Privacy Policy

1. Information we collect

Information you provide

• Account details such as your name, email address, profile photo, and sign-in information.
• Profile and location information, including your city, neighborhood, or general service area. Cache has no access to your device's GPS and never asks for location permission.
• If you list items, a private pickup address. It is never public — it is shown only to a borrower whose booking you have accepted, and only for that booking.
• Listing information, photos, descriptions, prices, availability, and condition documentation.
• Rental requests, pickup and return records, reviews, claims, support requests, and communications made through Cache.

Payments and identity verification

Payments and payouts are processed by third-party payment providers, including Stripe. Card numbers and other complete payment credentials are collected by the payment provider and are never stored by Cache. Cache receives transaction records — amount, status, dates, and the rental a payment relates to.

If you list items and receive payouts, Stripe may separately collect identity, verification, tax, bank, or payout details in order to open and maintain your payout account. Those details are handled by Stripe under its own privacy policy and flow. Separately, when Cache requires identity verification in the iOS app, a government-issued identity document is collected through Stripe Identity for that verification. This identity-document information is linked to your Cache account, used only to provide identity-verification and marketplace functionality, and is not used for tracking. Cache does not collect a selfie or biometric data as part of this flow.

Information collected automatically

On the cachekits.com website we may collect device, browser, IP address, log, referral, approximate location, and usage information, and we use cookies and similar technologies as described in section 4.

In the Cache app, we collect product interaction data — screens viewed and features used — for analytics only. This is not linked to your identity. The app does not collect the Advertising Identifier (IDFA) and does not use device identifiers to track you across other companies' apps and websites.

What the Cache iOS app collects

This is the complete list of what the Cache iOS app collects. Everything except the last is collected only to make app features work; none of it is used for tracking, advertising, or third-party marketing.

• Email address — linked to your account. Used for sign-in, account management, and service notices.
• Name — linked to your account. Shown on your profile so borrowers and owners know who they are dealing with.
• Coarse location — linked to your account. City, neighborhood, or approximate area only, used to show nearby items and set your service area. The app has no access to your device's GPS and never asks for location permission.
• Pickup address — linked to your account. If you list items, you provide a private street address used as your default pickup spot. It is never shown publicly — it is revealed only to a borrower whose booking you have already accepted, and only for that booking. It is not used to place you on any public map.
• Government-issued identity document — linked to your account. Collected through Stripe Identity only when identity verification is required, and used only for identity verification and app functionality. It is not used for tracking, advertising, or third-party marketing. Cache does not collect a selfie or biometric data for this verification flow.
• Photos or videos — linked to your account. Listing photos and condition documentation at pickup and return.
• Payment information — linked to your account. Transaction records only. Card details are handled by Stripe and never reach Cache storage.
• Messages — linked to your account. Messages you send to other members through Cache to arrange a rental.
• Customer support content — linked to your account. Messages you send us for help, and our replies.
• Other user content — linked to your account. Reviews you write, your profile bio, and the descriptions on your listings.
• Search history — linked to your account. Searches you choose to save, so Cache can re-run them and tell you when something matches.
• User ID — linked to your account. Your account identifier and username.
• Device ID — linked to your account. A device identifier and notification token, stored only so the notifications you turned on reach the right device. This is not an advertising identifier: the app never accesses the Advertising Identifier (IDFA).
• Purchase history — linked to your account. Your rental transactions — what you booked, when, and for how much.
• Crash data — linked to your account. Error reports created when the app fails, used only to diagnose and fix problems. See “Crash reports and diagnostics” below.
• Other diagnostic data — linked to your account. Technical details attached to those reports, like the page, your browser or device type, and the app version on your device.
• Product interaction — not linked to your identity. Analytics only, used to understand which features are used and improve the app.

The Cache app declares NSPrivacyTracking = false in its privacy manifest. No data collected by the app is used to track you across apps or websites owned by other companies, and no advertising or attribution technology runs inside the app. Section 5 explains this in full.

Crash reports and diagnostics

If the app or website runs into an error, we record a technical report so we can find and fix the problem. The report can include the error message, the code path that failed, the page you were on, your browser or device type, and the reference code shown on the error screen. We use these reports only to diagnose and fix problems. They are not used for advertising or tracking.

2. How we use information

• Provide, operate, secure, and improve Cache.
• Create accounts and enable listings, requests, bookings, payments, payouts, messages, pickup, return, reviews, identity verification, and claims.
• Help borrowers and owners coordinate with each other.
• Prevent fraud, abuse, unsafe conduct, and violations of our Terms.
• Provide customer support and send service, security, and transaction notices.
• Measure product performance, understand how people discover and use Cache, and measure whether our advertising campaigns are working.
• Comply with legal, tax, accounting, and regulatory obligations.

3. How information is shared

We may share information in the following circumstances:

• With marketplace participants. Information needed to evaluate and complete a rental may be shared between borrowers and owners.
• With service providers. Vendors may support hosting, authentication, analytics, communications, payments, fraud prevention, identity verification, customer support, and other operations.
• For safety and legal reasons. We may disclose information when reasonably necessary to comply with law, protect rights and safety, investigate misuse, or enforce agreements.
• For a business transaction. Information may be transferred in connection with a merger, financing, acquisition, reorganization, or sale of assets.
• With your direction or consent. We may share information when you ask us to or authorize an integration.

Public profiles, listings, photos, reviews, and related marketplace information may be visible to other users and, where applicable, to the public and search engines.

We do not sell your personal information for money, and we do not disclose personal information to data brokers.

We do use advertising cookies on the cachekits.com website, as described in section 4. Under some state privacy laws — including the California Consumer Privacy Act — that activity counts as “sharing” personal information for cross-context behavioral advertising, because advertising providers receive online identifiers and page-activity information through those cookies. You can opt out at any time using the control in section 4, and we honor Global Privacy Control. This sharing happens on the website only, never in the Cache app.

AI features

Cache offers optional AI help when you create a listing or a kit: suggesting a description, identifying an item from a photo, and removing a photo’s background. When you use one of these features, the photo or text you supplied is sent to our AI providers so they can generate the suggestion. Those providers are Lovable AI Gateway and Google’s Gemini models — either through that gateway, or directly from Google if the gateway is unavailable.

We send only what the feature needs: the photo or the text you are working on, plus the instructions for the task. We do not send your name, email address, location details, or your messages with other people.

Cache does not use your photos or text to train AI models. Everything the AI produces is a draft — you see it, you can change it, and nothing is published until you publish it. If you would rather not use AI at all, don’t use those buttons; every field can be filled in by hand.

4. Cookies, analytics, and advertising

On the cachekits.com website we use two kinds of technology:

• Necessary. Cookies and local storage required to operate the site, keep it secure, and remember your privacy choice.
• Advertising. Cookies and tags from advertising providers that let us measure whether our ad campaigns bring people to Cache, and show Cache ads to people who have visited the site. These providers receive online identifiers and information about the pages you viewed. We currently use the Meta (Facebook) pixel for this, loaded through Google Tag Manager.

This website does not run an analytics product. The only third-party technology it loads is the advertising tag described above, and it loads only with consent. The product analytics described in section 1 runs in the Cache app, not here.

Advertising technologies run on the cachekits.com website only. They are not present in the Cache app, and information collected by the app is never sent to advertising providers or combined with advertising data. Section 5 explains this in full.

Advertising measurement is on by default on this website, and you can turn it off at any time using the control below. Your choice is remembered across cachekits.com and applies to future visits from the same browser.

We also honor supported browser-based opt-out signals, including Global Privacy Control — if your browser sends that signal, advertising stays off, no advertising tag is allowed to load, and the control below cannot re-enable it.

5. Tracking and the Cache mobile app

The Cache app does not track you. Advertising technologies described in section 4 run on the cachekits.com website only. They are absent from the app by design, and the app is built so that they cannot run in it.

• The Cache app does not access the Advertising Identifier (IDFA) and does not ask for permission to track. Because the app does not track, no App Tracking Transparency prompt is shown.
• The app contains no third-party advertising SDKs, attribution SDKs, or ad-network measurement SDKs.
• We do not link information collected through the app with data from third-party apps or websites for advertising or advertising measurement.
• We do not combine website advertising data with your Cache account, and we do not send app activity to advertising providers.
• Information you provide to Cache — your account details, listings, rentals, identity-verification information, and messages — is used to run the marketplace, not to advertise to you elsewhere.

If this ever changes, we will update this policy, update our App Store privacy disclosures, and request your permission through the App Tracking Transparency prompt before any tracking begins.

6. Data retention

We retain information for as long as reasonably needed to provide Cache, complete transactions, maintain records, resolve disputes, prevent fraud, enforce agreements, and meet legal obligations. Retention periods vary based on the type of information and why it is collected.

7. Your choices and rights

You may update certain account and profile information through Cache. You may also request access, correction, a copy of your personal information, or deletion of your account. Depending on where you live, additional privacy rights may apply. We may need to verify your identity before completing a request, and some information may be retained where permitted or required by law.

Requesting account deletion

To delete your Cache account and the personal information associated with it, email support@cachekits.com from the address on your account with the subject line “Delete my account,” or use the account deletion option in the Cache app. We confirm receipt within 3 business days and complete verified deletion requests within 30 days.

Deletion removes your profile, listings, photos, messages, and account details. We retain a limited record of completed transactions where we are required to for tax, accounting, fraud-prevention, and legal purposes, and we may retain information needed to resolve an open dispute or claim. Anonymized or aggregated information that can no longer identify you may be retained.

Full details of how to reach us, and what to expect, are on our support page.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information. No online service can guarantee absolute security, so you should use a strong sign-in method and protect access to your account.

9. Age requirement and children

Cache is an adults-only service. You must be at least 18 years old to use Cache. The service is not directed to children, we do not knowingly collect personal information from anyone under 18, and people under 18 may not create accounts, list items, or enter rental transactions. This matches the eligibility requirement in our Terms.

If we learn that someone under 18 has created an account, we will close it and delete the associated personal information. If you believe a child provided personal information to Cache, contact us at support@cachekits.com and we will remove it.

10. Third-party services

Cache may link to or integrate with third-party services. Their privacy practices are governed by their own policies, not this policy.

Cache’s AI features send the content you submit to Lovable AI Gateway and to Google (Gemini). See AI features above.

11. Changes to this policy

We may update this policy as Cache evolves. We will post the revised version here and update the effective date. We may provide additional notice when a change is material.

12. Contact

Questions or privacy requests can be sent to support@cachekits.com, a monitored address we answer within 2 business days. See our support page for all the ways to reach us.