POOL Privacy Policy
Operator: Mayali Ventures LLC ("we") · Contact: contact@mayaliventures.com · Effective date: October 21, 2026
1. What POOL is
POOL helps a private group organize a rotating savings circle. POOL never holds, moves, receives or processes money. Members pay each other directly with their own payment apps or cash; POOL keeps the records the members enter.
2. What we collect
| Data | Why | Source |
|---|---|---|
| Email address (and a password, if you set one; we only store it in hashed form) | To create your account and sign you in with a password or a one-time code | You |
| If you choose Sign in with Apple or Google: the email address and name that Apple or Google share with us (with Apple this may be a private relay address) | To sign you in | Apple or Google, with your permission |
| First and last name, avatar color/emoji, and a profile photo if you choose to add one | So your circle knows who you are | You (the photo comes from your photo library, only when you pick one) |
| Pool details (name, amount, schedule, payout order, invite settings) | To run the circle | You or your Captain |
| Records: "marked as sent", "confirmed received", payouts, swaps, Captain actions, activity history | The shared record every member relies on | You and other members |
| Payment handles you choose to add (e.g. a Venmo username) | So members know how to pay you. Shown only to members of your active Pools | You |
| Chat messages, reactions, polls, reports and blocks | Group chat and safety | You |
| Managed members: a first/last name and an optional note entered by the person who operates that profile | So someone without the app can still be part of a circle | The member who added them |
| Technical data needed to keep you signed in (a session token on your device) | Security | Automatic |
| A push notification token for your device, and your notification settings | To send the reminders and updates you turn on | Automatic, only if you allow notifications |
We don't collect bank account numbers, card numbers, government ID, your contacts, precise location, or advertising identifiers. If you turn on Face ID or fingerprint sign-in, the check happens on your phone; we never receive your face or fingerprint data.
3. Who can see it
- Members of the same Pool see that Pool's details, members' names, the shared records and the chat. Payment handles are visible only while a Pool is forming or active.
- Captains also see join requests and the waitlist for their Pool.
- Nobody else. Access is enforced in the database: people outside a Pool can't read it. Someone with an invite code sees only a summary (Pool name, amount, size, start date and members' first names).
- Service providers: Supabase, Inc. hosts the database, profile photos and sign-in. The sign-in email is sent through Resend. Apple and Google handle Sign in with Apple / Google when you choose them. Push notifications are delivered through Expo (650 Industries, Inc.) and Apple or Google's notification services. They process data only to provide the service.
- We don't sell or share personal data for advertising, and we don't use tracking.
4. Shared history
A Pool's confirmed records belong to the whole circle. Members rely on them, and POOL's reputation facts are built from them. They can't be edited afterward.
5. Keeping and deleting data
- Delete your account in the app: Settings › Delete account. We delete your email, contact details, payment handles, profile photo and push tokens, and remove your name from your profile. Records other members rely on (e.g. "a member confirmed $100 on May 3") stay, but are no longer linked to your name.
- Chat messages you delete are hidden from members.
- Backups are kept for a limited time by our hosting provider.
6. Security
Data is encrypted in transit, and each table is protected with row-level access rules. No system is perfectly secure; please use a secure email account.
7. Children
POOL is only for people 18 and older, and we don't knowingly collect data from anyone younger.
8. Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, or object to some uses. Email contact@mayaliventures.com.
9. Changes
We'll update this page and change the effective date. For material changes, we'll let you know in the app.
10. Contact
Mayali Ventures LLC · contact@mayaliventures.com