How ReferredBy collects, uses, and protects your information

ReferredBy collects the minimum information needed to connect clients with service providers. We do not sell your personal data. You can delete your account inside the app or request deletion through the account deletion page.

What we collect

Account information such as your name, email address, phone number, and password hash.
Profile information such as city, state, profile photo, and account role.
Provider business data such as business name, services, capabilities, portfolio media, and completed job history.
Quote, booking, review, and message data exchanged through the platform.
Provider verification submissions, including identity or business documents when a provider applies for verification.
Approximate location data when you use nearby provider discovery features.
Notification tokens, device platform details, diagnostic events, and analytics events when those features are enabled.

How we use your data

To create and secure your account.
To connect clients with nearby providers and support search, quotes, bookings, and messaging.
To review verification submissions and operate trust and safety workflows.
To send transactional communications such as password resets, booking updates, quote updates, and important account notices.
To detect fraud, abuse, policy violations, or unsafe marketplace behavior.
To improve the app using aggregated analytics and technical monitoring when enabled.

Third parties and service providers

Mobile app stores may process provider subscription payments inside the mobile app. We do not store full payment card details for those purchases.
RevenueCat helps validate mobile store subscriptions and determine whether provider business access is active.
Maps, notifications, analytics, and error monitoring providers may receive limited technical data needed to operate those services.
We do not sell, rent, or trade your personal information to advertisers or unrelated third parties.

Storage, security, and retention

Passwords are stored using modern password hashing on the backend.
Mobile auth tokens are stored using secure device storage. Web sessions use session-scoped storage and in-memory auth handling.
Data is transmitted over HTTPS.
We retain account and marketplace data while your account is active and afterward only as needed for legal, fraud-prevention, accounting, or safety reasons.
Verification data and moderation records may be retained for safety, abuse prevention, or legal compliance where required.

          If you delete your account, we will remove or anonymize personal data that no longer needs to be retained. Some transaction,
          safety, subscription, or legal records may be retained for a limited period when required.
        

Your choices

Access and update your profile details from the app.
Delete your account from the Settings screen in the app.
Request deletion outside the app at /account-deletion.
Disable certain email updates in the app settings.
Contact support for privacy or data requests at support@referredby.app.

Children

ReferredBy is intended for users who are 18 years of age or older.