Last updated: October 2026
Jewelry Gallery ("we", "our", or "us") operates the Jewelry Gallery mobile
application (the "App"). This page informs you of our policies regarding the
collection, use, and disclosure of personal information when you use our App.
By using the App, you agree to the collection and use of information in
accordance with this policy.
Account information. When you register with email/password, we collect
your email address, password (stored as a salted bcrypt hash — never in
plain text), and an optional display name.
Google Sign-In (optional). If you choose to sign in with Google, we
receive your email address, name, and profile picture from Google to create
or log you into your account. We do not receive or store your Google
password.
PayPal email address (optional). If you list an item for sale, you may
save a PayPal email address so buyers can pay you directly. We do NOT store
your PayPal password or receive access to your PayPal account.
Listing information. Titles, descriptions, prices, photos, categories,
metal type, stone type, and condition for items you list.
Purchase information. When you buy an item, we collect the shipping
address you provide (name, street, city, state, ZIP, country). We share this
with the seller so they can ship the item to you.
Messages. In-app messages you send to other users are stored so both
parties can see the conversation history.
PayPal transaction identifiers. For each payment (listing fee, boost fee,
or purchase), we store the PayPal Order ID and capture ID for our records
and to prevent duplicate charges. We do NOT store credit-card numbers,
PayPal passwords, or full PayPal account details.
Push notification token (optional). If you enable notifications in the
Profile tab, we collect a device push token and your device platform
(Android or iOS) so we can notify you about new messages. You can turn this
off at any time from the Profile tab — disabling it stops new tokens from
being registered.
Account deletion requests. If you submit the web-based account deletion
form (used when you can't access the app), we store the email address and
optional reason you provide only until the deletion request is processed.
Like most apps and websites, our servers automatically log standard
technical information for security and diagnostics — such as IP address,
device/browser type, and request timestamps. This is used only to keep the
service running reliably and secure, and is not used to build an
advertising profile.
processing payments, and completing purchases.
business account (rtarr29@gmail.com).
opted in.
which features are used) so we can improve the App.
and seller's payee email) are shared with PayPal so it can process the
transaction. PayPal's use of that data is governed by
authentication on its own platform per
Push Notification service (iOS) or Firebase Cloud Messaging (Android) only
to deliver the notification — these providers do not receive your
messages' content.
encrypted servers.
party for advertising purposes.
Photos you upload for listings are stored as base64-encoded images in our
database. They are visible to any user who views the listing.
We retain your account and listing data for as long as your account is
active. If you delete your account from the Profile tab, your account,
listings, favorites, and blocklist are deleted immediately and permanently.
Messages, orders, and reviews you participated in remain visible to the
other party (as their own record of the transaction) but are no longer
linked to an active account of yours. Account-deletion requests submitted
via the web form are deleted once processed (within 30 days).
immediate, permanent deletion — no waiting period. If you can't access the
app, use the web deletion form instead.
name, PayPal email, and avatar, or delete individual listings.
Profile tab.
Home tab.
you tap "Add a photo." You can revoke those permissions in your device
settings at any time.
review, correct, or export your account information.
The App is not intended for children under 13. We do not knowingly collect
information from anyone under 13.
We use industry-standard measures to protect your data, including bcrypt
password hashing, JWT session tokens, HTTPS transport, and MongoDB
encryption at rest. However, no method of transmission or storage is 100%
secure.
We may update this policy from time to time. Updates will be reflected by
the "Last updated" date at the top.
If you have questions about this policy or want to delete your account,
contact: jewelrygalleryaz@gmail.com