Coveted.

Privacy

Privacy Policy

Effective October 14, 2026Applies to the Coveted app and covetedapp.com

The short version: we collect what we need to run the marketplace, we never sell your data, and you can delete your account from the app at any time.

On this page
  1. 1. Who we are
  2. 2. Information you give us
  3. 3. Information collected as you use Coveted
  4. 4. How we use it
  5. 5. Who we share it with
  6. 6. Your choices
  7. 7. Retention and deleting your account
  8. 8. Security
  9. 9. Children
  10. 10. Changes
  11. 11. Contact
  12. The covetedapp.com website

1. Who we are

Coveted is a marketplace that connects independent clothing brands with shoppers. This policy explains what we collect when you use the Coveted app or covetedapp.com, why, who we share it with, and the choices you have. Questions go to [email protected].

2. Information you give us

Account: your email address, and if you use Sign in with Apple or Google, the name and email that service shares with us (Apple may give us a private relay address instead of your real one). Profile: anything you choose to add, such as your name, username, bio, photo, Instagram handle and website. Shopping: your shipping address and phone number, your preferred sizes and the styles you pick. Selling: your brand details, listings and product photos; payout and identity verification are handled by Stripe, not stored by us. Messages: the messages you send to buyers or sellers. Safety: reports you file and users you block.

3. Information collected as you use Coveted

Activity: the pieces you swipe on, like, save, follow or buy, used to personalize your feed. Device: a push notification token if you allow notifications, plus your device type and app version. Diagnostics: crash reports and performance data so we can fix problems. Records: when you accepted these terms, and the order, payment status and shipping records needed to run the marketplace. Our servers also keep short-lived request logs, including IP address, for security and abuse prevention.

4. How we use it

To run your account and the marketplace (checkout, shipping, payouts, order updates and messages); to personalize what you see; to keep Coveted safe, including reviewing reports, screening posts for objectionable content and preventing fraud; to send service messages about your orders; and to send brand announcements only if you turn them on. We do not sell your personal information, and we do not use it for third-party advertising or track you across other companies' apps and websites.

5. Who we share it with

Sellers you buy from receive the name, shipping address and phone number needed to ship your order. We also use service providers that process data on our behalf: Supabase (sign-in and database), Cloudflare (website hosting and content delivery, Web Analytics for this site, and R2 storage for the photos you upload, such as listing photos, profile photos and brand images, which are served from media.covetedapp.com), Render (API hosting), Stripe (payments, Apple Pay and seller payouts), EasyPost (shipping labels and tracking; it shares the shipping name, address and phone number with the carrier delivering your order), Amazon Web Services SES (transactional email, such as sign-in codes and order updates), Expo (push notification delivery), Sentry (crash diagnostics), and Apple and Google (sign-in). Each provider may use the data only to provide its service to us and is required to protect it with the same or equal protection described in this policy. We may disclose information if required by law or to protect the safety of our users.

6. Your choices

Edit your profile, email, shipping address and sizes in Settings at any time. Notifications: turn push notifications off in your device settings, and turn brand announcements on or off in Settings > Notifications (they are off until you opt in). Blocking: block any user from their profile or a conversation. To request a copy of your data or to correct something you can't edit yourself, email [email protected].

7. Retention and deleting your account

You can delete your account in the app from Settings > Delete account. Deletion immediately removes your profile details, saved address, sizes, preferences, saves, follows and push tokens, takes down any brand listings, and revokes Sign in with Apple. Order and payment records are kept as long as the law requires (for example, for tax and accounting), and messages you already sent stay in the other person's conversation history without your name. Other personal data is removed within 30 days.

8. Security

Data is encrypted in transit and at rest. Card details go directly to Stripe and never touch Coveted's servers. Access to production systems is limited to the people who need it, and each user can only access their own records.

9. Children

Coveted is not for children under 13, and we do not knowingly collect their information. If you believe a child under 13 has an account, email [email protected] and we will delete it.

10. Changes

We will update this policy as Coveted changes and post the new effective date here. If a change is significant, we will tell you in the app before it takes effect.

11. Contact

Privacy questions or requests: [email protected].

The covetedapp.com website

This website is separate from the app. If you join the waitlist, we store your email address and the time you signed up in Google Firebase (Cloud Firestore), and use them only to tell you when Coveted launches. When you submit the form, your IP address is held for up to 10 minutes by Cloudflare, which hosts this site, to stop repeated sign-up attempts.

The site uses Cloudflare Web Analytics to count page views. It doesn't set cookies or build a profile of you: Cloudflare records things like the page visited, the referring site, and your browser and country, and shows us only aggregate totals. The site doesn't use advertising trackers. Fonts load from Google Fonts, which receives your IP address to deliver them. To be removed from the waitlist, email [email protected].