Privacy Policy

1. Who we are

Locavori is a neighbourhood food-sharing platform operated by ComunAI Ltd, registered in England and Wales. Our mission is to help communities grow, swap, and optimise homegrown organic produce.

For any privacy-related queries, contact us at privacy@locavori.app.

2. Data we collect

We collect the following categories of personal data:

• Account information: name, email address, password (hashed), profile photo
• Location data: city, postcode, country, and approximate coordinates (latitude/longitude) to connect you with nearby growers
• Growing data: plots, crops, harvest yields, seasonal preferences, and climate zone
• Swap activity: listings, offers, exchanges, reviews, and messages between users
• Usage data: pages visited, features used, and interactions via Google Analytics (GA4) — only with your consent
• Images: photos you upload of produce, plots, or your profile

3. How we use your data

• To provide and personalise the Locavori platform
• To match you with nearby growers and suggest swaps
• To send transactional emails (offers, swap confirmations, password resets)
• To generate seasonal recommendations based on your climate zone
• To moderate content and enforce community guidelines
• To improve the platform through anonymised analytics (with your consent)

4. Legal basis for processing

We process your data under the following legal bases (GDPR Article 6):

• Contract: to provide you with the Locavori service you signed up for
• Consent: for analytics cookies and optional marketing emails
• Legitimate interest: for platform security, fraud prevention, and content moderation

5. Data storage and security

Your data is stored securely using:

• Database: Neon PostgreSQL (hosted in EU — AWS eu-west-2, London)
• Images: Cloudflare R2 (encrypted at rest)
• Emails: Resend (transactional email service)

Passwords are hashed with bcrypt. All data is transmitted over HTTPS with TLS encryption. We use security headers including HSTS, CSP, and X-Frame-Options.

6. Data sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes.

We share limited data with:

• Other Locavori users: your name, city, profile photo, and listings are visible to other users in your area
• Service providers: Neon (database), Cloudflare (images), Resend (email), Vercel (hosting), Google Analytics (anonymised usage data — with consent), Sentry (error tracking)

7. Cookies

We use essential cookies for authentication and optional analytics cookies (GA4). See our Cookie Policy for full details.

8. Your rights (GDPR)

Under the UK GDPR and Data Protection Act 2018, you have the right to:

• Access your personal data — you can download all your data from Profile Settings
• Rectify inaccurate data — edit your profile at any time
• Erase your data — delete your account from Profile Settings (permanent and irreversible)
• Restrict or object to processing — contact us at privacy@locavori.app
• Data portability — export your data in JSON format from Profile Settings
• Withdraw consent — manage cookie preferences at any time

9. Data retention

We retain your data for as long as your account is active. If you delete your account, all personal data is permanently erased within 30 days. Anonymised analytics data may be retained indefinitely.

10. Children

Locavori is not directed at children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us.

11. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email or an in-app notification. Your continued use of Locavori after changes constitutes acceptance.

12. Contact and complaints

For privacy questions or to exercise your rights, contact us at privacy@locavori.app.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO).