Privacy Policy
最后更新：July 14, 2026
本文件仅以英文提供，英文版本为唯一有效版本。
1. Introduction
LemonMarket ("we," "our," or "us") is a marketplace for pre-loved baby and pregnancy gear. This policy explains what we collect, why, who we share it with, and what you can do about it. LemonMarket is currently offered in the United States only, and is intended for adults (18+). This policy is published in English, and the English version is the authoritative one.
2. Information We Collect
Account information • Email address • Display name and, optionally, a profile photo • Optionally, a pickup ZIP code and a street address — your address is private and is never shown to other users • Optionally, information about your baby — see section 11 We do not store your password. Sign-in is handled by Google Firebase Authentication. If you use "Continue with Google," Google tells us your email address and name. Listing and activity information • Items you list: title, description, price, condition, photos or video, ZIP code • Reviews and ratings you write, and products you add to the community catalog • Saved lists, favorites, subscriptions and saved searches • Messages you send to other users • Categories you browse, and a count of how many times each listing is viewed • Reports you file about a listing or a user Location • The ZIP code you provide. We convert it into an approximate map point — the centre of that ZIP code — so listings can be sorted by distance. This is neighbourhood-level, not your address. • On mobile, if you grant location permission, we read your device's location to sort listings by distance. That calculation happens on your device; we do not store your device's precise coordinates. Automatically collected • Device type, operating system, and app version • Crash diagnostics (see section 5 — Google Crashlytics) • A push notification token for each device on which you enable notifications • Aggregated, non-identifying usage events — for example, "a listing in Strollers was created in ZIP area 981." These carry no user ID and no listing ID.
3. How We Use Your Information
• To create and operate your account • To publish your listings and show them to nearby buyers • To let you message other users and arrange pickups • To match new listings against Wanted requests and saved searches, and to notify you • To personalize the feed to your baby's stage, if you have given us that information • To generate summaries of product reviews (see section 6) • To detect, investigate and act on fraud, spam and abuse • To produce aggregated, de-identified statistics about the marketplace • To comply with the law We do not use your data for advertising, and we do not sell your personal information.
4. What Is Public
Some of what you create is visible to anyone on the internet, including people who are not signed in. Treat it as public: • Your listings and Wanted requests — title, description, photos, price, condition, and the ZIP code you entered • Your display name and profile photo, wherever they appear alongside the above • Reviews you write, with your display name and profile photo • Products you contribute to the community catalog, and edits you propose • Your saved list, if you share it Your email address, your street address, your device's precise location, and everything you tell us about your baby are never shown to other users. Your messages are visible to the person you send them to. Do not send anything you would not want that person to have.
5. Who We Share Information With
We do not sell your personal information and we do not share it with advertisers. We rely on the following providers, who process data on our behalf: • Google (Firebase) — authentication, database, file storage, push notifications, crash reporting (Crashlytics), and anti-abuse device attestation (App Check). Most of your data lives here. • Google Cloud (Cloud Run) — runs our server, which handles listing creation, notifications, moderation and scheduled cleanup. • OpenAI — generates the AI summary shown on a catalog product. Section 6 says exactly what we send. • Zippopotam — a public ZIP-code lookup, used to turn a ZIP code into an approximate map point for distance sorting. Our server performs this lookup and caches the result; your browser and your device never contact it, and no personal identifier is sent. We may also disclose information where the law requires it, or where we believe it is necessary to prevent harm. We may publish aggregated, de-identified statistics — typical resale prices by category, for example. These never identify you.
6. AI and Automated Processing
We use AI in exactly one place, and we want to be specific about it. Review summaries. When a product in the community catalog has enough reviews, we send the text of those reviews to OpenAI to produce a short summary with pros and cons. We send the review text, the rating, and the priority. We do not send reviewer names, photos, or any account identifier. Summaries are labelled as AI-generated. If you would rather your words were not processed this way, do not post a review. Automated moderation. A listing reported by three or more different users is hidden automatically and immediately, before any human has looked at it. We then review it, and restore it if we were wrong. Nothing else is hidden or removed automatically, and no account is ever banned automatically. Matching. Notifications about new listings are matched to your subscriptions and saved searches by category and keyword. That is a plain text match, not AI, and we do not profile you beyond what you explicitly subscribed to. We do not use AI to make decisions about your account, and we do not use your data to train AI models. The provider named above processes what we send under its own terms.
7. Data Security
• Data is encrypted in transit (TLS) and encrypted at rest by our cloud provider. • Database access is governed by security rules that confine each user to their own data. Your email address, street address, push tokens and baby information live in a private area that other users cannot read. • Content that must not be forged — listings, reports, moderation decisions — is written only by our server, never directly by an app. • Administrative access is limited to accounts we explicitly designate. No system is perfectly secure. If we become aware of a breach affecting your personal data, we will notify you, and any regulator, as the law requires.
8. Your Rights and Choices
A copy of your data. Email yingjiehe@zestworks.io and we will send you a copy of the personal data we hold about you. We do this by hand, so allow up to 30 days. Correction. Edit your profile, your baby information, and your listings in the app at any time. Deletion. Delete any listing at any time. Delete your whole account from Settings — section 10 says exactly what that removes. Notifications. Turn push notifications off in your device settings, or pause individual subscriptions in the app. We do not send marketing email. We will not treat you differently for exercising any of these rights.
9. Data Retention
Listings. A listing is hidden from the public feed 45 days after it is posted, and permanently deleted — along with its photos and video — 60 days after it is posted. We warn you before it expires, and you can renew it. Messages. We keep your conversations so they stay available across your devices. We do not delete them automatically. Account data. Kept for as long as your account exists. Reports and moderation records. Kept for as long as we need them to enforce our Terms and to spot repeat abuse — including after the reported account is gone. Aggregated statistics. Non-identifying marketplace statistics are kept indefinitely.
10. What Happens When You Delete Your Account
Deleting your account immediately removes: • your profile, email address, street address, and any baby information • all of your listings, and the photos and video attached to them • your conversations and the messages in them • your subscriptions, saved lists, favorites and browsing history • your sign-in credentials Two things are handled differently, and you should know this before you delete: • Reviews you wrote are kept, but anonymized — your name and photo are stripped from them. We keep the text because other parents rely on it, and removing it would silently change the ratings they are reading. • A record that a sale happened — a price and a time-to-sell, with no name attached — stays in the aggregate resale statistics for the community catalog. Reports filed by you or about you are also kept, so that deleting an account cannot be used to escape a ban. Deletion is permanent and cannot be undone.
11. Children's Privacy and Baby Information
LemonMarket is for adults. You must be 18 or older to have an account. We do not knowingly collect personal information from anyone under 18, and if we learn that we have, we delete it. Separately, and entirely optionally, you may tell us about your baby: a name, a birth date or an expected due date, and a gender. This is information that you, an adult, choose to give us about your own child. We use it for one thing: to personalize what you see — greeting you, theming the app to your baby's stage, and showing age-appropriate listings and catalog items. Your baby's information is stored in the private area of your account. It is never shown to other users, never sold, never shared, and never used for advertising. You can change or remove it at any time in Settings; if you remove it, the personalization simply stops.
12. Wanted Requests, Matching and Messaging
Wanted requests are public. Your title, description, optional budget and ZIP code are visible just like a listing. Do not put anything in a Wanted request that you do not want to be public. When a new listing matches an open Wanted request or one of your saved searches — by category and keyword, within the distance you chose — we may show your public request to the seller, show the listing to you, and send a notification. Messages are stored so your conversation is available across your devices. They are visible to you and to the person you are talking to. We may look at message content when we are investigating a report.
13. Push Notifications
If you enable notifications, we store a push token for that device so we can reach it. We send a notification when: • a new listing matches one of your subscriptions or saved searches • someone sends you a message • someone posts a Wanted request that matches one of your active listings • a listing you saved is sold or put on hold • one of your own listings is about to expire Turn them off entirely in your device settings, or pause individual subscriptions in the app. Signing out removes that device's token.
14. International Data Transfers
LemonMarket is offered in the United States, and your data is stored and processed in the United States. Our providers may process data in other countries. By using LemonMarket you understand that your information is handled in the United States.
15. California Privacy Rights
If you are a California resident, you have the right to know what personal information we collect and why, to request a copy of it, to request that we delete it, and not to be discriminated against for exercising those rights. Sections 2, 8 and 10 cover all of this. We do not sell personal information, and we do not share it for cross-context behavioural advertising. To make a request, email yingjiehe@zestworks.io.
16. Changes to This Policy
We may update this policy. If a change is material, we will update the date at the top and tell you in the app. Continuing to use LemonMarket after a change means you accept the updated policy.
17. Contact Us
Questions, requests, or privacy concerns: Email: yingjiehe@zestworks.io We aim to respond within 30 days.