Privacy Policy

Last updated: October 26, 2026

Geerho Tech LLC (“Geerho,” “we,” “us,” or “our”) operates the Geerho mobile app and the website at which this policy is posted (together, the “Services”): a marketplace for buying and selling new and used items, listing property for rent, lease, or sale, and connecting with other people. This Privacy Policy explains what personal information we collect, how we use and share it, how long we keep it, and the rights and choices you have, wherever you live.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

1. Information we collect

Information you provide

• Account information. When you sign in with Google, GitHub, or Apple, we receive your name, email address, profile photo, and a unique account identifier from that provider. If you use Apple’s “Hide My Email,” we receive a private relay address instead of your email.
• Passkeys. If you add a passkey, our sign-in provider (Supabase) keeps its public key, a name for it, and when it was added and last used. The private key never leaves your device or password manager.
• AI listing writer. If you tap Write in the description, your notes are turned into a draft by the AI built into your device (Apple Intelligence, Gemini Nano on Android, or your browser's built-in AI). It runs on your device; Geerho doesn't send your notes to any AI service.
• Remove Background. When you remove a photo's background in the iPhone or Android app, it's done on your phone (Apple's Vision on iPhone; Google's on-device ML Kit through Google Play services on Android). Only the finished photo is uploaded, like any listing photo.
• Translation. When you tap Translate, the text is translated on your device (Apple's translator on iPhone, Google's on-device translator on Android, your browser's built-in translator on geerho.com where it has one); Geerho doesn't receive it. Android downloads a language pack from Google the first time. In browsers without a built-in translator, Translate opens Google Translate with that text, and Google's privacy policy applies to it.
• Scanning and suggestions on your phone. Scanning a barcode, a shipping label or a document, suggesting a category from your first photo, suggesting chat replies, and Visual Intelligence searches on iPhone all run on your phone (Apple's VisionKit, Vision and Apple Intelligence on iPhone; Google's on-device ML Kit and Smart Reply on Android). Geerho doesn't receive the camera picture or your chat for these. Only the result is used: a scanned document becomes an attachment you send, a suggested reply goes in the box for you to send or not, and for Visual Intelligence only a few words describing the picture are used to search listings.
• Product lookups. When you scan a product's barcode (or type its number on geerho.com) to start a listing, Geerho looks up just the barcode number (not your name, location or photos) in public product databases (UPCitemdb, Open Food Facts, Open Beauty Facts, Open Products Facts, Open Library and Google Books) to suggest a title, details and a category. We remember each barcode's answer for up to 30 days so the next lookup is faster, without who scanned it.
• Floor plans and 3D models (iPhone). A floor plan made from a room scan is drawn on your phone and added to your listing as a photo. A 3D model of an item is built on your phone from the pictures you take and, if you add it, is published with your listing like its photos. The camera images used to make them stay on your phone.
• Search alerts. If you save a search as an alert, we keep its words, type, category, top price and the area you searched (an approximate point and distance) so we can notify you when a matching listing is posted. Only you can see your alerts; remove them any time in Settings, and they're deleted with your account.
• Message notifications. If you allow message previews, a message notification carries the sender's name and profile photo link so your phone can show who wrote; replying from the notification sends the message like any other. With previews off, neither is included.
• Wallet card. If you add your Geerho card to Apple Wallet or Google Wallet, it holds your name, @username, verification status, Founding Member status, when you joined, and a QR code of your public profile. Apple keeps it on your device; for Google Wallet, Geerho sends those details to Google, which stores the card in your Google account. Remove it in Wallet any time.
• Widgets and countdowns. If you add the Geerho widget, your unread-message count and number of live listings are kept on your phone for it (cleared when you sign out). An auction countdown on your Lock Screen or in a notification is made on your phone after you bid. Reminders for today's rental pickup or return and for a home tour in the next 8 hours are made on your phone from your own bookings when you open the app.
• App Clip and Handoff (Apple devices). The Geerho App Clip shows a shared listing's public details without signing in or installing the app. Handoff lets you continue a listing or chat you have open on another of your Apple devices; Apple passes only the page link between your devices.
• iPhone search and shortcuts. Your own listings and listings you open can appear in your phone's search (Spotlight on iPhone) and app shortcuts (Android). This is stored on your phone only and cleared when you sign out.
• Two-step verification. If you turn it on, our sign-in provider (Supabase) keeps the secret your authenticator app uses to make codes, and we keep one-way scrambled copies (hashes) of your 10 recovery codes, which can't be turned back into the codes. App Lock with Face ID, Touch ID, or a fingerprint is handled by your phone; your face or fingerprint never leaves your device, and we never receive it.
• Profile information. Your username, display name, profile photo, bio, and city.
• Listings. Titles, descriptions, prices, categories, condition, photos, and the approximate location of items you list, and the address or approximate location of property you list.
• Social content. Posts, comments, follows, and other content you share.
• Messages. Messages you send to and receive from other users through the Services, including photos, videos, voice messages, files, stickers, and locations you send in a conversation, and reactions (such as ❤️ or 👍) you add to messages. We re-encode photos and videos before sending them, which removes location and other details stored in the original file. A location is shared only when you choose to send one.
• Launch waitlist. If you ask on geerho.com to hear when Geerho opens, we keep your email, the city, state or province, and country you give, whether you want to buy or sell, when you agreed, and a keyed one-way code made from your network address (to stop spam; we don't keep the address itself). We use it only to email you about Geerho's launch and opening near you. Every email has a one-click unsubscribe link, which deletes your email from the list at once.
• Invitations. If you say who invited you to Geerho, we keep that link between your accounts, tell the person who invited you that you named them and when you verify (by your username, never your ID details), and record the commission-free sales each of you earns and uses. We don't upload your contacts or send invitations for you.
• Teams. If you are a Business or Elite member, the members you appoint to your team; if you are on a team, which team, and which listings you posted for it.
• Purchases and shipping addresses. When you use Buy Now, we store your purchase request, the delivery method, an optional note, and, for shipped items, the shipping address and phone number you enter. If you choose “Save on this iPhone,” the address is also kept in your device's Keychain, not on our servers.
• Reviews. Star ratings, written reviews, and replies about buyers and sellers after a sale.
• Identity verification. To sell or send messages, you verify your identity with our verification provider, Didit. Didit collects images of your government ID, a selfie or short video, and the details on your ID (such as your name, date of birth, and document number), and compares your face with your ID photo. Geerho receives the result (for example, verified or not verified) and the date, and keeps only these details from your ID: your legal name, date of birth, the issuing country, the address printed on it (if any), and a keyed, one-way hash of your ID number. We use the hash, and a hash of your name and date of birth, only to make sure each person has one Geerho account; they can't be turned back into your ID number. We do not receive or store your ID images or face data.
• Beta testing. If you join Geerho's beta, the roles you test, each task you check off (with the time, platform, app build, and your note), and the Super Admins' reviews. A silver Beta Tester star shows before your name on your profile. Geerho's Super Admins show a gold star.
• Milestone levels. Your milestone level (shown on your profile) and your XP (private), with a private history of each award: the Geerho commission or fee it came from, the currency, and the exchange rate used. If you transfer a TikTok gifter level, the TikTok username and level you enter and a one-time code; you add the code to your TikTok bio and email it with a screenshot of your gifter level to support@geerho.com, and a moderator compares them with your public TikTok profile. We keep the email and screenshot with your transfer request. You can remove the code from your bio once the transfer is reviewed.
• Sign-in methods. If you link more than one sign-in method (Apple, Google, or GitHub) to your account, we keep the identifier and email address each one gives us, so any of them signs you in to the same account.
• Home address and proof of address. Your home address is private to you: it is never shown on your profile, and we use it to fill in checkout. It comes from your ID, or from a change you send with 2 or 3 proofs of address (such as a utility bill, bank statement, or lease). Only Geerho moderators see the proofs, to compare the name and address, and we delete them once the change is approved or declined.
• Account recovery. If you lose access to how you sign in, you can ask Geerho moderators to give your account back. You send a photo of your government ID, two proofs of address, your name and date of birth, and a WhatsApp number; a moderator compares them with what we already hold for the account and has a short WhatsApp video call with you, during which you sign your name three times on blank paper. Only Geerho moderators see these. We tell the account's owner about the request so they can stop it. The documents and the WhatsApp number are deleted when the request ends; a record of the request and of who handled it is kept for security.
• Live shows. If you host a live show: which platform you use (Amazon IVS, YouTube, Facebook, or Twitch), your channel's public playback or watch link, your show titles, the listings you feature, and when your shows start and end. Your video goes from your device or broadcasting app straight to that platform; Geerho does not receive, store, or record it. If you stream with Geerho's camera screen, your server address and stream key are kept only on your device (in its secure storage) and are never sent to Geerho. Viewers watch through the platform's own player, which is covered by that platform's privacy policy. Messages you send in a show's chat are shown to everyone watching it. When you send hearts, we count how many you sent to each show each minute, to keep counts fair.
• Username history. When you change your username, we keep a record of your earlier usernames and when they changed, to prevent impersonation and for security.
• Homes and tours. If you list a home, its street address. For homes for sale it is shown publicly; for rentals it is shown only to you, Geerho moderators, and people whose tour you confirm. If you request or answer a tour, the times suggested, your note, your time zone, and the result.
• Services and jobs. The kind of work, rates or budget, how far you travel or whether you work remotely, years of experience, and dates for jobs. When you request a quote or respond to a job, your request, response, and any price are shared with the other person in your conversation, and the person who posted a job sees whether each responder holds a license for that work.
• Professional licenses. If you add a professional license (for example, as a real estate agent or an electrician), we collect your profession, license number, the issuer, your full name as it appears on the license, your date of birth, the expiry date, your phone number, and, if you choose, your email, business name, notes, and a photo or PDF of the license. Geerho moderators compare these with the issuer’s public records. Other users see only your name as licensed, profession, license number, issuer, business name, and where the license was issued. Your date of birth, contact details, and license photo are visible only to you and Geerho moderators.
• Reports and support requests. Information you give us when you report content or contact Geerho Support in the app: the reason, your message, the transaction you choose (its transaction ID and title), and any photos, screenshots, voice recordings, files, or links you attach. Voice recordings are made only when you tap record.
• Rentals. Rental requests and bookings (dates, rates, deposit, status, and your device’s time zone, used for due dates and reminders), the condition photos you or the other person take at pickup and return, and any signatures (the drawn signature, your typed full name and the time) either of you adds at those steps. These are visible only to the owner, the renter, and Geerho’s moderators, and are deleted when either account is deleted. When you request a rental, your approximate area is checked against the owner’s lending radius; it is not saved with the request.
• Watched items. The listings you choose to watch, and alerts about them. Sellers and other users see only how many people are watching, never who.
• Recently viewed. The app keeps a list of listings you opened recently on your iPhone only, to show them on the Home screen. It is never sent to Geerho; clear it anytime from Home.
• Bids. The auctions you bid on, your maximum bids, and when you bid. Other users see bid amounts with your username masked (for example, “t***m”); your maximum bid stays private unless you are outbid.
• Fee plan. Whether you are a Founding Member (and your founding number) or otherwise exempt from fees. We use the country of your home address (or of your verified ID) to work out when Unlimited Fridays start and end in your time zone.
• Payments and payouts. When you pay in the app, our payment processors, Stripe, Inc. (in the United States) and PayMongo Philippines, Inc. (in the Philippines), collect your card or bank details and billing address directly; Geerho never receives your full card number. We receive and keep a record of each payment: the amount, sales tax, fees, payment method type, status, refunds, and disputes. Sellers who get paid in the app give the payment processor their identity, bank account, and tax details (used, for example, to verify them, pay them, and prepare tax forms such as Form 1099-K); Geerho receives only whether payouts are set up, whether the seller sells as an individual or a business, whether their tax information is on file, and the status of each payout; Geerho never receives their Social Security number or Employer Identification Number. In the Philippines, sellers who get paid in the app enter their bank or e-wallet (GCash, Maya) account number and account name in Geerho: we keep them in a protected part of our database that only our payout system can read, use them to send payouts through PayMongo, and check that the account name matches the seller's verified ID. Deleting the payout account in Get Paid removes them.
• Plans. If you subscribe to a Geerho plan, your plan, billing status, renewal date, and payment history (billed through the payment processor).
• App Store purchases. If you buy a plan or featuring in the iPhone app, Apple processes the payment; Geerho never receives your card details or Apple ID. Apple sends us a signed record of the purchase: the product, transaction number, purchase and renewal dates, App Store country, price and currency, refunds, and a number the app attaches so we know which Geerho account the purchase belongs to. We keep it to give you what you bought, keep your plan up to date, and for our accounting.

Information collected automatically

• Location. If you allow it, your device’s location while you use the app, to show nearby listings and to show when a pro you hired will arrive. If you don’t, you can enter a ZIP or postal code instead. Location attached to item listings is coarsened before it is saved, and maps of listings show only that approximate area. We remove location data embedded in photos before upload. When you post on geerho.com, the area you type (or your browser’s location, rounded to about 1 km) and, for a home, its address are looked up through Photon (komoot’s map search on OpenStreetMap data) from Geerho’s server, so it never learns who you are.
• Follows. Who you follow and who follows you. Your follower, following, and Contacts counts appear on your public profile, and signed-in members can see the lists, except people you’ve blocked.
• “On my way” trips. If you are hired for a job and tap On My Way, we collect your precise location while you travel to that job, including while Geerho is in the background, and show it only to the client who hired you. Sharing stops when you tap I’ve Arrived or Stop Sharing, when your client stops it, or after 4 hours, and we then erase the location, keeping only when the trip started and ended. The client’s arrival time is calculated on the client’s own device and is not sent to us.
• Device and usage information. Device model, operating system, app version, language, diagnostic and crash data, and how you use features of the Services.
• Network information. IP address, collected by our hosting providers when you use the Services.
• Last active time. The date and time you last opened the app while signed in, used to count how many people use Geerho. We do not record which listings or pages you view.

Our Services do not use third-party advertising or cross-site tracking cookies. If you sign in on our website, your browser’s local storage keeps your sign-in session so you stay signed in; signing out removes it.

2. How we use information and our legal bases

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, we rely on the legal bases shown below. Elsewhere, we use information for the same purposes.

Where we rely on consent, you can withdraw it at any time, for example by turning off location access in iOS Settings.

3. How we share information

• With other users. Your public profile, listings, and posts are visible to other users and, for active listings, to visitors who are not signed in. Messages, including photos, videos, voice messages, files, stickers, locations, and reactions, are visible to the people in that conversation; attachments are stored privately and can be opened only by them (and by moderators reviewing a report). On a Business or Elite team, the team owner sees the listings a team member posts for the team and the conversations about them, and the team member who posted a listing sees its conversations and handles its purchase requests, sales, rentals, and tours (including the buyer’s shipping address, so they can ship); a buyer messaging about a team listing is messaging the team owner’s business. Support requests and their attachments are visible only to you and Geerho’s moderators. When you request to buy an item, your shipping address and phone number (if any) are shared only with that item's seller (and, for a team listing, the team member who posted it). Reviews you write are published on the other person's profile with your username, once they review you too or 14 days pass.
• With service providers who process information on our behalf under contract, including Supabase, Inc. (database, authentication, and file storage), GitHub, Inc. (website hosting), Didit (identity verification), Stripe, Inc. and PayMongo Philippines, Inc. (payments, payouts, sales tax, and plan billing; they also use information to prevent fraud and meet their own legal obligations, under their own privacy policies), Anthropic, PBC (AI review of listings for our moderators, scam checks on chat messages that contain risk words, summaries of reports for our moderators, answers to everyday support requests, and, without any personal information, a weekly report of overall totals and drafts of our own marketing; under its commercial terms it doesn't use this content to train its models), Apple Inc. (push notifications), UPCitemdb, Open Food Facts, Open Beauty Facts, Open Products Facts, Open Library and Google Books (product details for scanned barcodes; only the barcode number), komoot GmbH (Photon map search, to find a listing’s area when you post on geerho.com), and the sign-in provider you choose (Google LLC, GitHub, Inc., or Apple Inc.).
• For legal reasons, when we believe in good faith that disclosure is required by law or legal process, or is necessary to protect the rights, property, or safety of our users, the public, or Geerho. We respond to government and law enforcement requests only with valid legal process (or in an emergency involving a risk of death or serious injury), and we notify you first unless the law prohibits it; see our Law Enforcement Guidelines.
• In a business transfer, such as a merger, acquisition, or sale of assets, subject to this policy.
• With your direction or consent.

We do not sell personal information, share it for cross-context behavioral advertising, or allow third parties to track you across apps and websites.

4. How long we keep information

When you delete your account, we delete your account and the content associated with it, except where we must keep information to comply with law, resolve disputes, prevent fraud, or enforce our agreements. Backups are overwritten in the normal course of operations.

5. Your choices

• Delete your account at any time in the app (Profile → Settings → Delete Account), or ask Geerho Support to delete it for you. A Geerho Super Admin can also delete an account, for example an abandoned test account; it's logged, and the same rules apply as when you delete it yourself.
• Edit or delete your profile, listings, and posts in the app.
• Location: turn device location on or off in iOS Settings.
• Two-step verification and App Lock: turn them on or off in Profile → Settings → Security.
• Block or report other users from their profile or a conversation.
• Privacy requests: contact Geerho Support in the app and choose the reason “Privacy request,” or write to us at the address below.

6. California privacy rights

This section applies to California residents and supplements the rest of this policy, as required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), and the California Online Privacy Protection Act (“CalOPPA”).

Notice at collection

In the past 12 months we collected the categories of personal information below, from you, your device, and your chosen sign-in provider, for the business purposes in section 2, and retained them as described in section 4.

Sensitive personal information. We use precise geolocation, account log-in credentials, and the government ID and biometric information processed by Didit only to provide the Services you request and to keep them safe (verifying identity and preventing fraud), as permitted by the CCPA, and not to infer characteristics about you.

Sale and sharing. We do not sell or share personal information as those terms are defined in the CCPA, and we have no actual knowledge of selling or sharing the personal information of consumers under 16.

Your rights

• Right to know and access the personal information we collected about you, its sources, the purposes, and the categories of recipients.
• Right to delete personal information we collected from you, subject to legal exceptions.
• Right to correct inaccurate personal information.
• Right to opt out of sale or sharing. We do not sell or share, so there is nothing to opt out of, but you may still submit a request.
• Right to limit use of sensitive personal information. We already limit it to permitted purposes.
• Right to non-discrimination for exercising any of these rights.

How to exercise your rights. Submit a request through Contact Support in the app (reason “Privacy request”), email support@geerho.com, or write to us at the mailing address below. Requests made in the app while signed in are already linked to your account; otherwise we will verify your identity by matching information you provide with information in your account. We respond within 45 days, and may extend that by another 45 days when reasonably necessary, with notice. You may use an authorized agent; we may ask the agent for signed permission and ask you to verify your identity directly.

Global Privacy Control and Do Not Track. Because we do not sell or share personal information or track you across sites, browser “Do Not Track” and Global Privacy Control signals do not change how we handle your information. We treat a Global Privacy Control signal as a valid opt-out request where the law requires.

Shine the Light (Cal. Civ. Code § 1798.83). We do not disclose personal information to third parties for their own direct marketing purposes.

Biometric information

Before verification starts, we ask for your consent in the app. Didit uses face geometry only to confirm that your selfie matches your ID and that you are a real person. Neither Geerho nor Didit sells, leases, trades, or otherwise profits from biometric information. It is permanently destroyed when the purpose of the check has been satisfied, and in any case within 3 years of your last interaction with Geerho, unless the law requires otherwise. This notice is intended to meet biometric privacy laws including the Illinois Biometric Information Privacy Act, Texas Business and Commerce Code § 503.001, and Washington RCW 19.375.

7. Other U.S. state privacy rights

Residents of other states with comprehensive privacy laws, including Colorado, Connecticut, Delaware, Oregon, Texas, Utah, and Virginia, may have rights to access, correct, delete, and obtain a portable copy of their personal information, and to opt out of sale, targeted advertising, and certain profiling. We do not sell personal information, use it for targeted advertising, or use it for profiling that produces legal or similarly significant effects. To make a request, use the methods in section 6. If we deny your request, you may appeal by replying to our decision with the subject “Appeal”; if your appeal is denied, you may contact your state attorney general.

8. EEA, UK, and Switzerland

Geerho Tech LLC is the controller of your personal information. Under the EU and UK General Data Protection Regulation and the Swiss Federal Act on Data Protection, you have the right to:

• access your personal information and receive a copy;
• correct inaccurate information;
• erase your information;
• restrict or object to processing, including processing based on legitimate interests;
• receive your information in a portable format;
• withdraw consent at any time, without affecting earlier processing;
• lodge a complaint with your local data protection authority.

We respond to requests within one month, which may be extended by two further months for complex requests. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

9. Other countries

Depending on where you live, including Canada, Brazil, Australia, Japan, and other countries with data protection laws, you may have similar rights to access, correct, and delete your personal information and to complain to a regulator. Contact us to exercise them; we will respond as your local law requires.

10. International data transfers

Geerho is operated from the United States, and our service providers may process information in the United States and other countries. When we transfer personal information from the EEA, the UK, or Switzerland to countries that have not been found to provide adequate protection, we use safeguards approved by those jurisdictions, such as the European Commission’s Standard Contractual Clauses and the UK International Data Transfer Addendum.

11. Children

The Services are only for people 18 and older. We do not knowingly collect personal information from children under 13 (or under 16 in the EEA and UK). If you believe a child has given us personal information, contact us and we will delete it.

12. Security

We protect personal information with administrative, technical, and physical safeguards, including encrypted connections, database access rules that limit each user to their own private data, storage of sign-in credentials in your device’s secure Keychain, optional two-step verification with an authenticator app, and optional App Lock with your phone’s Face ID, Touch ID, or fingerprint. Geerho staff (moderators and Super Admins) are asked to use two-step verification. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a data breach affects you, we will notify you as the law requires.

13. Changes to this policy

We may update this policy from time to time. We will post the new version here with a new “Last updated” date, and if the changes are material, we will notify you in the app or by email before they take effect.

14. Contact us