Privacy Policy

Last updated: 4 October 2026

Grevvo lets you lock photos of things you sell, so a buyer can check that the photos are real, when they were taken and who is selling. This page says what we store about you, who can see it, and how to get it deleted. For anything about your data, use the developer contact shown on the Grevvo app listing.

What we store

Your account	Email address, username, and your password as a one-way hash (we cannot read your password).
Profile details you add	Phone number, address, city, postal code and country, if you fill them in. They raise your Grevvo tier. They are not shown to other users.
Accounts you link by typing a handle	Your Instagram, PayPal, eBay and Discord usernames, if you add them.
Facebook, if you sign in with it	Your Facebook user ID for our app, your name, your profile picture address, how many friends you have (a number only, never the list of who they are), and the address of your Facebook profile. We do not store your Facebook password or access token, we cannot post anything, and we read nothing else from your Facebook account.
Photos you lock	The photo with its QR code and tier badge, a small thumbnail, an unmarked original kept for audits (only you can retrieve it), the time it was locked, and the item name if you give one.
Reviews	Reviews you write and receive: stars, comment, tags, a price range for the trade, and the item it was about.
How your links are used	How many times one of your item links was opened. We do not record who opened it.
The beta waitlist	If you sign up for the beta on grevvo.com: your email address and, if you pick one, what you trade. We use it only to invite you to the beta and to tell you when Grevvo launches, and delete it when you ask.
Technical logs	Our servers keep request logs for troubleshooting and security. These can include IP addresses.

The app uses the camera only when you take a photo to lock. It does not read your contacts or your location.

What other people can see

Anyone with one of your item links, without the app: that the item is locked on Grevvo and when, its ID, and the name and price you gave it, if any. No photos and nothing about you. (A link to a single photo made with an early version of the app also shows that photo.)
Signed-in Grevvo users who open your item: the locked photos of that item and when they were locked, your username, your tier, your review average and count, how many photos you have locked, disputes about your deals that are under review or were upheld, and the month you joined.
If you signed in with Facebook, those users also see: that you are Facebook verified, your Facebook name, your number of friends, and a link that opens your Facebook profile. That is the purpose of linking it: showing buyers there is a real person behind the listing. Unlink Facebook and this disappears at once.
Your public profile page (the link and QR on your profile): username, tier, reviews, and the account handles you chose to link.
People you trade with: the reviews you write about them.

Your email address, phone number and postal address are never shown to other users.

Why we use it

To run your account and show your locked photos to the buyers you send them to (needed to provide the service you signed up for).
To work out your Grevvo tier from your profile details, linked accounts and confirmed reviews.
Facebook details are used only when you choose to sign in with Facebook, and only for the verification shown above. You can withdraw that at any time by unlinking.
To keep the service secure and find faults (our legitimate interest).

We do not sell your data, we do not show ads, and we do not use your data to build advertising profiles.

Who else handles it

Amazon Web Services hosts our servers and database, in the EU (Stockholm, Sweden).
Meta (Facebook), only if you choose to sign in with Facebook. Their own privacy policy covers what happens on their side.

How long we keep it

As long as your account exists. When you unlink Facebook, everything we received from Facebook is deleted from your account immediately. When you ask us to delete your account, we delete your data within 30 days, except where the law requires us to keep something.

Your rights

You can ask for a copy of your data, have it corrected, have it deleted, or object to how it is used. To do any of these, use the developer contact shown on the Grevvo app listing. If you are in the EU you can also complain to your data protection authority; in Denmark that is Datatilsynet (datatilsynet.dk).

Deleting your data

Step-by-step instructions are on the data deletion page.

Changes

When this policy changes, the new version is published at this address with a new date at the top.