketplace transactions, rentals, payouts, and certain promoted listing payments. Payment card and bank details are handled by Stripe or applicable in-app purchase providers and are not accessed directly by Stuffidy for payment processing purposes. We may receive and store transaction-related information such as payment status, transaction amounts, purchase or rental details, payout information, and related records needed to operate the marketplace, provide support, prevent fraud, and comply with legal obligations.

3.3. Location Information

Stuffidy uses location information to provide locally relevant marketplace features. Users may manually provide ZIP code information. Users may also choose to allow the app to detect precise device location automatically. If a user does not grant location permission, certain automatic location features may be unavailable, but manual ZIP code entry may still be used where supported.

3.4. Photos, Videos, and Listing Content

We collect photos, videos, listing descriptions, titles, and related content that users upload or submit to create and maintain marketplace listings.

3.5. Messages, Chats, and Communications

We collect messages, chat content, support communications, transaction updates, account notices, and related communication records in connection with the operation of the platform.

3.6. User-Generated Content

Stuffidy collects and displays user-generated content, including listings, images, descriptions, public profile information, reviews, ratings, and marketplace interactions.

3.7. Usage, Device, Log, and Diagnostic Information

We may collect device, session, log, diagnostic, crash, and usage information to maintain, secure, troubleshoot, improve, and monitor Stuffidy.

3.8. Moderation and Safety Information

Stuffidy uses backend moderation tools to review listing content for policy violations, including possible mismatches between listing photos, titles, and descriptions. This review may involve analysis of uploaded content and related listing metadata.

4. How We Collect Personal Information

We collect personal information in the following ways:

  • Directly from you, when you create an account, complete your profile, list an item, upload media, send a message, complete a transaction, request support, or otherwise use Stuffidy;
  • Automatically through your use of Stuffidy, including through logs, diagnostics, session data, usage metrics, and service monitoring tools;
  • Through device permissions, such as location, camera, photo or media library, and notifications permissions; and
  • Through service providers, including payment, communications, hosting, storage, analytics, and security vendors that support the platform.

Stuffidy does not use cross-app behavioral tracking for advertising and does not use App Tracking Transparency for targeted advertising.

5. App Permissions

Stuffidy may request access to certain features and permissions on your mobile device to enable specific functions within the app. All requested permissions are optional, and you can manage or revoke them at any time through your device settings:

  • Location (Optional)

    • Purpose: Automatically detects your location to display locally relevant listings and content.
    • If Denied: You can still enter your ZIP code manually, though automatic location-based features will be unavailable.
  • Camera (Optional)

    • Purpose: Allows you to take photos of items directly within the app to create or update listings.
    • If Denied: You can continue using all other features, but taking photos directly within the app will be unavailable.
  • Photos or Media Library (Optional)

    • Purpose: Allows you to select and upload existing photos or media from your device to create listings.
    • If Denied: You can continue using all other features, but uploading existing photos from your device library will be unavailable.
  • Notifications (Optional)

    • Purpose: Sends push notifications regarding account activity, transaction updates, messaging alerts, and service notifications.
    • If Denied: You will not receive push updates on your device screen (though relevant alerts will still appear inside the app).

Where available, Stuffidy uses privacy-preserving system alternatives—such as modern iOS/Android system photo pickers - to access only the specific files you select rather than requiring broad media library permissions.

6. How We Use Personal Information

We use personal information for the following purposes:

6.1. Account Creation and Management

To create accounts, authenticate users, manage profiles, verify email addresses and phone numbers, and administer platform access.

6.2. Marketplace Operations

To enable users to list items, browse listings, communicate with each other, complete purchases, rentals, payouts, promoted listings, and related marketplace functions.

6.3. Payments and Financial Operations

To support payment processing, in-app purchases, payouts, refunds, accounting, fraud prevention, and related compliance functions.

6.4. Communications

To send transactional emails, customer support responses, account notices, service messages, marketing emails, SMS/MMS messages, push notifications, and related communications.

6.5. Personalization and Local Relevance

To show locally relevant content and improve marketplace relevance based on location information, listing activity, search behavior, and usage patterns.

6.6. Safety, Security, and Fraud Prevention

To protect users and the platform, detect abuse, enforce our policies, maintain logs, investigate incidents, and preserve platform integrity.

6.7. Content Moderation

To review listings for possible policy violations or mismatches between uploaded images and listing text. Stuffidy uses a multimodal AI model solely for backend moderation support. AI flags are routed to a human moderator queue, and the model does not make final automated enforcement decisions.

7. How We Disclose Personal Information

We may disclose personal information in the following circumstances:

7.1. Service Providers and Infrastructure Vendors

We may disclose personal information to third-party vendors and service providers that support Stuffidy's operations, including providers used for:

  • Identity Verification: Email and phone verification services;
  • Payment Processing: Payment processing, payouts, webhooks, and secure transaction handling;
  • Communication Delivery: Transactional and marketing email delivery services;
  • In-App Advertising: Non-personalized contextual advertising networks;
  • In-App Purchases: Mobile app store payment and subscription management functionality;
  • Analytics & Insights: Analytics platforms that gather product usage insights (configured to avoid collecting personally identifiable information);
  • System Monitoring: Crash reporting and technical error monitoring tools configured to avoid collecting directly identifying information where practicable;
  • Database Infrastructure: Cloud database hosting and secure data storage services; and
  • Media Management: Cloud media storage, asset management, and content delivery networks (CDNs).

7.2. Other Users and Public Content

Because Stuffidy is a marketplace, information you choose to publish through listings, public profiles, reviews, ratings, and similar features may be visible to other users or the public.

7.3. Advertising

Stuffidy displays non-personalized contextual advertisements. Stuffidy does not use behavioral tracking across third-party apps or websites for targeted advertising, does not use App Tracking Transparency for targeted advertising, and does not share personal information for cross-context behavioral advertising based on current practices.

7.4 Legal, Safety, and Compliance Disclosures

We may disclose personal information where necessary to comply with law, legal process, government requests, law enforcement requests, fraud investigations, safety concerns, enforcement of our terms, or protection of the rights, property, or safety of Stuffidy, our users, or others.

7.5. Business Transfers

We may disclose or transfer personal information in connection with a merger, acquisition, reorganization, financing, sale of assets, bankruptcy, or similar transaction.

8. Retention and Deletion

We retain personal information only for as long as necessary to provide our Services, fulfill the operational purposes described in this Privacy Policy, and comply with applicable legal obligations.

  • Active Account Data & Media: While your account remains active, Stuffidy retains your primary account information (such as your name, email address, phone number, and security credentials) as well as any item listings and photos you publish. If you request account deletion, your primary account data, listings, and associated media will be permanently deleted from our primary production databases within 30 days.

  • Messages and Chat Logs: Communications and chat history are retained while your account is active. Upon account deletion, messages and chat logs are anonymized rather than destroyed. This ensures that the remaining party in a conversation retains access to their transaction context and message history without exposing your personal identifying information.

  • Financial and Transaction Records: Transaction history, payment details, and related financial records are retained for seven (7) years—both while your account is active and following account deletion. This retention period is strictly required for legal, tax, accounting, regulatory compliance, and audit purposes.

  • System Logs and Database Backups: System and server logs are maintained on a rolling 30-to-90-day schedule and overwritten automatically. Database backups are maintained on a 30-day rolling snapshot rotation. When data is deleted from our active production systems, it will fully purge from backup archives as those snapshots are overwritten in the normal course of business within 30 days.

  • Fraud Prevention and Security Records: To protect our platform and community from bad actors, certain security and fraud prevention data—such as cryptographic hashes of phone numbers or device identifiers and records of account bans—may be retained indefinitely in anonymized form. This information is used solely to prevent banned users from re-creating accounts or continuing malicious activity.

  • Requesting Account Deletion: You may request the deletion of your account and associated personal data at any time directly through the Stuffidy app settings or by contacting our privacy team at support@stuffidy.com. Upon account deletion, limited information may still be retained where strictly necessary for legal compliance, tax obligations, fraud prevention, dispute resolution, or the enforcement of our legal agreements.

9. Account Deletion and Privacy Requests

Users can request deletion of their Stuffidy account and associated data through the in-app settings menu. Users may also email support@stuffidy.com to request account deletion.

Users may also contact Stuffidy regarding access, correction, deletion, portability, or other privacy rights that may apply under U.S. law. Stuffidy generally aims to process privacy requests within 30 days, subject to extensions or exceptions permitted by applicable law.

We may take reasonable steps to verify the identity and authority of the requesting person before fulfilling a request. Depending on the nature of the request, verification may include confirming account access, matching account records, confirming contact details, or requesting additional information reasonably necessary to authenticate the request. If an authorized agent submits a request on a user's behalf, we may require proof of authority and may still require the user to verify their identity directly where permitted by law.

If we decline to take action on a privacy request, and applicable law provides an appeal right, the requester may appeal by replying to our decision notice or by emailing support@stuffidy.com with the subject line Privacy Rights Appeal within a reasonable period stated in the notice.

10. Your Choices

Depending on your location and applicable law, you may have the ability to:

  • Access or review certain personal information;
  • Correct or update account information;
  • Request deletion of your account and associated data;
  • Request a copy of certain personal information in a portable format where applicable;
  • Opt out of marketing emails using the unsubscribe link in the email;
  • Opt out of SMS/MMS marketing by following the instructions in the message;
  • Disable push notifications in your device or app settings; and
  • Adjust device permissions, including location, camera, and photo access.

Stuffidy currently uses non-personalized contextual advertising and does not sell personal information or share personal information for cross-context behavioral advertising based on current practices. If Stuffidy later engages in processing that requires an opt-out right under applicable law, we will provide the corresponding mechanism required by law.

If you disable certain permissions or delete certain information, some features may not function as intended.

11. Marketing Communications

Stuffidy may send transactional emails, marketing emails, SMS/MMS messages, push notifications, and in-app messages. Transactional and service-related messages may continue as needed to operate the platform and fulfill marketplace functions.

Users are responsible for keeping their contact information current. Consent to receive marketing or promotional messages may be withdrawn using the methods described in the message or within account settings where available.

12. Security

Stuffidy uses administrative, technical, and organizational safeguards designed to protect personal information.

These safeguards include:

  • Encryption in transit using TLS 1.2+ for communications between mobile clients, APIs, and third-party services;
  • Encryption at rest for databases and cloud media storage, including AES-256 volume encryption for supported systems;
  • Password hashing using bcrypt;
  • Hardware-backed secure storage for mobile session tokens, such as iOS Keychain and Android Keystore;
  • Mandatory administrative multi-factor authentication across administrative platforms and dashboards;
  • Role-based access controls and signed short-lived JSON Web Tokens for system access;
  • Least-privilege and network isolation controls, including IP allowlisting and VPC-based protections for production systems;
  • Security monitoring and incident response procedures; and
  • Vendor and SDK review procedures designed to evaluate material changes in data access, permissions, and disclosed practices before release.

Stuffidy maintains a documented incident response process that includes detection, containment, eradication and recovery, and notification procedures. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

13. Operational Enforcement, Trust and Safety, and Investigations

To protect users, the marketplace, Stuffidy may review listings, accounts, reports, transaction activity, support communications, and related platform records for trust and safety, fraud prevention, policy enforcement, payment integrity, and legal compliance purposes.

Stuffidy may use a combination of automated signals, human review, moderation queues, transaction monitoring, audit logs, payment processor alerts, and user reports to investigate suspected misconduct or policy violations. Where appropriate, Stuffidy may preserve relevant records, restrict visibility of content, remove listings, place holds on transactions or payouts, disable promoted content, limit account functionality, or suspend or terminate accounts.

Stuffidy may also cooperate with payment processors, app platforms, service providers, insurers, legal authorities, and law enforcement where reasonably necessary to investigate fraud, abuse, safety issues, chargebacks, policy violations, or legal claims.

14. Children and Age Restrictions

Stuffidy is intended for users 18 years of age or older. Stuffidy is not directed to children under 13 and does not knowingly collect personal information from children under 13. If we learn that personal information from a child under 13 has been collected without appropriate consent, we will take reasonable steps to delete it.

15. U.S. State Privacy Rights

Residents of certain U.S. states may have privacy rights under applicable law. Depending on the user's state of residence and applicable legal thresholds, those rights may include the right to:

  • Confirm whether we process personal information;
  • Access personal information;
  • Correct inaccuracies in personal information;
  • Delete personal information, subject to legal exceptions;
  • Obtain a copy of certain personal information in a portable format;
  • Opt out of the sale of personal information, targeted advertising, or certain profiling activities where those rights apply; and
  • Appeal a decision we make about a privacy request.

Stuffidy currently uses non-personalized contextual advertising and does not sell personal information or share personal information for cross-context behavioral advertising based on current practices. If our practices change in a way that creates additional opt-out rights, we will update this Privacy Policy and provide any rights mechanism required by applicable law.

Users may submit privacy-rights requests by emailing support@stuffidy.com or, where available, through in-app account tools. We may deny a request in whole or in part where an exemption or exception applies, where we cannot verify the request, or where the law does not require the requested action.

We will not discriminate against users for exercising applicable privacy rights, except to the extent differential treatment is permitted by law and reasonably related to the value or functionality of the service.

16. International Users and Future Expansion

Stuffidy is expected to launch in the United States only. Support for other countries or regions may be added later.

If Stuffidy expands outside the United States, we may publish supplemental or region-specific privacy notices, update in-app and app-store disclosures, modify consent or notice flows, implement additional data-transfer or localization measures, designate additional contact channels or representatives where required, and offer additional privacy rights or request mechanisms where required by applicable law.

Until such region-specific notices are published, Stuffidy is intended only for jurisdictions where its current disclosures and operations are made available.

17. Analytics, SDKs, and Tracking Technologies

Stuffidy uses software development kits (SDKs), application programming interfaces (APIs), and similar supporting technologies to operate the platform, process payments, deliver in-app purchases, monitor system health, support non-targeted advertising, and understand product usage.

Based on current practices:

  • Contextual Advertising SDKs: Used solely for non-personalized contextual advertising;
  • In-App Purchase Frameworks: Used to support mobile in-app purchase and subscription functionality;
  • Payment Processing SDKs & APIs: Used to support payment processing, payouts, webhooks, and related transaction services;
  • Analytics & Observability SDKs: Configured for product usage analytics in a manner intended to avoid collecting directly identifying information through those tools where practicable; and
  • Crash Reporting & Error Monitoring SDKs: Configured for technical error monitoring and crash diagnostics in a manner intended to avoid collecting directly identifying information through those tools where practicable.

Stuffidy does not use App Tracking Transparency (ATT) for targeted advertising and does not track users across third-party apps or websites for behavioral advertising purposes. If an SDK, permissions configuration, or data flow materially changes, we will review the change, update this Privacy Policy if needed, and update any corresponding app store disclosures prior to release or as otherwise required by law.

18. App Store and Google Play Disclosures

Stuffidy's Apple App Privacy disclosures, Google Play Data Safety responses, permissions disclosures, and other platform-facing privacy statements are intended to reflect the data practices described in this Privacy Policy.

Based on current practices, those platform disclosures are intended to remain aligned with:

  • Account and contact information used for account creation, support, and communications;
  • User-generated content such as listings, photos, messages, reviews, and marketplace interactions;
  • Payment, purchase, payout, and transaction-related information processed through Stripe or applicable in-app purchase tools;
  • Optional location information used for local marketplace relevance;
  • Diagnostic, crash, and product-usage information processed through approved observability tools; and
  • Non-personalized contextual advertising rather than cross-app behavioral advertising.

If Stuffidy changes its vendor stack, SDK configuration, permissions usage, data collection behavior, ad configuration, deletion workflow, or other platform-relevant practices, we will update the applicable app-store disclosures, policy language, and platform-facing notices as needed. If an app platform requires a separate public deletion page, support URL, or externally accessible privacy-rights resource, we will publish or update that resource to maintain platform compliance.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make changes, we will revise the "Last Updated" date above and may provide additional notice where appropriate.

20. Contact Us

If you have questions about this Privacy Policy or Stuffidy's privacy practices, please contact us at:

Support and Privacy Email: support@stuffidy.com

Stuffidy
Privacy PolicyTerms of Service

© 2026 Stuffidy. All rights reserved.