Loading...
Loading...
Effective date: October 21, 2026
Leechy LLC ("Leechy", "we", "us") runs a marketplace where people rent items and cars, book services, discover local food, and connect with each other. This policy explains what personal information we collect, how we use and share it, and the choices you have.
It applies to the Leechy website (leechy.app), the Leechy iOS and Android apps, and related services (together, the "Service"). You must be 18 or older to use Leechy.
The short version:
We collect information you give us, information created as you use Leechy, and limited information from partners such as Stripe and sign-in providers.
| Type | What it includes | Where it comes from |
|---|---|---|
| Account and profile | Name, email, password (stored only as a secure hash), phone number, date of birth, country, profile photo, bio | You |
| Social sign-in | Name, email and profile photo from Google, Apple or Facebook, if you sign in with them | The sign-in provider |
| Business accounts | Business name, description, phone, website, address, logo, tax ID, and licenses or permits you submit for verification | You |
| Listings and Food & Dining | Titles, descriptions, photos, prices, availability, address and map location; for restaurants and food trucks, menus, photos, opening hours and locations | You |
| Bookings and reservations | What was booked, dates and times, quantities, prices, deposits, tips, status, and Food & Dining reservations | You and the other user |
| Messages and quotes | Messages, quote requests and quotes, reactions, photos you send | You and the other user |
| Reviews, condition photos and claims | Ratings, review text and photos, before-and-after condition photos, protection claims and supporting evidence | You and the other user |
| Payments, subscriptions and payouts | Payments, subscription billing and payouts are processed by Stripe. We receive limited details such as card brand, last four digits, and payment, subscription and payout status, never your full card number. | Stripe |
| Identity verification | Stripe Identity checks your ID document and a live selfie, using facial recognition to compare your selfie with your ID photo. Stripe performs this comparison; we do not receive your facial data. Stripe shares the verified result with us: your name, date of birth, address, document type, and the last four digits and expiry date of your license. We do not receive images of your documents or selfie. | Stripe |
| Location | Addresses you enter. Your device's location, only if you allow it, to show results near you and give directions. | You, your device |
| Activity on Leechy | Favorites, followers, blocked users, notifications, referral codes, and counts of listing views and saves shown to listing owners | Created as you use Leechy |
| Mobile app data | Push notification token; app installs, opens and usage events; device model and operating system; on Android, your device's advertising ID where your settings allow it | Collected automatically by our apps |
| Device and technical | IP address, browser and device type, and logs needed to run and secure the Service | Collected automatically |
| Support | Anything you send us at contact@leechy.app | You |
We use personal information to run the marketplace, keep it safe, and meet our legal duties. The right-hand column gives the legal basis used by laws such as South Africa's POPIA and the EU and UK GDPR.
| Purpose | Legal basis |
|---|---|
| Create and run your account; publish listings and food business pages; handle bookings, Food & Dining reservations, messages, payments, tips, subscriptions and payouts | Performing our contract with you |
| Verify identities, ages, driver's licenses and business licenses; prevent fraud; moderate content; handle disputes and protection claims | Legitimate interests in a safe marketplace; legal obligation where it applies |
| Send service messages such as booking updates, receipts and security alerts | Performing our contract with you |
| Send news and offers about Leechy by email or push notification | Your consent where the law requires it. You can opt out at any time. |
| Measure how our apps are used and how our ads perform (section 6) | Legitimate interests; your consent where the law requires it |
| Run the referral program | Performing the program's terms |
| Show listing owners their own view and save counts, and improve the Service using aggregated statistics | Legitimate interests |
| Keep financial records, meet tax obligations, and respond to lawful requests | Legal obligation |
Automated checks. Stripe Identity uses automated checks to verify ID documents and confirm you meet the age requirement (18, or 21 to rent a car). If a check fails and stops you from booking, you can contact us to ask for a person to review it.
We share personal information with the service providers that run Leechy for us, with other users as needed to complete a booking, and when the law requires it.
Service providers. Each may use your information only to provide its service to us, except where its own policy says otherwise (such as Meta and Google, section 6).
| Provider | What they do for Leechy | Information involved |
|---|---|---|
| Supabase | Database, sign-in, file storage, server functions | All account and Service data |
| Stripe | Payments, subscriptions, payouts to hosts (Stripe Connect), identity and driver's license checks (Stripe Identity) | Payment, payout and identity details |
| Vercel | Hosting the website | Technical and log data, such as IP address |
| SendGrid (Twilio) | Sending booking, account and support emails | Name, email address, email content |
| Apple | iOS push notifications; maps, directions and address search in the iOS app (MapKit); Sign in with Apple, if you choose it | Device token, notification content, map searches and location |
| Android push notifications (Firebase Cloud Messaging), app analytics (Google Analytics for Firebase), address search and device location on Android; Google sign-in, if you choose it | Device token, app usage events, device identifiers, addresses you type, location | |
| Meta | Measuring app installs and opens from our ads in the iOS app; Facebook sign-in, if you choose it | App events, device information, IP address |
| Mapbox | Maps and address search on the website and Android app | Addresses you type, map area, IP address |
| OpenStreetMap | Backup map images on the website | IP address |
Other users. Your public profile, listings, food business pages and reviews can be seen by anyone. When you book or host, the other person sees what they need to complete it: your name, photo, messages, and the booking details, including pickup or service address.
Legal and safety.We disclose information when the law requires it, or when needed to protect people's safety, prevent fraud, or enforce our Terms.
Business changes.If Leechy is involved in a merger, acquisition or sale of assets, your information may transfer to the new owner under this policy's protections. We will tell you before that happens.
With your consent. In any other case, we ask first.
Links to other websites.Leechy may link to websites and apps we do not run, such as a business's own website. Their privacy practices are their own, so please review their policies.
Our website uses only essential cookies and browser storage: the ones needed to sign you in, keep payments secure, and remember choices you make. The website does not use analytics, advertising or social-media tracking cookies.
| Name | Purpose | How long it lasts |
|---|---|---|
Supabase sign-in cookies (sb-…-auth-token) | Keep you signed in | Until you sign out or the session expires |
leechy_cookie_consent | Remember your cookie choice | 12 months |
leechy_referral_intent, leechy_referral_opportunity | Carry a referral code through social sign-up (encrypted) | 15 minutes; 1 hour |
Stripe cookies (__stripe_mid, __stripe_sid) | Fraud prevention, only on payment pages | Up to 1 year; 30 minutes |
| Browser storage (local and session storage) | Drafts, settings such as time format and currency, saved sign-ins for switching accounts, a pending referral code, cached exchange rates | Until it expires or you clear it |
Your choices.The first time you visit, a banner explains our cookie use. You can review it any time from "Cookie preferences" in the website footer or here: . You can also block or delete cookies in your browser settings, but sign-in and payments will not work without essential cookies.
If this changes. Before we add any analytics or advertising cookies to the website, we will update this policy and ask for your permission first. Those cookies will stay off unless you turn them on.
Global Privacy Control. If your browser sends a Global Privacy Control signal, our website keeps optional cookies off. The website does not share information for advertising, so there is nothing further to switch off there. To opt out of sharing by our mobile apps, see section 6.
Do Not Track. Our website does not respond to Do Not Track browser signals. Global Privacy Control is handled as described above.
Mobile apps. Our apps do not use browser cookies. They store your sign-in and settings on your device, and use the Meta and Google tools described in section 6.
We do not sell your personal information for money. Our mobile apps share limited device and usage information with Meta and Google to measure how people find Leechy and how our ads perform.
What the apps share:
Our apps do not send these tools your messages, bookings, identity documents or payment details. The tools may also collect technical information such as your IP address and device identifiers. Under some US state laws, such as California's, giving this kind of information to advertising partners can count as "sharing" for targeted advertising.
Your choices:
Ads on other platforms. We may advertise Leechy on platforms such as Google and Meta. Clicking one of those ads and landing on our website does not, by itself, place tracking cookies on your device.
If we add new advertising or analytics tools, we will update this policy first, and ask for your consent where the law requires it.
We keep your information while your account is open. After you delete your account, we keep only what we need for the reasons below.
Deleting your account. Go to Settings → Security → Delete Account in the app or on the website. Deleting your account is designed to:
We keep a record of your past bookings, reservations, payments, messages and reviews, and the profile details linked to them, so other users' records stay complete and we can meet the obligations below. To have us erase or anonymize the profile details we no longer need, email contact@leechy.app. We will do so unless the law or the reasons below require us to keep them.
What we keep, and for how long:
| Record | Why we keep it | How long |
|---|---|---|
| Payments, payouts, subscriptions, tips and invoices | Tax and accounting law | As long as the law requires, generally up to 7 years |
| Bookings, reservations, messages and evidence linked to a dispute or protection claim | Resolving the dispute or claim | Until it is closed and any appeal period has passed |
| Records needed to prevent fraud or enforce a ban | Keeping the marketplace safe | As long as needed for that purpose |
| Reviews you wrote | Other users' records and the integrity of reviews | While the review stays on Leechy; you can ask us to remove your name |
| Backups | Disaster recovery | Overwritten on a rolling basis by our database provider |
Stripe keeps its own payment and identity-verification records under the Stripe Privacy Policy.
We use technical and organizational safeguards suited to the information we hold:
No system is completely secure. If a breach affects your personal information, we will notify you and the relevant authorities as the law requires.
Wherever you live, you can ask us to access, correct, download or delete your personal information, withdraw consent you gave, and opt out of marketing messages. The rights the law gives you depend on where you live and which laws apply to Leechy.
How to make a request.Edit most details yourself in Settings, or email contact@leechy.app with the subject "Privacy request". We will confirm your identity before acting, and reply within the time the law sets (for example, 45 days under California law, where it applies). You will not be treated differently for using these rights. If we decline a request, we will explain why and how to appeal.
Where Leechy operates:
| Where you live | Law | Your additional rights |
|---|---|---|
| United States: California and other states with privacy laws | CCPA/CPRA and similar state laws, where they apply to Leechy | Know what we collect and why; delete; correct; opt out of sharing for targeted advertising (section 6); limit use of sensitive information (we use ID verification data and precise location only to provide the Service); use an authorized agent; appeal a decision. |
| South Africa | Protection of Personal Information Act (POPIA) | Access and correct your information; object to processing, including direct marketing; complain to the Information Regulator. Our Information Officer is listed in section 12. |
Other countries. If you live in the European Union, the United Kingdom, Canada or Australia, local privacy laws may give you similar rights where they apply to our handling of your information. These can include objecting to or restricting processing, data portability, and complaining to your local data protection authority.
Leechy is based in the United States. Your information is stored and processed in the United States and in other countries where we and our service providers operate.
When the law of your country requires it, such as South Africa's POPIA, we protect information sent abroad with recognized safeguards, including the data protection terms and standard contractual clauses in our providers' agreements. You can ask us for details of the safeguards that apply to you.
Leechy is only for adults.
We do not knowingly collect personal information from children. If you believe someone under 18 has an account or has given us personal information, contact us at contact@leechy.app.
We will update this policy when our practices change, and change the effective date at the top. For material changes, we will tell you by email or in the app before they take effect.
Contact us with questions, requests or complaints about privacy:
Leechy LLCInformation Officer (South Africa): contact@leechy.app