Privacy Policy

Effective September 18, 2026 · First Pounce is made by Anthony Salas-Alvarez, Salt Lake City, Utah. Contact: hello@firstpounce.com

This is what First Pounce collects, why, and what it never does.

What we collect

• Account (optional): your email and a password hash, stored by our authentication provider (Supabase), so your settings and history can follow you between phones. You can use the app without an account.
• Where you hunt: the alert area you pick (a city or your current location, rounded) and its radius. Your precise location is only read when you tap “Use my location,” and only the rounded centre is sent to our servers to run searches. We never track you in the background.
• What you hunt: your targets, custom targets, blocked words, and plan.
• Push token: if you turn on notifications, an Apple/Expo push token stored under a one-way hash so our server can send you alerts. It is deleted when your subscription ends or when you turn notifications off.
• Your ledger (what you bought and sold) is saved on your phone. When you use a signed-in account, your ledger can also sync to your saved account desk on our servers so you can restore it on another device. Guest records stay on your device unless you carry them into an account. Posting a win is a separate choice that shares the item, prices, your handle, and city publicly in the app.
• Purchase state: whether a subscription is active, from Apple. We never see your card.

What we do not collect

• Your Facebook, eBay, or Marketplace credentials. Never asked for, never stored.
• Seller identities. Listing data we process contains no seller names, and we do not store listing content beyond a short cache used to run your alerts.
• Advertising identifiers. No ad networks, no tracking SDKs, no selling of data.

Where data goes

Listing searches run on our servers (Cloudflare) against licensed data providers (currently SocialCrawl for Facebook Marketplace listings and eBay’s public Browse API for resale prices). Photo reading and translation use Cloudflare Workers AI; the photos and text are processed and not retained beyond a short cache. Push notifications go through Apple’s and Expo’s push services.

Retention and deletion

Device registrations expire 30 days after last use. Search caches expire within hours. Posted wins are removed after 90 days. Delete your account from Settings → Account and it is deleted immediately, with no waiting period: your account, saved models, alert registration, push registration and any linked eBay connection are erased from our servers, and if you signed in with Apple we also revoke that Sign in with Apple connection. Your sales history is kept only on your phone. If you cannot use the app, email hello@firstpounce.com from the address on the account and we will delete everything tied to it within 7 days.

Children

First Pounce is for adults (18+) and is not directed at children.

Changes

If this policy changes materially we will show the change in the app. Questions: hello@firstpounce.com.

Facebook and Marketplace are trademarks of Meta Platforms, Inc. eBay is a trademark of eBay Inc. First Pounce is not affiliated with, endorsed by, or connected to Meta or eBay. Listing data is obtained from licensed third-party providers; First Pounce never asks for, stores, or uses your Facebook login.