Privacy Policy

Last updated: October 6, 2026

Geerho, LLC (“Geerho,” “we,” “us,” or “our”) operates the Geerho mobile app and the website at which this policy is posted (together, the “Services”): a marketplace for buying and selling new and used items, listing property for rent, lease, or sale, and connecting with other people. This Privacy Policy explains what personal information we collect, how we use and share it, how long we keep it, and the rights and choices you have, wherever you live.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

1. Information we collect

Information you provide

• Account information. When you sign in with Google, GitHub, or Apple, we receive your name, email address, profile photo, and a unique account identifier from that provider. If you use Apple’s “Hide My Email,” we receive a private relay address instead of your email.
• Profile information. Your username, display name, profile photo, bio, and city.
• Listings. Titles, descriptions, prices, categories, condition, photos, and the approximate location of items you list, and the address or approximate location of property you list.
• Social content. Posts, comments, follows, and other content you share.
• Messages. Messages you send to and receive from other users through the Services.
• Purchases and shipping addresses. When you use Buy Now, we store your purchase request, the delivery method, an optional note, and, for shipped items, the shipping address and phone number you enter. If you choose “Save on this iPhone,” the address is also kept in your device's Keychain, not on our servers.
• Reviews. Star ratings, written reviews, and replies about buyers and sellers after a sale.
• Identity verification. To sell or send messages, you verify your identity with our verification provider, Didit. Didit collects images of your government ID, a selfie or short video, and the details on your ID (such as your name, date of birth, and document number), and compares your face with your ID photo. Geerho receives only the result (for example, verified or not verified) and the date. We do not receive or store your ID images or face data.
• Homes and tours. If you list a home, its street address. For homes for sale it is shown publicly; for rentals it is shown only to you, Geerho moderators, and people whose tour you confirm. If you request or answer a tour, the times suggested, your note, your time zone, and the result.
• Services and jobs. The kind of work, rates or budget, how far you travel or whether you work remotely, years of experience, and dates for jobs. When you request a quote or respond to a job, your request, response, and any price are shared with the other person in your conversation, and the person who posted a job sees whether each responder holds a license for that work.
• Professional licenses. If you add a professional license (for example, as a real estate agent or an electrician), we collect your profession, license number, the issuer, your full name as it appears on the license, your date of birth, the expiry date, your phone number, and, if you choose, your email, business name, notes, and a photo or PDF of the license. Geerho moderators compare these with the issuer’s public records. Other users see only your name as licensed, profession, license number, issuer, business name, and where the license was issued. Your date of birth, contact details, and license photo are visible only to you and Geerho moderators.
• Reports and support requests. Information you give us when you report content or contact Geerho Support in the app: the reason, your message, the transaction you choose (its transaction ID and title), and any photos, screenshots, voice recordings, files, or links you attach. Voice recordings are made only when you tap record.
• Rentals. Rental requests and bookings (dates, rates, deposit, status, and your device’s time zone, used for due dates and reminders) and the condition photos you or the other person take at pickup and return. These are visible only to the owner, the renter, and Geerho’s moderators, and are deleted when either account is deleted. When you request a rental, your approximate area is checked against the owner’s lending radius; it is not saved with the request.
• Watched items. The listings you choose to watch, and alerts about them. Sellers and other users see only how many people are watching, never who.
• Recently viewed. The app keeps a list of listings you opened recently on your iPhone only, to show them on the Home screen. It is never sent to Geerho; clear it anytime from Home.
• Bids. The auctions you bid on, your maximum bids, and when you bid. Other users see bid amounts with your username masked (for example, “t***m”); your maximum bid stays private unless you are outbid.
• Fee plan. Whether you are a Founding Seller (and your founding number) or otherwise exempt from fees.

Information collected automatically

• Location. If you allow it, your device’s location while you use the app, to show nearby listings. If you don’t, you can enter a ZIP or postal code instead. Location attached to item listings is coarsened before it is saved, and we remove location data embedded in photos before upload.
• Device and usage information. Device model, operating system, app version, language, diagnostic and crash data, and how you use features of the Services.
• Network information. IP address, collected by our hosting providers when you use the Services.
• Last active time. The date and time you last opened the app while signed in, used to count how many people use Geerho. We do not record which listings or pages you view.

Our Services do not use third-party advertising or cross-site tracking cookies. If you sign in on our website, your browser’s local storage keeps your sign-in session so you stay signed in; signing out removes it.

2. How we use information and our legal bases

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, we rely on the legal bases shown below. Elsewhere, we use information for the same purposes.

Where we rely on consent, you can withdraw it at any time, for example by turning off location access in iOS Settings.

3. How we share information

• With other users. Your public profile, listings, and posts are visible to other users and, for active listings, to visitors who are not signed in. Messages are visible to the people in that conversation. Support requests and their attachments are visible only to you and Geerho’s moderators. When you request to buy an item, your shipping address and phone number (if any) are shared only with that item's seller. Reviews you write are published on the other person's profile with your username, once they review you too or 14 days pass.
• With service providers who process information on our behalf under contract, including Supabase, Inc. (database, authentication, and file storage), GitHub, Inc. (website hosting), Didit (identity verification), and the sign-in provider you choose (Google LLC, GitHub, Inc., or Apple Inc.).
• For legal reasons, when we believe in good faith that disclosure is required by law or legal process, or is necessary to protect the rights, property, or safety of our users, the public, or Geerho.
• In a business transfer, such as a merger, acquisition, or sale of assets, subject to this policy.
• With your direction or consent.

We do not sell personal information, share it for cross-context behavioral advertising, or allow third parties to track you across apps and websites.

4. How long we keep information

When you delete your account, we delete your account and the content associated with it, except where we must keep information to comply with law, resolve disputes, prevent fraud, or enforce our agreements. Backups are overwritten in the normal course of operations.

5. Your choices

• Delete your account at any time in the app (Profile → Settings → Delete Account).
• Edit or delete your profile, listings, and posts in the app.
• Location: turn device location on or off in iOS Settings.
• Block or report other users from their profile or a conversation.
• Privacy requests: contact Geerho Support in the app and choose the reason “Privacy request,” or write to us at the address below.

6. California privacy rights

This section applies to California residents and supplements the rest of this policy, as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), and the California Online Privacy Protection Act (“CalOPPA”).

Notice at collection

In the past 12 months we collected the categories of personal information below, from you, your device, and your chosen sign-in provider, for the business purposes in section 2, and retained them as described in section 4.

Sensitive personal information. We use precise geolocation, account log-in credentials, and the government ID and biometric information processed by Didit only to provide the Services you request and to keep them safe (verifying identity and preventing fraud), as permitted by the CCPA, and not to infer characteristics about you.

Sale and sharing. We do not sell or share personal information as those terms are defined in the CCPA, and we have no actual knowledge of selling or sharing the personal information of consumers under 16.

Your rights

• Right to know and access the personal information we collected about you, its sources, the purposes, and the categories of recipients.
• Right to delete personal information we collected from you, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing. We do not sell or share, so there is nothing to opt out of, but you may still submit a request.
• Right to limit use of sensitive personal information. We already limit it to permitted purposes.
• Right to non-discrimination for exercising any of these rights.

How to exercise your rights. Submit a request through Contact Support in the app (reason “Privacy request”), email support@geerho.com, or write to us at the mailing address below. Requests made in the app while signed in are already linked to your account; otherwise we will verify your identity by matching information you provide with information in your account. We respond within 45 days, and may extend that by another 45 days when reasonably necessary, with notice. You may use an authorized agent; we may ask the agent for signed permission and ask you to verify your identity directly.

Global Privacy Control and Do Not Track. Because we do not sell or share personal information or track you across sites, browser “Do Not Track” and Global Privacy Control signals do not change how we handle your information. We treat a Global Privacy Control signal as a valid opt-out request where the law requires.

Shine the Light (Cal. Civ. Code § 1798.83). We do not disclose personal information to third parties for their own direct marketing purposes.

Biometric information

Before verification starts, we ask for your consent in the app. Didit uses face geometry only to confirm that your selfie matches your ID and that you are a real person. Neither Geerho nor Didit sells, leases, trades, or otherwise profits from biometric information. It is permanently destroyed when the purpose of the check has been satisfied, and in any case within 3 years of your last interaction with Geerho, unless the law requires otherwise. This notice is intended to meet biometric privacy laws including the Illinois Biometric Information Privacy Act, Texas Business and Commerce Code § 503.001, and Washington RCW 19.375.

7. Other U.S. state privacy rights

Residents of other states with comprehensive privacy laws, including Colorado, Connecticut, Delaware, Oregon, Texas, Utah, and Virginia, may have rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of sale, targeted advertising, and certain profiling. We do not sell personal information, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects. To make a request, use the methods in section 6. If we deny your request, you may appeal by replying to our decision with the subject “Appeal”; if your appeal is denied, you may contact your state attorney general.

8. EEA, UK, and Switzerland

Geerho, LLC is the controller of your personal information. Under the EU and UK General Data Protection Regulation and the Swiss Federal Act on Data Protection, you have the right to:

• access your personal information and receive a copy;
• correct inaccurate information;
• erase your information;
• restrict or object to processing, including processing based on legitimate interests;
• receive your information in a portable format;
• withdraw consent at any time, without affecting earlier processing;
• lodge a complaint with your local data protection authority.

We respond to requests within one month, which may be extended by two further months for complex requests. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

9. Other countries

Depending on where you live, including Canada, Brazil, Australia, Japan, and other countries with data protection laws, you may have similar rights to access, correct, and delete your personal information and to complain to a regulator. Contact us to exercise them; we will respond as your local law requires.

10. International data transfers

Geerho is operated from the United States, and our service providers may process information in the United States and other countries. When we transfer personal information from the EEA, the UK, or Switzerland to countries that have not been found to provide adequate protection, we use safeguards approved by those jurisdictions, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.

11. Children

The Services are only for people 18 and older. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA and UK). If you believe a child has given us personal information, contact us and we will delete it.

12. Security

We protect personal information with administrative, technical, and physical safeguards, including encrypted connections, database access rules that limit each user to their own private data, and storage of sign-in credentials in your device’s secure Keychain. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects you, we will notify you as the law requires.

13. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new “Last updated” date, and if the changes are material, we will notify you in the app or by email before they take effect.

14. Contact us