Privacy Policy

Who we are

Almari is a peer-to-peer community marketplace for Indian ethnic wear in the UK diaspora, operated by Almari (contact: reachalmari@gmail.com, domain: almari.uk).

When this policy says "we", "us", or "Almari" it means the Almari platform and its operator.

What data we collect and why

We collect only what we need to run the marketplace. Nothing more.

When you register

• Your email address — to verify your account and send you transactional notifications
• A password — stored securely, never readable by us (handled by Supabase Auth)

When you complete your profile

• Your first name and last initial — shown to other members on listings and transactions. Your full surname is never stored or shown.
• Your body measurements (bust, waist, hips, height, UK shoe size) — used only to sort listings by fit for you. Only you can see your measurements. They are never shown to other members, never used for advertising, never sold.

When you list an item

• Photos of the item — stored and displayed on your listing
• Item details — category, condition, colour, measurements, provenance (city, year, original price)
• Your reason for selling — a private motivation (never shown publicly) and a public phrase you select from a curated list

When you buy or sell

• Transaction details — what was bought, for how much, when, by whom
• Postage and tracking information
• Payment information — handled entirely by Stripe. We never see or store your full card number. See Stripe's privacy policy at stripe.com/gb/privacy.

Automatically

• Basic usage data — which screens you visit, how the app performs. Used only to fix bugs and improve the experience. No advertising profiles built.

What we do not collect

• Your full surname (first name and last initial only)
• Your home address (postage address collected by Royal Mail at dispatch, not stored by Almari)
• Your phone number
• Your social media profiles
• Any data about your ethnicity, religion, or background
• Location data or GPS tracking

How we use your data

Data	Why we use it
Email	Account verification, transactional notifications (sale, dispatch, delivery)
Name	Shown to other members in transactions
Measurements	Sort listings by fit for you — no other use
Listing content	Display your listing to other members
Transaction history	Run the marketplace, resolve disputes, generate provenance certificates
Usage data	Fix bugs, improve the app

We do not use your data for advertising. We do not sell your data. We do not share your data with third parties except as described below.

Who we share data with

We use a small number of trusted services to run Almari:

Service	What they receive	Why
Supabase	All platform data (stored in their EU infrastructure)	Database and authentication
Stripe	Payment details	Processing payments and seller payouts
Royal Mail / Sendcloud	Sender and recipient name and address at dispatch	Generating postage labels
Expo / Apple / Google	Push notification tokens	Sending you app notifications

Each of these services processes data only as instructed by us, under their own data processing agreements. We do not sell data to any of them or allow them to use it for their own purposes.

Your measurements are sensitive data

Body measurements are personal. We treat them accordingly:

• They are stored securely in your account
• Only you can see them
• They are used for one purpose only: sorting listings by fit
• They are deleted when you delete your account
• They are never shared, never sold, never used for any other purpose

How long we keep your data

Data	Retention
Account data (name, email)	Until you delete your account
Measurements	Until you delete your account
Listing data	Kept after account deletion — anonymised, not linked to you
Transaction records	Kept for 7 years (legal requirement for financial records) — anonymised after account deletion
Usage data	90 days

When you delete your account, your personal details are removed. Your listings and transaction records are kept in anonymised form to preserve the provenance chain for other members who were party to those transactions.

Your rights

Under UK GDPR you have the right to:

• Access — ask us what personal data we hold about you
• Correction — ask us to correct inaccurate data
• Erasure — ask us to delete your account and personal data
• Portability — ask for a copy of your data in a readable format
• Object — object to how we use your data

To exercise any of these rights, email us at reachalmari@gmail.com. We will respond within 30 days.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk if you believe we have handled your data incorrectly.

Cookies

Almari is a mobile app. We do not use browser cookies. The app uses local device storage only to keep you logged in between sessions.

Children

Almari is for adults aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a child has registered, please contact us immediately at reachalmari@gmail.com.

Changes to this policy

We may update this policy from time to time. We will notify you of material changes via the app or by email. The date at the top of this page shows when it was last updated.

Contact

For any privacy question or to exercise your rights:

Email: reachalmari@gmail.com
Website: almari.uk

---

Almari — From our cupboards to yours.