Privacy Policy

1. Who We Are and Scope

• Controller: Main and 38th LLC, 1136 W 6th St, #73, Los Angeles, CA 90017, USA; hello@mainand38th.com.

• Service: My Hitlist iOS app, iMessage extension, and web pages where listings may be viewed and deep links open the app to make offers.

• Audience/Eligibility: The Service is intended for individuals 13+ (or the age of digital consent in your jurisdiction, if higher). We do not knowingly collect information from children under 13.

2. Information We Collect

We collect information you provide, information we get automatically from your use of the Service, and information from service providers we rely on to operate the Service.

A. Information You Provide

• Account and Authentication:

Sign-in with Apple: identifier and the email Apple provides to us (which may be a private relay address).

Phone number (for OTP/SMS verification via Twilio).

• Profile and Settings (optional): display name, profile photo, username (auto‑generated at signup; you may change it), contact information, payment handles (e.g., Venmo username), and location preference you set for default listing locations.

• User Content: photos, videos, text, and metadata contained in your listings and related communications. Content may be visible to others as described in the Service.

• Reports/Support: information you include when you report a listing/user or contact support.

B. Information Collected Automatically

• Device and app: device model, operating system, app version, language, and settings.

• Identifiers: Apple Push Notification token and other device/app identifiers necessary to deliver features (e.g., sign‑in tokens, session IDs).

• Network and logs: IP address, timestamps, request/response logs, diagnostic and crash data.

• Web: our listing pages are primarily read‑only; we currently do not set cookies for analytics. Standard web server logs may be collected.

C. Information from Service Providers

We use vendors to operate the Service. Examples include Supabase, Vercel, Dub, Twilio, and Apple. These examples are non‑exhaustive and may change.

3. How We Use Information

• Provide the Service: authenticate users; create and manage accounts; host/store listings; display and share listings (including previews on the web and deep links); deliver push notifications; operate the iMessage extension.

• Safety and Moderation: detect, investigate, and address prohibited content and conduct; handle reports; enforce our Terms.

• Support and Communications: respond to inquiries; send important service or policy updates.

• Improve and Debug: monitor performance; fix bugs; maintain security; analyze aggregate usage to improve features. (No ads.)

• Legal and Compliance: comply with law, legal process, and enforce agreements.

4. How We Share Information

We do not sell personal information and do not share it for cross‑context behavioral advertising.

We share information with:

• Service Providers: companies that host, store, transmit, or process data for us (e.g., Supabase/AWS, Vercel, Dub, Twilio, Apple). They may only use data to provide services to us and are bound by contracts and confidentiality obligations.

• Other users: information you choose to include in listings or your profile may be visible to others as part of the Service.

• Law Enforcement and Legal Process: when we receive a valid legal request or when disclosure is necessary to prevent harm, protect rights, or comply with law.

• Business Transfers: as part of a merger, acquisition, financing, or sale of assets, subject to this Policy.

5. International Users; Data Transfers

We store and process data in the United States. If you access the Service from outside the U.S., your information will be transferred to and processed in the U.S., where data protection laws may differ from those in your country. By using the Service, you understand this transfer. Where required, we use appropriate safeguards (e.g., contractual commitments with service providers).

6. Retention and Deletion

• Account Deletion: When you delete your account, we delete your active account data, listings, and associated media from our primary systems within 24 hours. Deleted data is not recoverable.

• Backups and Logs: Due to system design and legal requirements, limited backups and logs may persist for a short period and are automatically overwritten on a rolling schedule. These are isolated, not used for routine operations, and are secured.

• Legal Holds: We may retain information if reasonably necessary to comply with law, resolve disputes, or enforce agreements.

7. Your Choices and Rights

• Access/Update/Delete: You can access and update most profile information in the app. You can delete your account in‑app or email support@mainand38th.com.

• Push Notifications & SMS: You can manage push settings in your device OS. We use SMS for authentication/operational purposes, not for marketing.

• Region-Specific Rights: Depending on where you live (e.g., California or certain international jurisdictions), you may have rights to request access, deletion, correction, or portability of your personal information, or to limit certain processing. Contact hello@mainand38th.com to exercise rights. We will verify your request and respond as required by law. We do not sell or share personal information as defined by California law.

8. Security

We use reasonable technical and organizational measures to protect information (e.g., encryption in transit, access controls). No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Children's Privacy

We do not knowingly collect or solicit personal information from children under 13. If we learn that a child under 13 has provided personal information, we will delete it. Parents who believe their child provided personal information may contact us at hello@mainand38th.com.

10. Third Party Links

The Service may link to third‑party sites or services. Their privacy practices are governed by their own policies; we are not responsible for them.

11. Changes to this Policy

We may update this Policy from time to time. The "Last Updated" date will reflect the latest changes. If changes are material, we will provide notice in the app and/or by email as required by law. Your continued use after changes take effect means you accept the revised Policy.

Contact

Main and 38th LLC

1136 W 6th St, #73, Los Angeles, CA 90017, USA

Legal Email: hello@mainand38th.com

Support Email: support@mainand38th.com