Privacy Policy
27.10.2026
1. Who is responsible for the data
Stepan Belorybkin operates Gecko. For personal-data questions, email [email protected].
2. Data we process
Listing drafts and prepared photos are stored only on the device, separately for each account, with up to 10 drafts. Drafts older than 30 days are removed the next time a form is opened or saved. You can remove them using “Delete draft”; the corresponding draft is removed after successful publication or saving. Deleting an account clears its drafts on the current device. New draft photos are not sent to the server until you publish or save the listing.
Account data: email, verified phone number, display name and technical user identifier.
Listing data: title, description, price, category, selected location and uploaded photos.
The verified phone number remains hidden from the public profile. It is shown to a signed-in user only on a specific active listing when its owner separately allows calls. This permission can be disabled by editing the listing.
The business name, category, description, logo, website and opening hours are public. The contact person's name and verification documents are available only to the account owner and Gecko administrators, are used for business verification and are stored until the account is deleted. Changing the business name requires a new review.
Tax ID (NIF/NIE or equivalent): Required for business verification. Visible only to you and the Gecko administrator.
When you contact support, we store the subject, text, selected screenshots, provided email and technical details about the app version, platform and language. Gecko administrators can access requests; an alert may be sent to the support mailbox. Gecko Support conversations are stored with your account. Account deletion removes linked requests and attachments. Guests can request deletion by emailing support.
If you allow location access, it is used to choose the listing area. Coordinates are rounded before requesting the area name. Public listings store an approximate point and the neighborhood or locality name, rather than an exact entrance or apartment number.
Communication data: messages and photos between members, plus information needed for reports, blocks and safety.
Support requests and correspondence are processed when you choose to contact us.
Gecko maintains aggregate counts of listing impressions, opens, favorites and chat actions. These store only the listing ID, day, action type, surface, traffic type and total, without visitor identifiers. If you separately enable optional analytics, the server stores a one-way hash of a random installation identifier to avoid duplicate counts; the original identifier and account ID are not included in these analytics.
If you enable notifications, the device push token and notification content needed to deliver a new message and open the relevant chat are processed.
Saved searches, their filters and approximate area are stored in your account. Matching notifications are enabled separately for each search; selected subscriptions are grouped into one digest at most once every 24 hours. You can turn off a subscription or all search notifications in settings.
Viewing history stores only listing IDs and opening times for up to 50 listings over 30 days on this device, separately for each account and guest. It is not sent to the server as a viewing log and does not depend on analytics consent. Turning it off deletes it from this device; you can also clear it in “Recently viewed”.
3. Why we use the data
We use data for registration, publishing and finding listings, chats, fraud prevention, reports, support, and to show owners the aggregated performance of their listing and promotion.
We do not sell personal data or use it for advertising tracking across apps and websites.
4. Storage and providers
App data is stored with the cloud provider Supabase. Access is restricted by row-level security and user accounts.
Gecko uses Supabase Auth and Twilio Verify to verify your phone number. When you request a code, these providers process your phone number, verification code and technical information about the delivery attempt and its outcome.
If you choose WhatsApp, the message is delivered through WhatsApp (Meta); SMS delivery involves mobile network operators. Gecko sends codes only at your request. SMS requires a separate request and is not sent automatically if WhatsApp fails. Gecko does not use these messages for advertising.
Available public listing translations are shown to all visitors in their interface language; the original is available in the listing. Automatic message translation is enabled only after both participants give separate permission. The setting applies to the account on all devices.
DeepL automatically translates the public titles and descriptions, free-text attributes and approximate location of your listings for buyers. The original is always available.
Listing translation is a standard Gecko feature and does not need to be enabled separately. Private message translation is enabled separately in chat or settings.
Profile data, email, verified phone number and technical account identifiers are not added to listing translation requests; information you write in the public text is sent with that text.
Public listing translations are created when first requested in the selected language and saved in Gecko. They are refreshed after text changes. Translations may contain errors; the original is always available. If the service is unavailable, the original is shown.
Before publishing a listing with new photos, Gecko separately requests explicit consent to send them to OpenAI for safety review. Without consent, the listing can be published without photos. The result is used as a signal and staff decide uncertain cases. Before upload, the photo is reduced, re-encoded as JPEG and stripped of EXIF, including geolocation.
Google Maps Platform services are used to display the map and search for addresses. Google may receive the search query, approximate coordinates, IP address and technical device information under its privacy policy.
Expo Push Service and Apple Push Notification service, or the relevant platform service, are used to deliver notifications you choose to enable.
Data is kept while the account exists, or longer only where required by law, safety or dispute resolution.
Saved-search selections are retained for up to 30 days and technical records preventing duplicate notifications for up to 90 days. A maintenance job removes expired records. Deleting your account removes saved searches and their selections; device history can be cleared separately.
5. Your rights and deletion
Under “Profile → Security and data” you can delete your account and related listings, avatar, listing and chat photos, messages and other related data. You can also request access, correction or deletion through support.
You can change permission to translate private messages in Profile → Data settings. Withdrawal stops further sharing of your messages for translation and deletes their saved translations. A transfer already started cannot be undone. Originals remain available for chat. Public listings are translated automatically regardless of this setting. Analytics can be disabled separately on the device.
6. Security and children
We use authentication, access controls and secure connections. Even so, no internet service can guarantee absolute security.
The service is not intended for children under 16.
Contact support