Privacy Policy

This policy explains what information Ragreen collects through its website and mobile app, why, and what choices you have about it. Ragreen is a marketplace for listing and finding surplus and near-expiry food — buyers and sellers arrange pickup and payment directly with each other; Ragreen does not process payments or handle money at any point.

Information you provide directly

When you create an account or use the app, you may give us:

• Account details — email address, password (stored as a one-way hash, never in plain text), account type (personal or business), and your full name or business name.
• Profile details — phone number, address, city, country, and an optional map pin, all optional and editable anytime from your account.
• Listing details — product names, descriptions, categories, barcodes, prices, quantities, expiry dates, and photos you upload when selling an item.
• Marketplace activity — items in your cart, orders you place or receive, reviews and ratings you write, and reports you file about a listing.
• Messages to support — anything you send us directly, e.g. to report a problem.

Signing in with Google, Apple, or Facebook

If you sign in using Google, Apple, or Facebook instead of a password, that provider shares your email address and name with us (only what its own permission screen discloses to you first) so we can create or match your Ragreen account. We never see or store your password on that other service. This sign-in is handled by Firebase Authentication (a Google service) — see "Third parties" below.

Location

If you use "Near me" search or set a map pin on your profile or a listing, we use the coordinates you provide (or your device's GPS, with your device-level permission) to show distance and find nearby listings. The mobile app's map picker is powered by OpenStreetMap; loading map tiles sends your general viewing area to OpenStreetMap's servers the same way any map does. We don't track your location in the background — only when you actively use a location feature.

Device and push notification data

If you allow notifications, we store a device token (a random identifier assigned by Apple, Google, or your browser — not your phone number or advertising ID) tied to your account, so we can deliver order updates and alerts through Firebase Cloud Messaging. You can revoke this anytime in your device's notification settings, or by signing out.

Cookies and sessions

The website uses a session cookie to keep you signed in. It's essential to how login works and isn't used for advertising or tracking you across other sites.

What we don't collect

Ragreen has no payment gateway — buyers and sellers settle payment in person at pickup. We never ask for or store card numbers, bank details, or any other payment credential.

How we use this information

• To operate your account, listings, cart, and orders.
• To connect buyers and sellers so a pickup can be arranged.
• To send order updates, expiry reminders, and other alerts you haven't turned off.
• To calculate loyalty points and process reward redemptions.
• To review reported listings and keep the marketplace safe.
• To improve and secure the service.

Third parties

• Firebase (Google) — authentication (including Google/Apple/Facebook sign-in) and push notification delivery.
• Email delivery — sending verification and password-reset emails.
• OpenStreetMap — map tiles for the location picker.
• Advertising — some pages show sponsored placements. These are either images we configure ourselves (not personalized or tracking-based) or, where enabled, Google AdSense units, which follow Google's own advertising and privacy practices for that placement.

We don't sell your personal information to anyone.

Your choices

• Edit or remove your profile details anytime from your account.
• Delete a listing you posted anytime.
• Turn off notifications from your device settings, or by signing out.
• Ask us to delete your account and associated data — see How to Delete Your Data for exactly what that covers.

Children's privacy

Ragreen is not directed at children, and we don't knowingly collect information from anyone under 13. If you believe a child has created an account, contact us and we'll remove it.

Security

Passwords are hashed, not stored in plain text. Access to admin tools is restricted to verified admin accounts. No online service can guarantee perfect security, but we take reasonable technical steps to protect your information.

Changes to this policy

If this policy changes, we'll update the date at the top of this page. Continued use of Ragreen after a change means you accept the updated policy.

Contact us

Questions about this policy, or a request to access or delete your data: privacy@ragreen.eventus.media.