Privacy policy
2026-09-09
1. Controller
KIES Sàrl-S, 59 rue de Sanem, L-4382 Ehlerange, Luxembourg, VAT LU33314114 is the controller for re-Appear and re-appear.com. Contact info@re-appear.com for privacy questions and requests.
2. Account and service data
We process email addresses, login identifiers, profile information, chosen country and language, listings, photos, optional video links, favorites, messages, notification preferences, reports and blocks. The authentication service processes passwords securely. Optional Google or Apple login supplies the account data that provider releases, possibly an Apple relay email address. Processing to deliver the requested service relies on GDPR Article 6(1)(b). Account information is needed to sign in and country confirmation to publish listings. Biography, website, videos and interests are optional.
3. Visibility
Profile username, first and last name, photo, country, biography, website and published listings may be shown to other users and website visitors. Do not place confidential data there. Conversation partners see chat messages; authorized moderators may review reported content. Login email and IP logs are not intended as public profile fields; authorized administrators can access them for their duties.
4. Security and approximate country
Login IP addresses, timestamps and, where available, the approximate country inferred from the IP are logged for account security and fraud prevention. GPS location is not required. The basis is our legitimate interest in protecting users and the service, GDPR Article 6(1)(f). Login security data is retained for up to 90 days, including after account deletion, then automatically removed. IP country is not reliable proof of physical location.
5. Email, push and interests
Confirmation, security and requested service emails support the account. Push notifications require device permission and use device identifiers and push tokens; content may appear on a lock screen. Preferences can be changed in settings. Weekly interest emails contain up to eight new matching listings and require voluntary opt-in. Unsubscribe through the email or interest settings. Selection uses chosen categories, not decisions with legal effect. Optional marketing email relies on consent, GDPR Article 6(1)(a), which may be withdrawn for the future.
6. Providers and external content
Supabase provides authentication, database and file storage; Hostinger hosts the website; Resend sends email; Expo and Apple/Google deliver push notifications. Providers receive data needed for those services. External logins and YouTube playback also involve the providers’ privacy policies. YouTube loads only after pressing Play and may receive IP and device information. The website may use Google advertising after the relevant consent choice in its consent manager. Depending on the provider, data may be processed outside the EEA. Necessary transfers require suitable safeguards such as EU standard contractual clauses or an applicable adequacy decision. Contact support for details of providers, recipient countries and safeguards.
7. Retention and deletion
Account data is kept to operate the account until changed or deleted. Automated account deletion removes the profile, listings, photos and associated chats/favorites; technical retries may be necessary. Reports and blocks are removed at the latest when the relevant account is deleted; completed user reports are removed after 90 days. Security logs follow the 90-day period above. Legal retention duties or specific legal claims may require separate restricted retention. Sales statistics retain item title, category, condition, currency, price and sale date, losing their listing link when the listing is deleted. They have no intended buyer/seller fields and support future price comparisons; report personal information in a title for removal. Technical backups expire according to the respective backup cycles and must not permanently restore deleted data into the active service.
8. Your rights
Subject to the GDPR, you can request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. Withdraw consent at any time without affecting earlier lawful processing. Contact info@re-appear.com; proportionate identity verification may be required. You can complain to Luxembourg’s CNPD (https://cnpd.public.lu) or another competent supervisory authority. We do not make solely automated decisions with legal or similarly significant effects.