Last updated: April 16, 2026

Rebuy is a local marketplace where families can buy and sell used kids' items. We take your data protection seriously, and this policy describes what personal data we collect, why we collect it, and what rights you have.

1. Data Controller

Rebuy is the data controller for the personal data we receive about you via rebuy.dk and the Rebuy app. If you have questions about this policy or wish to exercise your rights, you can contact us at support@rebuy.dk.

2. What information do we collect

We only collect the information that is necessary to provide and improve the service:

• Account information: your name, email address, and optional profile photo. If you sign in with Apple or Google, we also receive a user identifier and your email from the provider.
• Listing content: title, description, price, images, category, condition, and location for listings you create.
• Location: your precise geographic location, so we can show listings nearby and help buyers find yours. Other users only see the city or area — never precise coordinates.
• Photos: images you take with the camera or pick from your photo library when creating a listing or updating your profile photo.
• Messages: the content of chats you send to other users through the app.
• Notifications: a device token (APNs) so we can send you push notifications about messages and listings.
• Feedback: if you use "Send feedback" in the app, we receive your message, your email, and technical metadata (app version, iOS version, device type, language).
• Technical information: device type, operating system, and app version for troubleshooting and support.

3. Purpose and legal basis

We process your personal data for the following purposes:

• To provide and maintain the Rebuy service (legal basis: performance of a contract, GDPR art. 6(1)(b)).
• To show listings in your area and enable contact between buyers and sellers (performance of a contract).
• To send push notifications and service messages about new chats and listings (performance of a contract / legitimate interest).
• To prevent fraud and abuse and keep the platform safe (legitimate interest, art. 6(1)(f)).
• To comply with applicable law (legal obligation, art. 6(1)(c)).

4. Sharing of information

We never sell your personal data. We only share information with:

• Our backend provider Appwrite, which hosts your account, messages, images, and listings on our own servers. Apple (APNs) to deliver push notifications. Google and Apple, if you choose to sign in through one of their accounts. We do not use any third-party analytics or advertising providers.
• Other users, to the extent you choose to share information — e.g. your first name and approximate location in your listings.
• Public authorities, where we are legally required to do so.

5. Storage

We retain your personal data for as long as your account is active. You can delete your account at any time from inside the app under Profile → Delete account, which immediately removes your account, listings, messages, and photos from our systems. Residual copies in encrypted backups are purged within 30 days. Certain records may be retained longer where required by law (e.g. Danish bookkeeping law).

6. Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

• Access the information we process about you.
• Rectification of inaccurate or incomplete information.
• Erasure of your personal data (the "right to be forgotten").
• Restrict our processing.
• Data portability — to receive your data in a structured, machine-readable format.
• Object to our processing.

You can exercise your rights by contacting us at support@rebuy.dk.

7. Cookies and tracking

rebuy.dk only uses technically necessary cookies and anonymous visitor statistics via Umami (self-hosted, cookie-less, no personally identifiable data). We do not use advertising or tracking cookies. The Rebuy app contains no third-party analytics or tracking tools.

8. Children

Rebuy is not intended for children under 13. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact support@rebuy.dk so we can delete it.

9. Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or alteration — including encryption in transit (TLS), access controls and regular security reviews.

10. Changes to this policy

We may update this privacy policy from time to time. For material changes we will notify you via email or an in-app notification. The date of the most recent update is shown at the top of this page.

11. Complaints

You have the right to lodge a complaint with the Danish Data Protection Agency (Datatilsynet) if you believe we process your personal data in breach of data protection law. Contact information is available at datatilsynet.dk.

Contact

If you have questions about this privacy policy, you can write to us at support@rebuy.dk.