This describes exactly what CarXMarket stores, why, and who can see it. It is written against what the app actually does rather than from a template, so it should match what you observe.
What we collect
| Data | When | Why |
|---|---|---|
| Email address | You create an account | It is your sign-in identity and how we send password resets. |
| Name, phone number, contact email | You fill in seller details | Shown to buyers so they can reach you about a car. |
| Vehicle details and your answers to the twenty disclosure questions | You post a listing | They are the listing, and they produce its trust score. |
| Photos you choose | You post a listing | Displayed on your listing. |
| ZIP code, and the city, state and coordinates it resolves to | You post a listing | So buyers can find cars near them. |
| Which listings you save, and which you have viewed or reported | You use the app | To show your saved cars, count views for sellers, and act on reports. |
We do not collect your device location, contacts, advertising identifier, or browsing behaviour outside the app. There is no analytics SDK, no advertising SDK and no third-party tracker in CarXMarket.
Photos
CarXMarket uses Apple's system photo picker. You choose specific images and only those are handed to the app — it has no access to the rest of your photo library, which is why the app never asks for photo library permission.
ZIP codes and location
When you type a ZIP code, it is sent to Apple's geocoding service to resolve into a place and coordinates. That is a request to Apple, handled under Apple's privacy policy. CarXMarket never reads your device's GPS location.
The coordinates stored on a listing are those of the ZIP code centre, not of your address. A listing identifies a town, not a house.
What other people can see
A published listing is public. Anyone using the app can see its vehicle details, your twenty answers, the photos, the trust score, and the town and state.
Your name and phone number appear on your listings. Your contact email is shown only once it has been verified as belonging to your account — until then it is withheld from buyers entirely.
Your email address as a sign-in identity, your saved cars, and any reports you file are never shown to other users.
Where it is stored
Data is stored with Supabase, our database and file-storage provider, on servers in the United States. Access is restricted by row-level security so that accounts can only read and write what they are entitled to.
Account emails — confirmations and password resets — are delivered by Resend, our email provider. They receive your email address in order to deliver that message.
Deleting your account
Account tab → Delete my account. This permanently removes your profile, your listings and their photos, your saved cars, and your sign-in account. It cannot be undone, and we keep no copy.
You can also delete an individual listing at any time from the Sell tab without deleting your account.
Reports and moderation
Anyone can report a listing. A report records which listing, who reported it and the reason. A listing reported by three separate people is hidden from everyone automatically. Reports are not shown to the seller.
Children
CarXMarket is not directed at children and we do not knowingly collect data from anyone under 13. If you believe a child has created an account, email us and we will delete it.
Changes
If this policy changes materially we will update the date at the top of this page. Continuing to use the app after that means the revised policy applies.
Contact
Questions about privacy, or a request to see or delete your data: sinarostam@gmail.com.