RightPickr

隐私政策

最后更新：2026 年 8 月 29 日

中文 English

RightPickr 是一个邻里自取应用：看看步行能到的邻居在送什么、卖什么，右滑锁定，走过去当面拿。 这个应用不经手任何钱款，也不做广告、不卖数据、不接第三方追踪 SDK。下面写的是它实际存了什么、谁能看到，以及你能怎么控制。

我们保存什么

邮箱 —— 用来登录。我们发一次性验证码，不设密码。
大致位置 —— 用来判断哪些东西你走得到。
你发布的内容 —— 物品照片、标题、描述、取货地点和时间段。
个人资料 —— 昵称，以及你自己选择填写的头像、一句话介绍、大概位置。
消息 —— 你和邻居之间的对话。
收款方式 —— 如果你填了 Venmo 或 Zelle 账号。
你跳过了哪些卡片 —— 这样同一件东西不会反复出现。
举报和屏蔽记录 —— 用来处理骚扰和违规内容。

我们不做的事

不处理支付。买卖双方当面用现金或自己的转账应用结算，我们不碰这笔钱，也看不到它有没有发生。
不投广告，不出售或出租你的数据，不做跨应用追踪，不接第三方分析 SDK。
不在后台获取位置。只有你打开应用并主动允许时才读一次。
不读取通讯录，不要手机号。

谁能看到什么

访问权限不是靠界面藏起来的，是数据库层面的行级安全策略在管。下面每一行都是一条真实的规则。

内容	可见范围
昵称、头像	任何登录用户
一句话介绍、大概位置	只在你打开开关时可见关掉的字段不会写进别人能读到的那张表，只留在只有你能读的地方。
物品的大致位置	浏览的人都能看到公开的坐标是随机偏移过的，和真实地点差 60–140 米。
确切取货地址	只有当前锁定这件东西的人给到之后，它也会用来画那个人的地图、以及在他们点开导航时交给地图应用。
Venmo / Zelle 账号	只有当前锁定这件东西的人
取货码	只有取货的人卖家看不到它 —— 它存在的意义就是当面由买家出示。
消息	只有你们两个人
你的精确 GPS 坐标	不保存只在你的设备上用来算距离；存进数据库的永远是偏移过的点。

我们用到的第三方

Supabase（美国区）—— 数据库、登录和照片存储。你的数据存在这里。
Mapbox —— 地图图片和地名。别人的物品发给 Mapbox 的是偏移过的坐标；但有三种情况发过去的是真实坐标：地图显示你自己的位置时（设置范围、手动挪动位置）；你发布物品时 —— 用来把坐标换成一个街区名，卡片上公开显示的就是这个名字，不是你自己填的那行地址；以及你锁定了某件东西之后 —— 那时地图钉的是确切取货点。
你打开的地图应用（Apple 地图 / Google 地图）—— 只有在你主动点「在地图中打开」时。传过去的是确切取货地址，因为把偏移过的点当导航目的地会把你带到错的门口。
邮件服务 —— 只用来把登录验证码发到你的邮箱。

这三家各自有自己的隐私政策，处理数据时受其约束。

你可以做什么

注销账号 —— 应用内「设置 → 注销账号」。账号和挂在它下面的东西（发布、消息、照片、收款方式）会一并删除，不用发邮件申请。
关掉介绍和大概位置 —— 关掉之后它们不再存在于别人能读到的地方。
屏蔽某个人 —— 互相看不到对方的东西和消息，随时可以解除。
不注册也能用 —— 可以只看、只跳过。不注册就不能发布、锁定或发消息，因为这些都要当面见到人。

保留多久

内容会一直保留到你删除它，或者你注销账号为止。注销是立即生效的删除，不是标记为停用。

举报记录在你注销之后仍会保留一段时间 —— 否则被举报的人只要删号重注册就能绕过处理。

儿童

RightPickr 不面向 13 岁以下儿童，我们也不会有意收集他们的信息。

变更与联系

这份政策如有实质变更，页面顶部的日期会更新。

有问题或要求删除数据，联系：huangmeng0320@gmail.com

RightPickr

Privacy Policy

Last updated: 29 August 2026

RightPickr is a neighbourhood pickup app: see what neighbours within walking distance are giving away or selling, swipe right to hold it, then walk over and collect it in person. The app never handles money, shows no advertising, sells no data, and carries no third-party tracking SDKs. What follows is what it actually stores, who can see it, and what you control.

What we store

Your email — for signing in. We send a one-time code; there is no password.
An approximate location — to work out what is within walking distance of you.
What you post — item photos, title, description, pickup spot and time windows.
Your profile — display name, plus the photo, one-line bio and rough area you choose to add.
Messages — conversations between you and a neighbour.
Payment handles — your Venmo or Zelle handle, if you add one.
Which cards you passed on — so the same item does not keep coming back.
Reports and blocks — to act on harassment and prohibited content.

What we do not do

No payment processing. People settle up in person, in cash or through their own transfer app. We never touch the money and cannot see whether it changed hands.
No advertising, no selling or renting your data, no cross-app tracking, no third-party analytics SDKs.
No background location. Location is read once, while the app is open, after you allow it.
No access to your contacts, and we do not ask for a phone number.

Who can see what

Access is enforced by row-level security rules in the database, not by hiding things in the interface. Each line below is a real rule.

Data	Visible to
Display name, photo	Any signed-in neighbour
Bio, rough area	Only if you switch it on A field switched off is never written to the table other people can read — it stays where only you can see it.
An item's approximate spot	Anyone browsing The published point is displaced 60–140 m in a random direction.
The exact pickup address	Only the person currently holding the item Once released, it is also used to draw that person's map and handed to their map app if they open directions.
Venmo / Zelle handle	Only the person currently holding the item
Pickup code	Only the person collecting The seller cannot see it — the point of the code is that the buyer shows it at the handover.
Messages	Only the two of you
Your precise GPS position	Not stored Used on your device to measure distance; what reaches the database is always the displaced point.

Third parties we use

Supabase (US region) — database, sign-in and photo storage. This is where your data lives.
Mapbox — map images and place names. Other people's listings are sent as displaced coordinates. Three cases send real ones: when the map is showing your own position (setting your radius, moving your location by hand); when you post something, to turn the coordinates into a neighbourhood name — that name is what appears publicly on the card, not the address you typed; and once you are holding an item, when the map pins its exact pickup point.
Whichever map app you open (Apple Maps, Google Maps) — only when you tap "Open in Maps". It receives the exact pickup address, because routing you to a deliberately displaced point would take you to the wrong doorway.
An email provider — used only to deliver your sign-in code.

Each of these has its own privacy policy and is bound by it when handling data.

What you control

Delete your account — in the app, Settings → Delete account. The account and everything attached to it (listings, messages, photos, payment handles) goes with it. No email request needed.
Switch off your bio and rough area — once off, they no longer exist anywhere others can read.
Block someone — you stop seeing each other's things and messages. Reversible at any time.
Browse without an account — you can look and skip. Posting, holding and messaging need an account, because all three mean meeting someone in person.

How long we keep it

Content stays until you delete it or delete your account. Deletion is immediate removal, not deactivation.

Reports outlive the account they concern — otherwise anyone reported could clear the record by deleting and signing up again.

Children

RightPickr is not directed to children under 13, and we do not knowingly collect their information.

Changes and contact

If this policy changes in substance, the date at the top changes with it.

Questions, or a request to delete your data: huangmeng0320@gmail.com