Almond Social is responsible for the personal information described in this policy. Questions and data-rights requests can be sent to support@almondsocial.co.uk.

We collect account and profile details such as your name, username, email address, account type, trade, location, biography, contact details and profile images; content such as posts, comments, job listings, applications and uploaded images; social activity such as connections, reactions, saves, blocks and reports; verification information you choose to submit; and technical records needed for security and reliability.

If you use Google or Apple login, the provider supplies the identifiers and profile details you authorise. Almond does not receive your provider password.

If you enable phone notifications, we store your phone's push token and platform to deliver activity alerts. You can change notification permission in your phone settings. Push tokens are disconnected on logout and removed after 30 days without registration activity.

We use information to create and secure accounts; display profiles and content; operate jobs, applications and connections; provide verification; personalise and improve the service; prevent fraud and abuse; investigate reports; communicate with you; and meet legal obligations.

Depending on the activity, we process information to perform our contract with you, pursue legitimate interests in operating and protecting Almond, comply with law, or act with your consent. You can withdraw consent where consent is the basis, without affecting earlier processing.

Profile information, posts, comments and job content are visible to relevant Almond members. Job applications are visible to the applicant and job owner. Blocks, saved posts and most report details are not public.

We use service providers, including Supabase for authentication, database and storage services, and hosting providers used to deliver Almond. Providers may process data only for contracted services and must protect it appropriately. We may disclose information when legally required or necessary to protect users and the service.

Phone activity alerts are delivered through Expo's push service and Apple or Google. These providers receive the device token and alert content, such as a member's name and the activity type. Private message text is not included in phone push alerts. Delivery records are kept for up to seven days for retries and troubleshooting.

Your profile location is information you enter; Almond does not require continuous precise device location for its core service. Service providers may process information outside your country using legally recognised safeguards where required.

We keep account information while your account is active and as reasonably necessary for the purposes above. Account deletion removes your account and associated public content, subject to limited retention required for security, fraud prevention, unresolved disputes or law. Safety reports may be retained in restricted form for up to 12 months and anonymised where appropriate.

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing; obtain a portable copy; withdraw consent; and complain to a data-protection regulator. In the UK you may contact the Information Commissioner's Office. Email support@almondsocial.co.uk to exercise a right.

We use access controls and other reasonable safeguards, but no online service can guarantee absolute security. Almond is intended for adults aged 18 or over and is not directed to children.

We may update this policy as Almond develops. We will change the effective date and provide appropriate notice where a change materially affects your rights.