Privacy Policy

1. Who We Are

Borrowed is operated by Three Two One Global Ltd.

If you have any questions about this Privacy Policy or your personal information, please contact us at:

Email: [email protected]

2. Information We Collect

Depending on how you use Borrowed, we may collect:

Account Information

• Name
• Email address
• Authentication details when signing in with Apple or email/password

We never receive your Apple ID password.

Profile Information

You may choose to provide:

• Profile photo
• Display name

Clothing & Wardrobe Content

Information you upload including:

• Clothing photos
• Item names
• Categories
• Item availability
• Notes you choose to add

Borrowing Activity

To operate Borrowed we store information such as:

• Borrow requests
• Lending requests
• Request status
• Borrowing dates
• Optional notes attached to requests
• Circle membership

Circle Chat and User Communications

Borrowed allows members of the same Circle to send messages to each other through Circle Chat.

When you use Circle Chat, we process information including the content of messages you send, your user and profile identifiers, your display name and profile image where applicable, the Circle in which the message was sent, message timestamps, and technical identifiers required to deliver and store the message.

If a user reports a message, we may also process information relating to that report, which may include the reported message identifier, the identities of the reporting and reported users, the relevant Circle, the selected report reason, any additional details supplied by the reporting user, and related timestamps.

Where you use Circle Chat blocking, we process the blocking relationship so that messages from a blocked user can be hidden from you in Circle Chat.

Photos & Camera

If you choose, Borrowed may access:

• Your photo library
• Your device camera

This is only used when you choose to upload clothing images.

We never access your photos without your permission.

Device Information

We may collect limited technical information necessary to operate the app, such as:

• Device type
• App version
• Operating system version

Analytics

Borrowed uses Supabase Analytics to help us understand app usage and improve the service.

Analytics data is used in an aggregated form where possible.

3. How We Use Your Information

We use your information to:

• Create and manage your account
• Allow you to upload wardrobe items
• Enable borrowing and lending between members of your Circle
• Display your wardrobe to members you choose to share it with
• Provide Circle Chat, deliver messages to other eligible members of your Circle, and maintain message history
• Operate Circle Chat securely, prevent abuse, investigate reports and enforce our Terms
• Process Circle Chat blocking relationships so blocked users' messages can be hidden from you in Chat
• Send notifications relating to requests and activity
• Improve app performance
• Maintain security and prevent misuse
• Provide customer support
• Comply with legal obligations

We do not sell your personal information.

4. Sharing Your Information

Some information is shared with other members of your Circle so Borrowed can function as intended.

This may include:

• Your display name
• Profile picture
• Clothing you choose to upload
• Borrowing requests
• Lending activity
• Item availability
• Circle Chat messages you send to eligible members of the relevant Circle

We only share information necessary for the Borrowed experience.

5. Visibility of Your Content

Borrowed is designed to help members of a Circle share clothing with one another. Information you choose to upload, including your profile, wardrobe items and borrowing activity, may be visible to members of your Circle as necessary for the app to function. You control what content you upload to Borrowed.

Circle Chat messages are intended to be accessible only to eligible members of the relevant Circle, subject to our access controls and blocking features. Messages are not public. However, we cannot control what another Circle member does after receiving a message, including whether they copy, photograph, screenshot or share it outside Borrowed. You should therefore only send information that you are comfortable sharing with the members of your Circle.

6. Circle Chat — Safety, Reports and Blocking

We use automated controls designed to prevent certain prohibited or objectionable content from being submitted through Circle Chat. These controls may prevent a message from being sent.

We do not undertake to manually monitor every message. If a user reports a message, we process information relating to that report as described in Section 2.

We use report information to investigate potential breaches of our Terms, protect users, prevent abuse, maintain the security and integrity of Borrowed, and comply with applicable legal obligations.

Submitting a report does not automatically mean that the reported user has breached our Terms. We may assess reports and take action where we reasonably consider it appropriate.

Circle Chat allows users to block another Circle member for Chat purposes. When you block another user, we process the blocking relationship so that messages from that user can be hidden from you in Circle Chat. Blocking a user in Circle Chat does not remove either person from the Circle and does not necessarily hide that person's profile, wardrobe items or other non-Chat content elsewhere in Borrowed.

A blocked user is not notified through Borrowed that you have blocked them.

7. Third-Party Services

Borrowed relies on trusted third-party providers to operate the app.

These currently include:

• Supabase (authentication, database, storage, analytics, and Circle Chat message and related data storage and processing)
• Resend (email delivery for Circle Chat report notifications, where a message is reported)
• Apple (Sign in with Apple, where used)
• RevenueCat (subscription management, where applicable)
• PostHog (product analytics, where enabled)

Circle Chat messages and related data are stored and processed using our backend infrastructure provided by Supabase.

Where a message is reported, limited report information may also be processed through our email service provider, Resend, so that the report can be securely brought to the attention of Three Two One Global Ltd for review.

We do not send the content of Circle Chat messages to PostHog or TikTok for analytics or advertising purposes.

These providers process information on our behalf in accordance with their applicable contractual and data protection obligations. Any international transfers of personal data are handled in accordance with the international-transfer provisions described elsewhere in this Privacy Policy.

These providers process data in accordance with their own privacy policies.

Product Analytics

We may use product analytics services, including PostHog, where enabled, to help us understand how Borrowed is used and improve its features, performance and user experience.

Where product analytics is enabled, PostHog may process information such as product interactions and feature usage, app events, screen or session usage information, app version and platform, device model or type, operating system and version, pseudonymous user or account identifiers, app installation or device identifiers, subscription status where applicable, and similar usage data.

We use this information for analytics, understanding product usage, maintaining and improving features, performance and product improvement, and improving the user experience. We do not use PostHog for behavioural advertising or to sell personal information.

Where applicable, PostHog acts as a service provider/processor on our behalf. Information is handled in accordance with PostHog's privacy and security practices: https://posthog.com/privacy

8. Lawful Bases for Circle Chat Processing

Where UK data protection law applies, we process message content and associated information where necessary to provide the Circle Chat service requested by you and to perform our agreement with you.

We may also process Chat, blocking and report information where necessary for our legitimate interests in operating Borrowed safely, preventing misuse, investigating abuse, protecting users, maintaining the security of the service and enforcing our Terms, provided those interests are not overridden by your rights and interests.

Where processing is required by applicable law, we may also process or disclose relevant information to comply with our legal obligations.

9. Push Notifications

If you allow notifications, Borrowed may send notifications relating to:

• Borrow requests
• Request updates
• Important account activity

You can disable notifications at any time through your device settings.

10. Data Security

We take reasonable technical and organisational measures to protect your information.

No online service can guarantee absolute security, but we work to keep your data protected using industry-standard security practices.

11. Data Retention

We retain your information only for as long as necessary to provide Borrowed and comply with legal obligations.

We retain Circle Chat information for as long as reasonably necessary to provide Circle Chat, maintain the security and integrity of Borrowed, handle reports and disputes, and meet applicable legal requirements.

Chat information may also be removed as part of account or Circle deletion in accordance with Borrowed's deletion processes.

If you delete your account, we will remove or anonymise your personal information where reasonably possible, unless we are required to retain certain information by law. When you delete your Borrowed account, information associated with your account is handled in accordance with these account-deletion and data-retention provisions.

Where we are legally required or otherwise lawfully permitted to retain particular records for longer, we may do so only for the applicable purpose and period.

12. Sensitive Information and Circle Chat

Circle Chat is a general social messaging feature. We do not ask you to submit highly sensitive personal information through Chat.

You should avoid sending information such as medical information, financial credentials, passwords, government identification numbers or other highly sensitive information unless you have a legitimate reason to share it and understand that other members of your Circle will be able to see it.

13. Your Rights

Depending on your location, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your information
• Object to certain processing
• Request a copy of your data where applicable

You can also delete your account directly within the Borrowed app.

If you cannot access the app, you may request account deletion by contacting us at [email protected].

You can also use our account deletion page: https://threetwooneglobal.com/apps/borrowed/delete-account

If you require additional assistance, please contact us at:

[email protected]

14. Children's Privacy

Borrowed is not designed to knowingly collect personal information from children through a Three Two One Global account or backend.

If you believe a child has provided us with personal information, please contact us so we can remove it.

15. International Users

Your information may be processed or stored in countries outside your own where our service providers operate.

Where required, we take appropriate steps to protect your information.

16. Changes to This Policy

We may update this Privacy Policy from time to time.

The latest version will always be available on our website.

Your continued use of Borrowed after changes become effective constitutes acceptance of the updated policy.

17. Contact Us

If you have any questions about this Privacy Policy or your personal information, please contact:

Three Two One Global Ltd

Email: [email protected]