Privacy policy

The data controller is the operator of the Rekid platform. For any question or request about your data, write to us at suport@rekid.md.

3.1. When you use Rekid without an account

On your first personal action (for example, when you choose your location or add a favorite) we create an anonymous identifier for you, kept in a cookie. Linked to it we save: the language, your location, your children, interests and favorites, your push notification subscription and your draft listings. We do not ask for your name or email.

3.2. Your account

• Your email, if you sign in with a code sent by email.
• The data we receive from Google or Apple when you sign in with them: your name, email, profile photo and the technical data that connects you to their account.
• The data we receive from Telegram when you sign in with it or connect it: your Telegram identifier, username, name and profile photo.
• The name and photo you choose for your profile.

3.3. Your public profile

Anyone can see: your name, photo, location, the date you joined, the "Phone verified" and "Telegram connected" badges, your rating and reviews, your usual response time and your active and sold listings.

3.4. Your children

For the personal feed you can add your children: the date of birth (or the expected date) and, if you want, the first name and sex. From the date of birth we estimate the size. This data is private: it is not on your public profile and nobody else sees it. A child's first name can appear in notifications sent to you (for example, "Andrei: new listings in the right size").

3.5. Listings

The text, photos, price, size, condition, location (and the sector, in Chisinau) and delivery methods are public. We remove location data (GPS) and other hidden information from the photos. Look at your photos before publishing: children's faces should not be visible. We count views and additions to favorites; the seller sees the numbers, not who visited.

3.6. Messages

We keep chat messages and photos so you can read them at any time. The phone number and address from your profile reach a conversation only if you send them. Messages with links or with words that scammers use automatically get a warning. Moderators can read a conversation only if it has been reported, and every time they open it is recorded.

3.7. Phone and address

Your phone number is optional. If you confirm it, you get a code by SMS or through the Rekid bot in Telegram (in Telegram you send your contact to the bot, so we can check that the number is yours). We keep the number and the history of code requests; the code itself is kept only in an irreversibly encrypted form and expires after 10 minutes. The address is optional and is only used so you can send it quickly in the chat.

3.8. Reviews, reports and moderation

Reviews are public, with the author's name and photo. For reports we keep who reported what, the reason and the decision; the reported user does not find out who reported them. We also keep sanctions, the moderation history and the log of actions taken by moderators and administrators.

3.9. Notifications

We keep your preferences for each type and channel, the push subscriptions of your browsers (including the browser type), the link to Telegram and the list of in-app notifications.

3.10. Searches

We keep every search: the text, the language, the number of results and the account or anonymous identifier that made it, to show you your recent searches and to improve the search. When you clear your recent searches, they disappear from your list but stay in the statistics. The most frequent searches of all users appear, without names, as suggestions.

3.11. Technical data

For every sign-in session, with or without an account, we keep the IP address and the browser type, for the security of the account and to stop abuse. The IP address is used on the spot to limit the number of requests. The servers keep technical logs (IP address, requested page, browser) so that they work and can be protected from attacks. For the actions of moderators and administrators we also keep the IP address they were made from.

3.12. Statistics

With our own tool, hosted by us, we count visits without cookies and without keeping the IP address; we see only aggregated numbers (how many visits, in which language, from what type of device). The platform's indicators (for example, how many listings are sold within 30 days) are calculated from aggregated data.

If you press "Accept" in the banner on the website, we also use Google Analytics, loaded through Google Tag Manager. Google then receives a random identifier from the _ga and _ga_* cookies, the pages you see (without search text and other parameters of the address; on profile, conversation and search pages, without the page title), where you came from, the language, the type of device and events such as publishing a listing or sending a message, never their content, your name or your email. Through the connection, Google also sees the IP address. Advertising and Google Signals are off. With no answer, or if you press "Decline", nothing reaches Google.

The automatic check of listings (prohibited words, links, phone numbers, unsuitable content in photos) can send a listing for review before it is published. A decision to reject a listing or to impose a sanction is always taken by a person. The feed orders listings by your children's sizes, your interests, your location and how new they are; this has no legal effect on you.

We do not sell or rent your data. We share it only with the providers who help us run Rekid, only as much as needed and with the obligation to protect it:

• Server hosting and the database: the platform's hosting provider.
• Cloudflare: the network through which the website loads, and photo storage.
• Resend: sending emails (your address, the subject and the text of the email).
• Sentry (European Union): error tracking; when something breaks it receives the technical details of the error (the stack trace, the page address, the browser and the version of the site), without cookies, messages, IP addresses or email addresses.
• Sightengine: the automatic check of listing photos; it receives only the public link of the photo, when the listing is published.
• Telegram: the bot, the channels and signing in with Telegram; the text of notifications reaches your chat with the bot. Channel posts do not contain your name.
• Google and Apple: signing in with them, if you choose to. Google also receives the list of active listings (title, price, photo, location and link), without your name, so it can show them in product searches.
• The browsers' notification services (Google, Mozilla, Apple, Microsoft): they deliver push notifications, encrypted, to your browser.
• Google Analytics and Google Tag Manager (Google): statistics about how the website is used, only if you press "Accept" (section 3.12).
• The SMS provider: sends the phone confirmation code, if you choose SMS.

Profile photos received from Google or Telegram load directly from their servers, so the browser of whoever views your profile connects to them.

We may share data with authorities only when the law requires it, or to defend our rights in a case of fraud.

Some of the providers above store or process data in the European Union, in the United States or in other countries. We share data with them only with the safeguards the law requires, for example the standard contractual clauses for data protection.

If you agree to Google Analytics, the data reaches Google, including in the United States.

After you ask for your account to be deleted, you have 30 days to restore it; then your personal data is deleted for good, with the exceptions explained in the "Account deletion" document.

The connection to Rekid is encrypted (HTTPS). Only the people who need the data for their work have access to it, and the actions of moderators and administrators are recorded. Phone confirmation codes are kept only in an irreversibly encrypted form, and sign-in codes expire after a few minutes. If a security breach happens that may affect you, we will tell you and the authority, as the law requires.

You have the right:

• to find out what data we hold about you and to get a copy;
• to correct wrong data; you can change most of it yourself, in "Profile";
• to ask for your data to be deleted; you can delete your account yourself, in "Profile" → "Account";
• to ask us to restrict processing, or to object to processing based on our legitimate interest;
• to receive the data you gave us in a format a computer can easily read;
• to withdraw your consent at any time, without affecting what was done before (for Google Analytics, from "Cookie settings", at the bottom of the website);
• to file a complaint with the National Center for Personal Data Protection of the Republic of Moldova (datepersonale.md).

To use your rights, write to us at suport@rekid.md from your account's email address. We answer within 15 days at most. We may ask for more information to confirm that the request is yours.

Only people aged 18 or over can have a Rekid account. Data about children is added by their parents, only for the personal feed, and is not public. Please do not publish photos showing children's faces.

Which cookies and which data we keep in your browser is explained in the "Cookie policy".

We may update this policy. The new version is published on this page, with its number and date; we tell you about important changes beforehand, on the website or by email.

For questions about your personal data, write to us at suport@rekid.md.