Privacy Policy — The Community Pool

1. Who we are

The Community Pool Ltd ("we", "us", "our") operates The Community Pool mobile application and website. We are registered in England and Wales. For any privacy enquiries, contact us at hello@thecommunitypool.co.uk.

2. Information we collect

Account information. When you register using your address PIN, we collect your road address (road name, flat or house number, postcode). You may optionally provide your name and phone number in your profile.

Subscription and payment information. We use a third-party payment processor (Stripe) to handle card payments. We do not store your full card details. We retain records of subscription status and transaction amounts.

Messages. Chat messages you send to service providers (concierge, chef, etc.) are stored so both parties can view conversation history.

Orders and requests. Shop orders, takeaway orders, pool joins, and service requests are stored and linked to your address.

Push notification token. If you grant permission, we collect your device's push notification token to send you order updates and service alerts.

Noticeboard posts. Posts you make to the community noticeboard are stored and visible to other members on your road. You may post anonymously.

Usage data. We collect standard device and usage data (device type, app version, crash reports) to maintain and improve the service.

3. How we use your information

To authenticate you and associate your account with your address.
To fulfil service requests, orders, and subscriptions.
To enable real-time chat between you and service providers.
To send you push notifications about your orders and service activity (only with your permission).
To improve and maintain the app and website.
To comply with legal obligations.

4. Legal basis for processing (UK GDPR)

Contract. Processing your address, orders, and subscriptions is necessary to deliver the services you have signed up for.

Consent. Push notifications are only sent with your explicit permission, which you can withdraw at any time in your device settings.

Legitimate interests. Usage analytics and crash reporting to keep the service secure and functional.

5. Data sharing

We do not sell your personal data. We share data only with:

Service providers on your road (e.g. Marcus, Chef Priya, Dan) — they see only the order or message details needed to fulfil your request.
Supabase — our database and authentication provider (data stored in the EU).
Stripe — payment processing. Governed by Stripe's privacy policy.
Expo / Firebase — push notification delivery.
Legal authorities — when required by law.

6. Data retention

We retain your account data for as long as your account is active. If you request deletion, we will remove your personal data within 30 days, except where we are required by law to retain certain records (e.g. transaction records for 7 years under UK tax law).

7. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data ("right to be forgotten").
Object to or restrict certain processing.
Data portability — receive your data in a machine-readable format.
Withdraw consent (e.g. push notifications) at any time.

To exercise any right, email hello@thecommunitypool.co.uk. We will respond within 30 days.

8. Children

The Community Pool is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, please contact us and we will delete it promptly.

9. Security

We use industry-standard security measures including encryption in transit (TLS), encrypted storage, and row-level security policies on our database. No method of electronic transmission is 100% secure; we cannot guarantee absolute security.

10. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via the app or by email. Continued use of the service after changes constitutes acceptance.

11. Contact & complaints

For any privacy concerns, contact us at hello@thecommunitypool.co.uk. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.