Privacy Policy

1. Overview

SpareKilo is a peer-to-peer discovery directory that connects students and travelers between Bangladesh and China so they can share spare luggage space. SpareKilo does not process payments and does not hold escrow — any arrangement you make is between you and the other party, off-platform.

This Privacy Policy explains what information we collect, why we collect it, and how you can control it.

2. Information we collect

Information you post in a listing: your name, handle, university, origin and destination cities, flight date, available capacity, item preferences, and contact details (WeChat ID, WhatsApp or mobile number).

Verification information: your university name, student ID number, and a photo of your student ID or proof of enrollment. This information is submitted for verification and is only visible to moderators.

Technical and usage data: standard server logs (such as IP address, browser type, and pages visited) used to operate and secure the service.

3. How we use your information

To publish and filter listings in the directory.

To verify student status by reviewing the proof you submit.

To moderate content, prevent abuse, and enforce our Terms & Conditions.

To operate, maintain, and improve the service.

4. What is public vs. private

Publicly visible on your listing: your name, handle, university, route, flight date, capacity, item tags, and — only after a viewer accepts the safety notice — your contact details.

Private to moderators, and never displayed publicly: your student ID number and your ID/proof image.

Please do not include sensitive information (such as your full ID number or home address) anywhere except the dedicated verification fields.

5. Storage and retention

Data is stored using Supabase (a hosted PostgreSQL database) and Supabase Storage. Your proof image is stored in a private bucket that is not publicly readable.

Listings whose departure date has passed are automatically hidden from the directory. The underlying data is retained for moderation and audit purposes unless you request deletion.

You can request that your listing or your personal information be deleted at any time by contacting us (see Section 8).

6. Cookies and local storage

We use a cookie and local storage to remember your language preference (English or Bangla).

We use a signed, httpOnly session cookie to keep moderators signed in to the admin dashboard.

We do not use advertising or cross-site tracking cookies.

7. Third-party links

Contacting another user takes place on third-party platforms such as WeChat or WhatsApp. Those platforms are governed by their own privacy policies, and SpareKilo is not responsible for how they handle your information.

8. Your rights and contact

You may request access to, correction of, or deletion of your personal information. To do so, contact us at privacy@sparekilo.example.

We aim to respond to all requests within 30 days.