Privacy Policy

Last updated: April 10, 2026

Buyya (“Buyya,” “we,” “us,” or “our”) is operated by Tanner Sherman, a Nebraska sole proprietor doing business as Buyya. This Privacy Policy describes how we collect, use, share, and protect your personal information when you use the Buyya mobile application, website at giftd.vercel.app (“Platform”), or any related services.

By using Buyya, you agree to the collection and use of information in accordance with this policy. If you do not agree, do not use the Platform.

1. Who We Are

Operator: Sherman Strategy P.C.
Contact: buyya.reviewer@gmail.com
Phone:
Address: Gretna, Nebraska, United States

2. Information We Collect

2.1 Information You Provide

Consumer accounts: Name, phone number (optional), email (optional), ZIP code, and gift preferences (e.g. coffee, pizza, etc.).
Sponsor accounts: Name, business name, email, phone, professional category, business address, bio, website, photo URL, years in business, and payment information processed by Stripe.
Messages:Content of messages sent between consumers and sponsors through the Platform's messaging feature.
Ratings and reviews: Star ratings and thank-you messages consumers send to sponsors after gift redemption.
Bug reports: Descriptions of problems you submit through the in-app bug report button, plus the page URL and device user agent automatically captured at the time of submission.

2.2 Information Collected Automatically

Location data:With your permission, we collect your precise device location (foreground and background) to detect when you enter a Buyya “gift zone” (a geographic area around a participating intersection) and to show you nearby gifts. Location is processed on-device for geofence detection; coarse location coordinates are sent to our servers only when you actively request a gift feed or when a geofence entry is triggered.
Push notification tokens: If you grant notification permission, we store an anonymous device token to deliver alerts about gifts near you.
Usage data: Pages visited, buttons tapped, gifts claimed, messages sent, and timestamps. Used for product improvement and fraud prevention.
Device information: Operating system, app version, and device model.

3. How We Use Your Information

Provide the core Buyya service (showing nearby gifts, processing claims, facilitating vendor redemption).
Deliver push notifications when you enter a gift zone.
Process payments (sponsor wallet loads, platform fees).
Enable sponsor-to-consumer messaging for the gift follow-up.
Detect and prevent fraud, abuse, and spam (including our ghost-score throttling for consumers who claim without engaging).
Debug issues through bug report submissions.
Communicate with you about your account and the service.
Comply with legal obligations.

4. How We Share Your Information

We do not sell your personal information. We share your information only with the following categories of third parties:

Sponsors: When you claim a gift, the sponsor who funded it sees your first name and (if you provided one) phone number so they can send you a one-time introductory message. They do not see your home address, email, or any history of claims made from other sponsors.
Vendors: When you redeem a gift at a vendor location, the vendor sees only the redemption code and gift item. They do not receive your name, phone, or location.
Stripe, Inc.: Payment processor. Handles all card data. We never store your card number on our servers. See Stripe's privacy policy.
Turso (ChiselStrike Inc.): Managed database provider. Our Platform data is stored on Turso infrastructure.
Vercel Inc.: Web hosting and serverless function provider.
Anthropic PBC:Provider of the Claude AI model that powers the sponsor support chatbot. When a sponsor uses the chatbot, their question and a contextual snapshot of their account (wallet balance, locked territories, campaigns) are sent to Anthropic's API.
Resend Inc.: Transactional email provider for system notifications and bug alerts.
OpenStreetMap / Nominatim: Address geocoding service used when sponsors add vendor addresses.
Expo (650 Industries, Inc.): Mobile app framework; provides push notification delivery infrastructure.
Legal compliance: We may disclose information if required by law, subpoena, or to protect the rights, property, or safety of Buyya, our users, or others.

5. Data Retention

Active consumer accounts: Retained until you delete your account or request deletion.
Deleted consumer accounts: Name and phone number are scrubbed from our database within 24 hours of deletion. Gift redemption history is retained in anonymized form (linked only to a deletion marker) for sponsor accounting purposes for 24 months.
Sponsor accounts: Retained for the life of the business relationship plus 7 years for tax and contractual record requirements.
Bug reports: Retained indefinitely for product improvement but scrubbed of reporter PII after 12 months.

6. Your Rights

Access: Request a copy of the personal data we hold about you.
Correction: Correct inaccurate personal data.
Deletion:Delete your account and associated data using the “Delete my account” button in the mobile app Profile tab, or by emailing us.
Opt out of location: Disable location permissions in your device settings. Note: most Buyya features will stop working.
Opt out of notifications: Disable push notifications in your device settings.
California residents: You have additional rights under the CCPA, including the right to know, delete, and opt out of sale (we do not sell your data).
EU/UK residents: You have additional rights under GDPR, including portability and the right to lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at buyya.reviewer@gmail.com.

7. Children's Privacy

Buyya is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you become aware that a child has provided us with personal information, please contact us and we will delete it.

8. Security

We use industry-standard security measures including HTTPS encryption in transit, encrypted database storage, and access controls. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this policy from time to time. The “Last updated” date at the top will reflect the change. For material changes, we will notify you through the app or via the contact information you provided.

10. Contact

Questions about this Privacy Policy? Email buyya.reviewer@gmail.com or call .