This Privacy Policy explains how Mutu ("we", "us", "our") collects, uses, stores, and protects your information when you use the Mutu mobile application and related services (the "App"). Mutu is a barter marketplace that lets people trade goods and services without cash.
By using Mutu, you agree to the practices described in this policy. If you do not agree, please do not use the App.
1. Information We Collect
Information you give us
Phone number — used to create your account and verify you via a one-time SMS code.
Profile details — your display name and the city or town you enter.
Verification selfie — if you choose to verify your account, we collect a selfie photo to confirm you are a real person.
Listings — the items and services you post, including descriptions, categories, estimated values, and any photos you add.
Messages — the content of chats you send to other users to arrange trades.
Wishlist preferences — the categories and keywords you tell us you're interested in.
Information collected automatically
Approximate location — the city or town you provide, used to show you nearby trades. We do not collect or share your precise GPS location or exact address.
Usage and device data — basic technical information such as app version and general activity, used to keep the App working and improve it.
2. How We Use Your Information
We use your information to:
Create and manage your account and verify your identity.
Show you relevant trades and match you with other users.
Enable chat so you can arrange and complete trades.
Confirm you are a real person through the optional selfie check, to build trust and safety.
Keep Mutu safe — detecting spam, fraud, and abuse.
Respond to your questions and provide support.
Improve and maintain the App.
3. How Your Information Is Shared
We share only what's needed for the App to work:
With other users: your display name, city/town, ratings, verification badge status, and your listings are visible to other users so trades can happen. Your phone number, exact address, and verification selfie are never shown to other users.
With service providers who help us run Mutu, under strict confidentiality:
Supabase — secure database, authentication, and storage.
Twilio — sending your one-time SMS verification code.
Amazon Web Services (AWS) — automated face detection to check verification selfies (where enabled).
For legal reasons: if required by law, or to protect the rights, safety, and property of Mutu, our users, or the public.
We do not sell your personal information. We do not show third-party advertising that profiles you, and we do not share your data with advertisers.
4. Your Verification Selfie
If you choose to verify your account, your selfie is:
Stored in a private, secure location that other users cannot access.
Used only to confirm you are a real person and grant your verified badge.
Never displayed on your public profile or shown to anyone you trade with.
You can request deletion of your verification selfie at any time (see Section 7).
5. Data Security
We take reasonable measures to protect your information, including encryption of data in transit and access controls that limit who can see sensitive data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
6. Data Retention
We keep your information for as long as your account is active or as needed to provide the App. If you delete your account, we delete or anonymise your personal information within a reasonable period, except where we are required to keep it for legal, safety, or fraud-prevention reasons.
7. Your Rights and Choices
You can:
Access and update your profile information in the App.
Delete your listings at any time.
Request deletion of your account and personal data, including your verification selfie, by contacting us (see below).
Withdraw from verification by not submitting a selfie — verification is optional.
Depending on where you live, you may have additional rights under laws such as South Africa's POPIA, the EU/UK GDPR, or similar regulations, including the right to access, correct, or erase your data, and to lodge a complaint with a data protection authority.
8. Children
Mutu is not intended for anyone under 13 (or the minimum age required in your country). We do not knowingly collect information from children. If you believe a child has provided us information, contact us and we will delete it.
9. International Users
Mutu is available in multiple countries. Your information may be processed and stored on servers located outside your country. By using the App, you consent to this transfer, processing, and storage in line with this policy.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make significant changes, we will update the date at the top and, where appropriate, notify you in the App. Continued use of Mutu after changes means you accept the updated policy.
11. Contact Us
If you have questions about this policy or want to exercise your rights, contact us at: