Privacy

Your email and name, from Google or from what you typed when you joined.

A city and country, worked out from your connection when you first arrive. It is a guess, it is shown to you so you can correct it, and it is never more precise than a city.

Your handle and photo, and for sellers, everything on the storefront.

Your contact channels — the Facebook, Viber or WhatsApp details you give so a seller can reach you about an order.

What you have done here: orders, follows, likes, and the posts you made.

A sign-in log, with the time, the method, and the city your connection came from. It is how we spot somebody trying to get into an account that is not theirs.

There is no password anywhere, because sukimo does not use them.

A seller sees your name, photo, city and contact channels the moment you order from them, and again if you follow them. That is deliberate — an order they cannot ask a question about is worse than no order — but it is worth knowing before you tap Order.

Anybody can see a storefront, including its posts, its city and the socials on it. Storefronts are public pages with public links.

Nobody can see who you follow. A buyer never sees another seller's follower list, a seller never sees a buyer's following list, and only you see your own. The counts on a storefront are counts, and a seller can switch even those off.

sukimo does not sell anything about you and does not run advertising. It is stored and served by a small number of companies doing a specific job:

Supabase stores the database and the photographs. Vercel hosts and serves the site, and reports the country and city of a connection. Google handles sign-in, if you use it. Resend sends the emails.

Anthropic receives a photograph only when a seller asks for a description to be written for it — never otherwise, and never anything about a buyer. It is used to write that one description and is not used to train anything.

Nothing else receives your data.

For as long as you have an account. A post you delete is kept for seven days so you can undo it, then removed for good.

Orders outlive the posts they were placed against, on purpose: an order is a record of something two people did, and the other person has a copy of that record too.

Sign-ins are the exception, and worth saying plainly. Every attempt to sign in — successful or not — is written down with the address it came from, so that someone trying passwords against your account can be spotted and stopped. Those records are kept apart from your account and last ninety days, after which the address, the device and the email address are erased from them for good. What is left cannot be traced to anybody: a date, a country, and whether it worked.

If you delete your account, that erasing happens straight away rather than in ninety days.

Delete your account from Settings, at the bottom, under the sign-out button. Your name, email, number, address, photo and handle are removed, every device is signed out, and your handle goes back so somebody else can use it. It cannot be undone.

Past orders stay on the other person's books, without your details on them. A sale is a record of something two people did, and the other person's copy is not ours to take away — so what is left is an order that no longer says who placed it.

It waits if something is unfinished. An order still on its way, or a shop with a paid plan still running, has to be settled first — and the screen says which, so nobody is refused without being told why.

You can also change nearly all of it yourself — name, handle, photo, city, country and contact channels are all editable from your settings at any time.

This describes what sukimo actually does today, checked against the code rather than written from a template. It has not been reviewed by a lawyer, and it is not a substitute for one in a jurisdiction that requires specific wording.