Privacy Policy

We collect only what is needed to run the marketplace, Requests request board, stores, eatery directory, creator posts, messages, games, referrals, wallet, payments, safety, and token features:

We do not ask for or store your Pi passphrase or private keys. We never have access to them.

We use your information to:

• provide and operate the marketplace, request board, wallet, rewards, and tiers;
• process claims, wallet withdrawals, wallet verification, and Pi payments for Supapi features — Supapi does not process, hold, or settle buyer–merchant payments;
• keep the Service secure and prevent fraud, abuse, and rule-breaking;
• provide support and respond to your requests;
• comply with legal obligations.

We do not sell your personal information. We share it only with the providers that help us run the Service, and only as needed. These providers process data on our behalf:

• Pi Network — sign-in, wallet/payment verification, and Pi payments. Supapi remains an independent app and is not endorsed by the Pi Core Team;
• Supabase — database and file storage;
• Vercel — application hosting;
• OpenAI — automated content moderation. Text and images you submit may be sent to OpenAI to detect prohibited or unsafe content. AI moderation is optional and only runs when enabled;
• Resend — transactional email delivery (for example, forwarding a Contact message);
• when required by law, or to protect the Service, our users, or the public;
• as public marketplace content — your listings, Requests, storefront, and reviews are visible to others by design.

Supapi is an independent service. We are not affiliated with, endorsed by, or sponsored by any of these providers, and their names and marks belong to their respective owners.

We use only essential cookies/storage needed to sign you in and keep the Service working. We do not currently use third-party advertising or cross-site tracking. If we add analytics in the future, we will update this policy and, where required, ask for your consent.

We keep account and transaction records for as long as your account is active and as needed to provide the Service, resolve disputes, prevent abuse, and meet legal or accounting requirements. When you request deletion, your account enters a short cooling-off period; after that we remove your personal content and anonymise your profile. We retain financial and audit records (such as ledger entries and withdrawals) that we are legally required to keep, under a pseudonymous identifier. On-chain data persists independently of us (see section 3).

We take reasonable technical and organizational measures to protect your information, including access controls and encryption in transit. No system is perfectly secure, so we cannot guarantee absolute security. Keep your Pi account and device credentials safe.

The Service is not intended for anyone under 18 (or the age of majority where they live). When you first sign in we ask you to declare your date of birth and confirm you are 18 or older, and money and content features stay locked until you do. We do not knowingly collect information from children. If you believe a child has used the Service, contact us and we will take appropriate steps.

Your information may be processed in countries other than your own. Where it is transferred, we take steps to protect it consistent with this policy and applicable law.

We may update this policy from time to time. Material changes will be reflected here with a new “last updated” date. Continued use of the Service after changes take effect means you accept the updated policy.

Questions or requests about your privacy, including access, correction, export, or deletion, can be sent through our Contact form. This is the fastest route and lands directly in the team’s inbox.