Data Safety

Last updated: May 2026

How We Handle Your Data

PopWanted takes data privacy and security seriously. This page explains what data we collect, how we use it, and how we protect it, in compliance with UK GDPR and the Data Protection Act 2018.

Data We Collect

  • Account Information: Email address, display name, username, and profile photo
  • Transaction Data: Want listings, contact requests, and trade history
  • Communication Data: Messages sent through our in-app messaging system
  • Device Information: Device type, operating system, and app version for push notifications
  • Payment Data: Processed securely by Stripe — we do not store full card details

Data We Do Not Collect

  • Precise location data (GPS)
  • Contacts or phone book data
  • Health or biometric data
  • Browsing history outside of PopWanted

How We Use Your Data

  • To provide and improve our marketplace services
  • To connect buyers and sellers for trades
  • To send notifications about messages and activity
  • To process subscription payments
  • To ensure platform safety and prevent fraud

Data Sharing

We do not sell your personal data. We share data only:

  • With service providers necessary to operate the platform (Supabase, Stripe, Resend)
  • When required by law or to protect our legal rights
  • With your consent (e.g., sharing your profile with other users you interact with)

Data Security

  • All data is encrypted in transit (TLS) and at rest
  • Authentication via Google OAuth or email/password with Supabase Auth
  • Row-Level Security (RLS) on our database ensures users can only access their own data
  • Regular security reviews and updates

Data Retention and Deletion

We retain your data for as long as your account is active. You can request deletion of your account and associated data by contacting [email protected]. Data will be deleted within 30 days of request, except where we are required to retain it by law.

Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Object to processing of your data
  • Data portability
  • Withdraw consent at any time

To exercise these rights, contact [email protected].