1. Information We Collect

We collect information you provide directly to us, such as when you create an account, post listings, make requests, or communicate with other users. The types of personal information we collect include:

We also collect information about your use of the platform, including:

• Items you list, borrow, or request
• Messages and communications with other users
• Transaction history and points (Pinchos) activity
• Device information and usage patterns
• Location data (with your permission)

2. Profile Verification Information

To verify your profile and enhance trust within our community, we collect:

• Email Address: Used to verify your email account and send important service communications
• Phone Number: Collected so we can verify that you control the number you provide. When you request phone verification, we send a one-time passcode (OTP) by SMS to that number. By entering your number and tapping Send code, you consent to receive that verification text. Message and data rates may apply. Reply STOP to opt out of verification texts; reply HELP for help
• Credit Card Information: Collected solely for profile verification purposes to establish trust and verify your identity (Trusted verification tier)
• Government ID and selfie (ID Verified tier): When you choose to unlock borrowing for higher-value items, you may complete government ID and selfie verification through our provider Didit. Didit processes your ID document images and selfie (including liveness and face-match checks). Pahincho receives and stores only the verification result (for example, approved or declined status and related session metadata). We do not store your ID photos or selfie images as primary records.

Important: We do not charge your credit card for verification. Your credit card information is securely processed through our payment processor and is used exclusively for identity verification. No charges will be made to your card as part of the verification process. Your payment information is stored securely and handled in accordance with industry standards and applicable payment card industry (PCI) requirements. Phone verification SMS is transactional (account verification only) and is not used for marketing. ID verification through Didit is free to you at this time; Didit may process your ID and selfie solely to complete that check.

Borrow penalties and late returns are handled with pincho collateral, not by charging your saved card. Automatic card charges for penalties are not used at this time. See our Terms of Service for details.

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our services
• Facilitate connections between users
• Process transactions and manage the points (Pinchos) system
• Send notifications about transactions, requests, and important updates
• Verify user profiles and maintain platform security
• Optionally generate draft listing titles and descriptions from item photos you choose to analyze (you can edit or discard these suggestions before posting)
• Communicate with you about our services, including service-related announcements
• Detect, prevent, and address technical issues and fraudulent activity
• Comply with legal obligations

4. Information Sharing

We do not sell, trade, or otherwise transfer your personal information to third parties without your consent, except as described in this policy. We may share information:

• With Other Users: As necessary to facilitate transactions and communications within the platform. This includes your name, profile image, location (city/state), and items you list or request.
• With Service Providers: We may share information with third-party service providers who perform services on our behalf, such as payment processing, SMS delivery for phone verification, government ID and selfie verification (Didit), data storage, analytics, and optional AI-assisted listing features. These providers are contractually obligated to protect your information. We do not share, sell, or rent mobile phone numbers to third parties or affiliates for their own marketing purposes.
• For Legal Reasons: We may disclose information if required by law, court order, or government regulation, or to protect the rights, property, or safety of Pahincho, our users, or others.
• In Case of Business Transfer: If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Storage and Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Secure authentication and access controls
• Regular security assessments and updates
• Compliance with industry standards for payment processing

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

6. Location Information

With your permission, we collect your precise (GPS) location to help you find nearby items and coordinate pickups. Location data helps us:

• Show you items available in your area
• Connect you with nearby users
• Improve search results and recommendations

We only display your city and state to other users — never your exact address or precise coordinates. You can disable location permissions at any time through your device settings, though this may limit certain features of the app.

7. Communications

We may send you service-related communications, including:

• Important updates about your account and transactions
• Notifications about requests, messages, and platform activity
• Changes to our policies or terms of service
• Security alerts and account verification messages
• SMS one-time passcodes when you request phone verification

You may opt out of promotional communications but will continue to receive essential service notifications that are necessary for the functioning of your account and transactions, including phone verification SMS you request. You can stop further verification SMS by replying STOP or by not requesting another code.

8. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes outlined in this policy. We retain information:

• For the duration of your account's active use
• As required by law or for legitimate business purposes
• To resolve disputes and enforce our agreements

You may request deletion of your account and associated data at any time. When you delete your account, we will permanently remove your personal information, profile image, and all associated content as described in Section 9.

9. Account Deletion and Data Removal

You have the right to delete your account at any time through the app settings. When you request account deletion, we will permanently remove:

• Your profile information (first name, last name, email address, and location)
• Your profile image
• All items you have posted
• All requests you have made
• All messages and communications
• All notifications associated with your account
• All wishlists and saved items
• All transaction history and associated data
• Your authentication credentials

Account deletion is permanent and cannot be undone. Once your account is deleted, you will not be able to recover any of your data or content. Some information may be retained for a limited time as required by law or for legitimate business purposes (such as fraud prevention), but will be deleted as soon as legally permissible.

10. Children's Privacy

Our service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

11. Third-Party Services

Our app uses third-party services to operate. We are not responsible for the privacy practices of these third parties, and we encourage you to review their privacy policies. The third-party services we use include:

• Stripe: Payment processing and credit card verification
• Didit: Government ID and selfie verification for the ID Verified borrowing tier. ID document images and selfies (including liveness and face-match checks) are processed by Didit. Pahincho stores only your verification result and related session metadata, not your ID photos. Review Didit’s Verification Privacy Notice for how they handle ID images and biometrics
• Twilio: SMS delivery of phone verification one-time passcodes. Your phone number and message content are shared with Twilio solely to send the OTP you request
• Firebase / Google: Cloud storage, authentication, push notifications, and analytics
• Google Gemini (AI): When you use listing assistance on Post New Item, compressed versions of item photos you select may be sent to Google's Gemini models to suggest a draft title and description. Suggestions are optional; you can edit or ignore them before posting. Photos used for this purpose are processed to generate suggestions and are not used to train our own models.
• Apple: Sign In with Apple authentication (iOS only)

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. For material changes, we may also provide additional notice through the app or via email. Your continued use of the service after any changes constitutes acceptance of the new policy.

13. Your Rights

You have the following rights regarding your personal information:

• Access: You can access and review your personal information through your account settings.
• Update: You can update your personal information at any time through your profile settings.
• Delete: You can request deletion of your account and all associated data at any time.
• Opt-out: You can opt out of promotional communications while still receiving essential service notifications.
• Data Portability: You may request a copy of your data in a portable format.

To exercise these rights, please contact us through the app's support feature or email us at support@pahincho.com.

14. California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA) grants you specific rights regarding your personal information:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you, the sources of that information, our business purpose for collecting it, and the categories of third parties with whom we share it.
• Right to Delete: You may request deletion of personal information we have collected from you, subject to certain exceptions required by law.
• Right to Correct: You may request correction of inaccurate personal information we maintain about you.
• Right to Opt-Out: We do not sell or share your personal information with third parties for advertising purposes.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To submit a CCPA request, contact us at support@pahincho.com or through the app's support feature. We will respond within 45 days. We may need to verify your identity before processing your request.

15. International Users

If you are using our service from outside the United States, please note that your information may be transferred to, stored, and processed in the United States where our servers are located. By using our service, you consent to the transfer of your information to the United States.

16. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Pahincho LLC
San Jose, CA
Email: support@pahincho.com

You can also reach us through the app's support feature for immediate assistance with privacy-related inquiries.

Last updated: July 30, 2026