Privacy Policy

1. Information we collect

Information you provide

• Account details such as your name, email address, profile photo, and sign-in information.
• Profile and location information, including your city, neighborhood, or general service area. Cache Kits has no access to your device's GPS and never asks for location permission.
• If you list items, a private pickup address. It is never public — it is shown only to a renter whose booking you have accepted, and only for that booking.
• Listing information, photos, descriptions, prices, availability, and condition documentation.
• Rental requests, pickup and return records, reviews, claims, support requests, and communications made through Cache Kits.

Payments and identity verification

Payments and payouts are processed by third-party payment providers, including Stripe. Card numbers and other complete payment credentials are collected by the payment provider and are never stored by Cache Kits. Cache Kits receives transaction records — amount, status, dates, and the rental a payment relates to.

If you list items and receive payouts, Stripe may separately collect identity, verification, tax, bank, or payout details in order to open and maintain your payout account. Those details are handled by Stripe under its own privacy policy and flow.

Separately, Cache Kits offers optional identity verification through Stripe Identity. If you choose to verify, Stripe collects a government-issued photo ID and a selfie, and processes biometric information, such as facial geometry, to check that the face in the selfie matches the ID. Stripe presents its own verification notices and permissions. Verification is linked to your Cache Kits account; Cache Kits records the successful result to show the green check next to your name. You can request or accept rentals without this optional verification. Stripe payout-account checks for owners remain separate.

Stripe handles the submitted verification information and may make it available to Cache Kits through its verification tools. Cache Kits uses identity verification for marketplace trust and security, not advertising or tracking. For Stripe’s handling, retention, and verification permissions, see Stripe’s Privacy Policy and Stripe Identity privacy information. You can contact support@cachekits.com with questions about your Cache Kits verification record.

Information collected automatically

On the cachekits.com website we may collect device, browser, IP address, log, referral, approximate location, and usage information, and we use cookies and similar technologies as described in section 4.

In the Cache Kits app, Stripe collects information about how its payment components are used. It uses this product interaction data for analytics and payment functionality, including fraud prevention, and may link it to your identity. See Stripe’s mobile SDK privacy details. The app does not collect the Advertising Identifier (IDFA) and does not use device identifiers to track you across other companies' apps and websites.

What the Cache Kits iOS app collects

The following summarizes information handled through the Cache Kits iOS app and its service providers. Uses include marketplace features, diagnostics, analytics, and fraud prevention, as described below. Payment and identity-verification information is also handled by Stripe as described above.

• Email address — linked to your account. Used for sign-in, account management, and service notices.
• Name — linked to your account. Shown on your profile so renters and owners know who they are dealing with.
• Coarse location — linked to your account. City, neighborhood, or approximate area only, used to show nearby items and set your service area. The app has no access to your device's GPS and never asks for location permission.
• Pickup address — linked to your account. If you list items, you provide a private street address used as your default pickup spot. It is never shown publicly — it is revealed only to a renter whose booking you have already accepted, and only for that booking. It is not used to place you on any public map.
• Identity document, verification selfie, and biometric information — linked to your account when you choose optional Stripe Identity verification. Stripe processes the ID and selfie, including facial geometry for matching. Cache Kits uses the verification result for the green check and marketplace trust and security. This is separate from the photos you post on listings or take at pickup and return, and from Stripe’s payout-account checks. See “Payments and identity verification” above.
• Photos or videos — linked to your account. Listing photos and condition documentation at pickup and return.
• Payment information — linked to your account. Transaction records only. Card details are handled by Stripe and never reach Cache Kits storage.
• Messages — linked to your account. Messages you send to other members through Cache Kits to arrange a rental.
• Customer support content — linked to your account. Messages you send us for help, and our replies.
• Other user content — linked to your account. Reviews you write, your profile bio, and the descriptions on your listings.
• User ID — linked to your account. Your account identifier and username.
• Device ID — linked to your account. A device identifier and notification token, stored only so the notifications you turned on reach the right device. This is not an advertising identifier: the app never accesses the Advertising Identifier (IDFA).
• Purchase history — linked to your account. Your rental transactions — what you booked, when, and for how much.
• Crash data — linked to your account. Error reports created when the app fails, used only to diagnose and fix problems. See “Crash reports and diagnostics” below.
• Other diagnostic data — linked to your account. Technical details attached to those reports, like the page, your browser or device type, and the app version on your device.
• Product interaction — includes use of Stripe’s payment components. Stripe uses this information for analytics and payment functionality, including fraud prevention, and may link it to your identity. Stripe says it does not use this data for advertising or tracking.

We do not use information collected through the app to track you across other companies’ apps or websites for advertising or advertising measurement. Section 5 explains our approach.

Crash reports and diagnostics

If the app or website runs into an error, we record a technical report so we can find and fix the problem. The report can include the error message, the code path that failed, the page you were on, your browser or device type, and the reference code shown on the error screen. We use these reports only to diagnose and fix problems. They are not used for advertising or tracking.

2. How we use information

• Provide, operate, secure, and improve Cache Kits.
• Create accounts and enable listings, requests, bookings, payments, payouts, messages, pickup, return, reviews, identity verification, and claims.
• Help renters and owners coordinate with each other.
• Prevent fraud, abuse, unsafe conduct, and violations of our Terms.
• Provide customer support and send service, security, and transaction notices.
• Measure product performance, understand how people discover and use Cache Kits, and measure whether our advertising campaigns are working.
• Comply with legal, tax, accounting, and regulatory obligations.

3. How information is shared

We may share information in the following circumstances:

• With marketplace participants. Information needed to evaluate and complete a rental may be shared between renters and owners.
• With service providers. Vendors may support hosting, authentication, analytics, communications, payments, fraud prevention, identity verification, customer support, and other operations.
• For safety and legal reasons. We may disclose information when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or enforce agreements.
• For a business transaction. Information may be transferred in connection with a merger, financing, acquisition, reorganization, or sale of assets.
• With your direction or consent. We may share information when you ask us to or authorize an integration.

Public profiles, listings, photos, reviews, and related marketplace information may be visible to other users and, where applicable, to the public and search engines.

We do not sell your personal information for money, and we do not disclose personal information to data brokers.

We do use advertising cookies on the cachekits.com website, as described in section 4. Under some state privacy laws — including the California Consumer Privacy Act — that activity counts as “sharing” personal information for cross-context behavioral advertising, because advertising providers receive online identifiers and page-activity information through those cookies. You can opt out at any time using the control in section 4, and we honor Global Privacy Control. This sharing happens on the website only, never in the Cache Kits app.

Automated content checks

When you publish a listing or a kit, its public text and photos are checked for content our Terms prohibit before it goes live. For an item that means the title, brand, model, category, size, color, description, included accessories, and listing photos; for a kit, its title text, description, and the setup photos you add. These are sent to Google Cloud’s content-moderation services (Cloud Natural Language and Cloud Vision), which also read any text visible in a photo. This check is part of publishing, not an optional feature, and it is separate from the optional AI help below.

The check receives only that listing content. It does not receive your name, email address, exact pickup address, payment details, or your messages with other people. Cache Kits keeps the result of the check (whether the listing passed and, if not, which kind of content was flagged), not a copy of what Google returned. A listing the check cannot clear stays unpublished until the Cache Kits team reviews it.

AI features

Cache Kits offers optional AI help when you create a listing or a kit: suggesting a description, identifying an item from a photo, and removing a photo’s background. Cache Kits asks your permission before it sends any photo or text to AI for the first time. Once you allow it, the photo or text you supplied for one of these features is sent to our AI provider, Google’s Gemini models, so it can generate the result. In the Cache Kits iPhone app, background removal first runs on your phone using Apple’s built-in tools, and your photo is sent to Google only if that can’t find the item or you choose Enhance.

We send only what the feature needs: the photo or the text you are working on, plus the instructions for the task. We do not send your name, email address, location details, or your messages with other people.

Cache Kits does not use your photos or text to train AI models. Everything the AI produces is a draft — you see it, you can change it, and nothing is published until you publish it. If you choose “Not now,” your photo or text won’t be sent to Google for these features. The iPhone app may still remove the background on your device using Apple’s tools.

4. Cookies, analytics, and advertising

We use necessary storage to operate this website and remember your privacy choices. Optional analytics and advertising stay off until you accept them. You can accept all, reject optional tracking, or customize each purpose. Continuing to browse does not count as consent.

• Necessary — always on. Storage needed to operate the site and remember your privacy choices. It is not used for advertising.
• Analytics — optional. Google Analytics helps us understand website visits and usage. Google advertising features are disabled for this analytics stream in our website code.
• Advertising — optional. Meta (Facebook and Instagram) Pixel and the Google Ads tag measure website advertising and may use online identifiers and page activity to personalize ads. Accepting advertising permits those website tags. TikTok is not connected and does not receive data from this website.

Your choice is remembered in this browser when storage is available. We request fresh permission after an accepted choice expires or when a material change needs new permission. Global Privacy Control keeps all optional tracking off while the signal is active.

These controls apply to this landing website in this browser. They do not change your account, service communications, or the Cache Kits app. Turning tracking off stops future collection here; it does not delete information already received by a provider. Our code removes known first-party tracking cookies on opt-out.

5. Tracking and the Cache Kits mobile app

The Cache Kits app does not track you. Advertising technologies described in section 4 run on the cachekits.com website only. They are absent from the app by design, and the app is built so that they cannot run in it.

• The Cache Kits app does not access the Advertising Identifier (IDFA) and does not ask for permission to track. Because the app does not track, no App Tracking Transparency prompt is shown.
• The app contains no third-party advertising SDKs, attribution SDKs, or ad-network measurement SDKs.
• We do not link information collected through the app with data from third-party apps or websites for advertising or advertising measurement.
• We do not combine website advertising data with your Cache Kits account, and we do not send app activity to advertising providers.
• Information you provide to Cache Kits — your account details, listings, rentals, identity-verification information, and messages — is used to run the marketplace, not to advertise to you elsewhere.

If this ever changes, we will update this policy, update our App Store privacy disclosures, and request your permission through the App Tracking Transparency prompt before any tracking begins.

6. Data retention

While your account is active, we retain information needed to provide Cache Kits and complete your transactions. Account deletion removes your personal profile and content as described below. Any information we are legally required to retain is limited to the necessary records and restricted to authorized administrators. Retention periods depend on the record and the applicable legal requirement.

7. Your choices and rights

You may update certain account and profile information through Cache Kits. You may also request access, correction, a copy of your personal information, or deletion of your account. Depending on where you live, additional privacy rights may apply. We may need to verify your identity before completing a request. The limited records retained after account deletion are described below.

Requesting account deletion

To delete your Cache Kits account and the personal information associated with it, email support@cachekits.com from the address on your account with the subject line “Delete my account,” or use the account deletion option in the Cache Kits app. We confirm receipt within 3 business days and complete verified deletion requests within 30 days.

Deletion removes your personal profile information, account access, saved preferences, and the personal content you contributed, including listing content, photos, messages, and reviews. Where a shared booking needs a reference to your former account, it shows “Deleted user” without a profile link or your contact details or pickup address. Removed photos and messages are replaced with a notice that the content is no longer available.

The other participant keeps their own booking history, including booking references, dates, status, and their own payment or refund details. Their own messages and photos are not deleted when you delete your account. This does not give them continued access to your removed personal information or content.

Where legally required, Cache Kits retains limited financial records, such as transaction dates, amounts, fees, refunds, payouts, booking references, and payment-provider reference IDs. These records and a minimal deletion record are restricted to authorized administrators; they are not a copy of your full account history. We do not include identity-document images, profile details, message contents, or a photo archive in the deletion report. Any separate retention required by law is limited to the applicable records and period. A reference ID may remain linked to a payment record and is not necessarily anonymous.

Copies in our encrypted backups are kept for up to 50 days and then deleted automatically; they are not used to restore your account. Our payment provider, Stripe, keeps its own records of transactions under its privacy policy.

Full details of how to reach us, and what to expect, are on our support page.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information. No online service can guarantee absolute security, so you should use a strong sign-in method and protect access to your account.

9. Age requirement and children

Cache Kits is an adults-only service. You must be at least 18 years old to use Cache Kits. The service is not directed to children, we do not knowingly collect personal information from anyone under 18, and people under 18 may not create accounts, list items, or enter rental transactions. This matches the eligibility requirement in our Terms.

If we learn that someone under 18 has created an account, we will close it and delete the associated personal information. If you believe a child provided personal information to Cache Kits, contact us at support@cachekits.com and we will remove it.

10. Third-party services

Cache Kits may link to or integrate with third-party services. Their privacy practices are governed by their own policies, not this policy.

Cache Kits’s AI features send the content you submit to Google (Gemini). See AI features above.

11. Changes to this policy

We may update this policy as Cache Kits evolves. We will post the revised version here and update the effective date. We may provide additional notice when a change is material.

12. Contact

Questions or privacy requests can be sent to support@cachekits.com, a monitored address we answer within 2 business days. See our support page for all the ways to reach us.