Privacy policy
Last updated Oct 30, 2026
What we collect
Your mobile number, to sign you in with a texted code and to text you about your bookings.
The name you choose, which other neighbors see. Your listings, with their photos, price, dates, and the neighborhood and city you enter.
An approximate location for each listing, rounded to about a kilometer, so neighbors can search by distance. If you tap Use current location, your browser shares a rounded location for that search only.
When you open Y2Buy, your approximate city is estimated from your internet address so Explore starts near you. The place you search from is remembered only in your browser.
Your requests, chat messages, reviews, reports, and blocks, so the app can show them to you and keep neighbors safe.
What other neighbors see
Neighbors see your chosen name, your listings, and your reviews. They never see your phone number. Chat and the pickup note open only after the owner accepts and the booking fee is paid.
Who helps run Y2Buy
Supabase stores the app’s data and signs you in. Twilio sends the sign-in codes and booking texts. Stripe handles the booking fee, so Y2Buy never sees your card number. Vercel hosts the website. hCaptcha checks that a person, not a bot, is asking for a code.
When you search for a place, its name is looked up with OpenStreetMap, Zippopotam.us, or BigDataCloud. Your phone number is never sent to them.
These companies use your information only to provide their service to Y2Buy.
Text messages
Your mobile number and your consent to receive texts are never sold, and never shared with anyone for their marketing. Y2Buy texts you only sign-in codes and updates about your own bookings.
Reply STOP to any Y2Buy text to stop booking texts. Reply HELP for help. Sign-in codes are still sent when you ask for one.
What we never do
We do not sell your information, show you ads, or track you on other websites.
How long we keep it
We keep your account while you use it. Reports are kept as long as needed to keep neighbors safe. Payment records are kept as long as the law requires.
To delete your account and the information tied to it, open You, then Delete account. It is deleted right away, except records the law requires us to keep.
Changes
If this policy changes in a way that matters, we will tell you in the app before it takes effect.
Contact
Questions, or a request to see or delete your information: use Report in the app.