Black Bay
Privacy Policy
Last updated 4 October 2026
The short version. We collect what it takes to run a members-only community: your email, your profile, and what you post and send. We do not show ads, we do not use tracking or advertising SDKs, and we do not sell your information. You can delete your account and everything in it from inside the app.
What we collect
- Account details: your email address, which we use to send sign-in codes, and your username.
- Profile details you choose to add: display name, bio, location (free text, as precise or vague as you like) and profile photo.
- What you create and do: photos, posts, comments, likes, who you follow, listings (including prices and item details), listings you save, direct messages, sales you record and confirm, vouches, reports you file, and the accounts you block. We also count views on listings.
- Membership status: your tier, whether it is active, and when it renews. Apple or Google takes the payment; we never see your card or bank details.
- Notification token: if you turn on notifications, a push token for your device so we can deliver them.
- Technical logs: our hosting provider records IP addresses and request details for security and to keep the service running.
We do not collect your precise location, your contacts, or your device's advertising identifier.
How we use it
- To run Black Bay: sign you in, show your content to other members, deliver your messages, and send the notifications you have turned on.
- To decide what you can access, based on your membership.
- To keep members safe. Posts, comments, listings and direct messages are screened automatically when they are written, for prohibited items, hateful language, threats and common scam language. Anything flagged, and anything another member reports, including a direct message, can be read by our moderators.
- To answer you when you contact us, and to enforce our Terms of Use and Community Rules.
- To meet legal obligations.
Who can see it
- Anyone signed in can see your profile and trading record. Members can also see your posts, comments and listings. Members you have blocked, and who have blocked you, see none of it.
- The member you are messaging sees your messages, and moderators may see them as described above.
- People who are not signed in see nothing.
Service providers
We use a small number of companies to run Black Bay. They process data on our behalf and only for that purpose:
- Supabase: database, sign-in, photo storage and server functions. Data is stored in the United States.
- RevenueCat: keeps track of your subscription status using the App Store's or Google Play's purchase records and your Black Bay account ID (not your name or email).
- Apple: processes App Store payments and delivers push notifications to iPhones.
- Google: processes Google Play payments and delivers push notifications to Android phones, through Firebase Cloud Messaging.
- Expo: relays push notifications to Apple and Google.
- Our email provider: delivers sign-in codes.
We do not sell or rent personal information, and we do not share it for advertising. We will disclose information if the law requires it, or where it is necessary to protect someone's safety.
Keeping and deleting your data
We keep your information while your account exists. To delete it, open Settings → Account → Delete account. This permanently deletes your account, profile, posts, comments, listings and messages straight away. Copies may remain in encrypted backups for up to 30 days until they are overwritten. If you no longer have the app, you can request deletion by email.
Deleting your account does not cancel your subscription; cancel that in your Apple ID settings or in Google Play.
Your choices and rights
- Edit your profile at any time in the app.
- Turn notifications on or off per type in Settings → Notifications, or in your phone's settings.
- Block any member.
- Email us to request a copy of your data, or to correct or delete it. Depending on where you live, you may have further rights under local law, and we will honour them.
Security
Data is encrypted in transit. Access is enforced in the database itself, so members can read only what they are allowed to, and photos are served through links that expire.
Age
Black Bay is for adults aged 18 and over. We do not knowingly collect information from anyone younger. If you believe a minor has an account, tell us and we will delete it.
Changes
If we change this policy in a significant way, we will tell you by email or in the app before the change takes effect.
Contact
Privacy questions and requests: support@makhaira.org.