Privacy Policy

Effective November 2, 2026

This policy covers your Geerho account, the Geerho app for iPhone, iPad and Android, geerho.com, and the Geerho stickers for Messages, by Geerho Tech LLC (“Geerho,” “we,” “us”). Geerho is a software company. Your Geerho account is the one sign-in for all our apps (iOtomates Resto, iOtomates Wash and, later, Xenpen); each of those apps has its own privacy policy for what you do in it. We don't sell or share your information for advertising, and we don't track you across other apps or websites.

1. Information we collect

Information you provide

• Account information. When you sign in with Apple, Google, or GitHub, we receive your name, email address, profile photo, and a unique account identifier from that provider. If you use Apple's “Hide My Email,” we receive a private relay address instead of your email. If you link more than one sign-in method, we keep the identifier and email each one gives us, so any of them signs you in to the same account.
• Community. Your posts, app reviews, photos, comments, likes, the #topics you use, who you follow and mute, the reports you send, and moderation records about you (the guideline, the reason, any restriction and appeal). Posts, comments and likes are visible to ID-verified members only; photos are stored privately and shown to verified members through short-lived links. Reports are private. Your recent searches stay on your phone.
• Subscriptions. When you run a business in one of our apps, that app tells us the business's name, its Super Admins' Geerho IDs and what the subscription covers (for example 3 locations), so you can pay on geerho.com/billing. Stripe processes the payment and keeps your card details; we keep Stripe's customer and subscription numbers and the status (active, past due, canceled), and tell the app the status so it can stay open.
• Your own domain. If your business connects a domain it owns, the domain and which app and business it belongs to are public (anyone can look it up).
• Milestone level and XP. Your level and the XP you earn: which app and action it came from (for example "Pay for a wash in iOtomates Wash"), an order or event number from that app, and when. Our apps can see your level to show it next to your name; only you see your XP history.
• Geerho Rewards. Your points balance and each change to it: whether points were earned, spent, taken back after a refund, or given back after a cancelled order; the business and app; the payment amount in US dollars; an order or payment number from that app; and when. The app where you pay sends us this. Only you see your points history (on geerho.com and in our apps); a business sees only the points earned and used on orders placed with it.
• My businesses (owners). When you open My businesses on geerho.com, we ask each of our apps for the businesses you own or manage there and their numbers (orders, sales, new and returning customers, regulars, best sellers and come-back reminders). Only your own businesses are fetched, when you look, and they aren't stored in Geerho.
• Sign-in records for our apps. When you choose Continue with Geerho in one of our apps, which app you continued to and when, the one-time codes used to do it (stored only in a scrambled form and deleted within a day), and your sign-in sessions.
• Passkeys. If you add a passkey, our sign-in provider (Supabase) keeps its public key, a name for it, and when it was added and last used. The private key never leaves your device or password manager.
• Two-step verification. If you turn it on, our sign-in provider (Supabase) keeps the secret your authenticator app uses to make codes, and we keep one-way scrambled copies (hashes) of your 10 recovery codes, which can't be turned back into the codes. App Lock with Face ID, Touch ID, or a fingerprint is handled by your phone; your face or fingerprint never leaves your device, and we never receive it.
• Profile information. Your username, display name, profile photo, bio, and city, and who you follow. Your profile photo is one photo for all our apps: you can set or remove it in Geerho or in any of our apps (iOtomates Wash, iOtomates Resto, Xenpen), and it shows in all of them. We save it as a 512 × 512 picture made from the pixels only, so location and other details stored in the original file are removed. When you change your username, we keep a record of your earlier usernames and when they changed, to prevent impersonation and for security.
• Messages. Messages you send to and receive from other members and Geerho Support, including photos, videos, voice messages, files, stickers, and locations you send in a conversation, and reactions (such as ❤️ or 👍) you add to messages. We re-encode photos and videos before sending them, which removes location and other details stored in the original file. A location is shared only when you choose to send one. Photos you share to Geerho from another app wait on your phone until you choose a chat to send them to.
• Identity verification. To send messages to other members, you verify your identity with our verification provider, Didit. Didit collects images of your government ID, a selfie or short video, and the details on your ID (such as your name, date of birth, and document number), and compares your face with your ID photo. Geerho receives the result (for example, verified or not verified) and the date, and keeps only these details from your ID: your legal name, date of birth, the issuing country, the address printed on it (if any), and a keyed, one-way hash of your ID number. We use the hash, and a hash of your name and date of birth, only to make sure each person has one Geerho account; they can't be turned back into your ID number. We do not receive or store your ID images or face data.
• Home address and proof of address. Your home address is private to you and is never shown on your profile. It comes from your ID, or from a change you send with 2 or 3 proofs of address (such as a utility bill, bank statement, or lease). Only Geerho moderators see the proofs, to compare the name and address, and we delete them once the change is approved or declined.
• Account recovery. If you lose access to how you sign in, you can ask Geerho moderators to give your account back. You send a photo of your government ID, two proofs of address, your name and date of birth, and a WhatsApp number; a moderator compares them with what we already hold for the account and has a short WhatsApp video call with you, during which you sign your name three times on blank paper. Only Geerho moderators see these. We tell the account's owner about the request so they can stop it. The documents and the WhatsApp number are deleted when the request ends; a record of the request and of who handled it is kept for security.
• Invitations. If you say who invited you to Geerho, we keep that link between your accounts and show it to both of you (by username, never your ID details). We don't upload your contacts or send invitations for you.
• Reports and support requests. Information you give us when you report a person or a message, or contact Geerho Support in the app: the reason, your message, and any photos, screenshots, voice recordings, files, or links you attach. Voice recordings are made only when you tap record.
• Beta testing (earlier records). If you tested Geerho before October 27, 2026, we keep the tasks you checked off and the Super Admins' reviews. Beta testing is no longer shown in the app, and the silver Beta Tester star no longer shows. Geerho's Super Admins show a gold star.
• Wallet card. If you add your Geerho card to Apple Wallet or Google Wallet, it holds your name, @username, verification status, Founding Member status, when you joined, and a QR code of your public profile. Apple keeps it on your device; for Google Wallet, Geerho sends those details to Google, which stores the card in your Google account. Remove it in Wallet any time.
• Geerho's own business records (owners only). Company Books, the Tax Helper and Tax Forms are used only by Geerho Tech LLC's owners to keep the company's own income, expenses, receipts and tax filings. They may include the names and payment details of people and businesses Geerho Tech LLC pays or is paid by, kept as business records. AI Office, also for the owners only, works from overall totals and our own marketing, without personal information.
• Managing our other apps (Owner Console, Super Admin 1 only). Whoever holds Super Admin seat 1 can look at our other apps from Geerho (today iOtomates Resto) to run them: overall numbers, and each business's name, address, plan, recent order counts, menu, setup, staff and owner (name and email). These details are fetched from that app when they're looked at and aren't stored in Geerho. Geerho keeps a log of each change made there: who made it, when, the business, and the reason or note (for example a price change, a pause with its reason, or an announcement). For iOtomates Resto this includes business applications (what the applicant sent: the business's kind, name and city, a phone, email and website, what they sell, good times for a call, and who applied), calls set with them, approvals and declines, and invites to join (the business name and, if given, an email; the invite link itself isn't kept in the log).

Information collected automatically

• Notifications. If you allow notifications, your device's push token from Apple (Apple Push Notification service) or Google (Firebase Cloud Messaging), so we can send you message, support, and account notifications. If you allow message previews, a message notification carries the sender's name and profile photo link so your phone can show who wrote; replying from the notification sends the message like any other. With previews off, neither is included. Tokens are removed when you sign out or delete your account.
• On your device only. Translation (Apple's translator on iPhone, Google's on-device translator on Android), reply suggestions in chats (Apple Intelligence on iPhone; Google's on-device Smart Reply on Android), and document scanning run on your phone; Geerho doesn't receive the text, picture, or chat for these. Only the result is used, and only if you send it. The Geerho widget keeps your unread-message count on your phone (cleared when you sign out).
• Device and usage information. Device model, operating system, app version, language, and how you use features of the Services. Our apps don't include a crash-reporting or analytics SDK. If you choose to share crash reports or diagnostics with Apple or Google (in your phone's settings), they may share them with us, and we use them only to find and fix problems.
• Network information. IP address, time, and errors, collected by our hosting providers when you use the Services, to keep them secure.
• Last active time. The date and time you last opened the app while signed in, used to count how many people use Geerho.

Our Services do not use third-party advertising, analytics trackers, or cross-site tracking cookies. If you sign in on our website, your browser's local storage keeps your sign-in session so you stay signed in; signing out removes it.

2. How we use information and our legal bases

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, we rely on the legal bases shown below. Elsewhere, we use information for the same purposes.

Where we rely on consent, you can withdraw it at any time, for example by turning off notifications in your phone's settings.

3. How we share information

• With our apps, when you choose to continue to them. That app receives your Geerho user ID, your verified email, your name, your level, and your profile photo, and nothing else. Any of our apps can show your profile photo and level, and can change or remove your photo when you do so in that app. It then keeps its own account for you.
• With other members. Your public profile (username, display name, photo, bio, city, verification badge, and follower counts) is visible to signed-in members, except people you've blocked. Messages, including photos, videos, voice messages, files, stickers, locations, and reactions, are visible to the people in that conversation; attachments are stored privately and can be opened only by them (and by moderators reviewing a report). Support requests and their attachments are visible only to you and Geerho's moderators.
• With service providers who process information on our behalf under contract: Supabase, Inc. (database, authentication, and file storage), GitHub, Inc. (website hosting and sign-in), Didit (identity verification), Anthropic, PBC (scam checks on chat messages that contain risk words, summaries of reports for our moderators, answers to everyday support requests, and, without any personal information, AI Office's weekly report and marketing drafts; under its commercial terms it doesn't use this content to train its models), Apple Inc. (sign-in, push notifications, and Apple Wallet), and Google LLC (sign-in, push notifications through Firebase Cloud Messaging, and Google Wallet).
• For legal reasons, when we believe in good faith that disclosure is required by law or legal process, or is necessary to protect the rights, property, or safety of our members, the public, or Geerho. We respond to government and law enforcement requests only with valid legal process (or in an emergency involving a risk of death or serious injury), and we notify you first unless the law prohibits it; see our Law Enforcement Guidelines.
• In a business transfer, such as a merger, acquisition, or sale of assets, subject to this policy.
• With your direction or consent.

We do not sell personal information, share it for cross-context behavioral advertising, or allow third parties to track you across apps and websites.

4. How long we keep information

When you delete your account, we delete your account and the content associated with it, except where we must keep information to comply with law, resolve disputes, prevent fraud, or enforce our agreements. Backups are overwritten in the normal course of operations.

5. Your choices

• Delete your account at any time in the app (Profile → Settings → Delete Account), or ask Geerho Support to delete it for you (or email support@geerho.com from your account's email). Step-by-step help: geerho.com/delete-account.html. Deleting your Geerho account doesn't delete your accounts inside our other apps; delete those in each app (for example, iOtomates Resto: Settings → Delete account). A Geerho Super Admin can also delete an account, for example an abandoned test account; it's logged, and the same rules apply as when you delete it yourself.
• Edit your profile, and delete your messages, in the app.
• Notifications: turn them or message previews off in Profile → Settings → Notifications & Sounds, or in your phone's settings.
• Two-step verification, passkeys, and App Lock: turn them on or off in Profile → Settings → Security.
• Sign out on one device in the app, or everywhere on your account page at geerho.com.
• Block or report other members from their profile or a conversation.
• Privacy requests: contact Geerho Support in the app and choose the reason “Privacy request,” or write to us at the address below.

6. California privacy rights

This section applies to California residents and supplements the rest of this policy, as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), and the California Online Privacy Protection Act (“CalOPPA”).

Notice at collection

We collect the categories of personal information below, from you, your device, and your chosen sign-in provider, for the business purposes in section 2, and retain them as described in section 4.

Sensitive personal information. We use account log-in credentials, the contents of your messages, and the government ID and biometric information processed by Didit only to provide the Services you request and to keep them safe (verifying identity and preventing fraud), as permitted by the CCPA, and not to infer characteristics about you.

Sale and sharing. We do not sell or share personal information as those terms are defined in the CCPA, and we have no actual knowledge of selling or sharing the personal information of consumers under 16.

Your rights

• Right to know and access the personal information we collected about you, its sources, the purposes, and the categories of recipients.
• Right to delete personal information we collected from you, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing. We do not sell or share, so there is nothing to opt out of, but you may still submit a request.
• Right to limit use of sensitive personal information. We already limit it to permitted purposes.
• Right to non-discrimination for exercising any of these rights.

How to exercise your rights. Submit a request through Contact Support in the app (reason “Privacy request”), email support@geerho.com with the subject “Privacy request,” or write to us at the mailing address below. Requests made in the app while signed in are already linked to your account; otherwise we will verify your identity by matching information you provide with information in your account. We respond within 45 days, and may extend that by another 45 days when reasonably necessary, with notice. You may use an authorized agent; we may ask the agent for signed permission and ask you to verify your identity directly.

Global Privacy Control and Do Not Track. Because we do not sell or share personal information or track you across sites, browser “Do Not Track” and Global Privacy Control signals do not change how we handle your information. We treat a Global Privacy Control signal as a valid opt-out request where the law requires.

Shine the Light (Cal. Civ. Code § 1798.83). We do not disclose personal information to third parties for their own direct marketing purposes.

Biometric information

Before verification starts, we ask for your consent in the app. Didit uses face geometry only to confirm that your selfie matches your ID and that you are a real person. Neither Geerho nor Didit sells, leases, trades, or otherwise profits from biometric information. It is permanently destroyed when the purpose of the check has been satisfied, and in any case within 3 years of your last interaction with Geerho, unless the law requires otherwise. This notice is intended to meet biometric privacy laws including the Illinois Biometric Information Privacy Act, Texas Business and Commerce Code § 503.001, and Washington RCW 19.375.

7. Other U.S. state privacy rights

Residents of other states with comprehensive privacy laws, including Colorado, Connecticut, Delaware, Oregon, Texas, Utah, and Virginia, may have rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of sale, targeted advertising, and certain profiling. We do not sell personal information, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects. To make a request, use the methods in section 6. If we deny your request, you may appeal by replying to our decision with the subject “Appeal”; if your appeal is denied, you may contact your state attorney general.

8. EEA, UK, and Switzerland

Geerho Tech LLC is the controller of your personal information. Under the EU and UK General Data Protection Regulation and the Swiss Federal Act on Data Protection, you have the right to:

• access your personal information and receive a copy;
• correct inaccurate information;
• erase your information;
• restrict or object to processing, including processing based on legitimate interests;
• receive your information in a portable format;
• withdraw consent at any time, without affecting earlier processing;
• lodge a complaint with your local data protection authority.

We respond to requests within one month, which may be extended by two further months for complex requests. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

9. Other countries

Depending on where you live, including the Philippines, Canada, Brazil, Australia, Japan, and other countries with data protection laws, you may have similar rights to access, correct, and delete your personal information and to complain to a regulator. Contact us to exercise them; we will respond as your local law requires.

10. International data transfers

Geerho is operated from the United States, and our service providers may process information in the United States and other countries. When we transfer personal information from the EEA, the UK, or Switzerland to countries that have not been found to provide adequate protection, we use safeguards approved by those jurisdictions, such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum.

11. The Geerho marketplace app (before October 27, 2026)

Geerho used to be a marketplace app. Information from that app (such as listings, purchases, and payments) is covered by its own policy at old.geerho.com/privacy.html. You can still delete that account in that app (Profile → Settings → Delete Account) or by emailing us.

12. Children

The Geerho app is only for people 18 and older. We do not knowingly collect personal information from anyone under 18. If you believe a child has given us personal information, contact us and we will delete it.

13. Security

We protect personal information with administrative, technical, and physical safeguards, including encrypted connections, database access rules that limit each member to their own private data, storage of sign-in credentials in your device's secure Keychain, one-time, short-lived sign-in codes for our apps, optional passkeys and two-step verification with an authenticator app, and optional App Lock with your phone's Face ID, Touch ID, or fingerprint. Geerho staff (moderators and Super Admins) are asked to use two-step verification. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects you, we will notify you as the law requires.

14. Changes to this policy

We may update this policy from time to time. We will post the new version here and in the app with a new effective date, and if the changes are material, we will notify you in the app or by email before they take effect.

15. Contact us