POMEs

Privacy Policy

Version 1.0 · Last updated April 30, 2026

1. Introduction

POMEs (“POMEs”, “we”, “us”) is a building-based community app that lets residents of the same apartment building see each other in a feed, borrow items, request small favors, host events, and chat. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to your use of the POMEs mobile application and any related services we provide (together, the “Service”).

POMEs is operated by Soonk Paik as the sole developer. If you have questions, you can reach us at spaik@pomes.app.

2. What we collect

We collect only what we need to run a small, building-scoped community.

Category	Specific data	Source
Contact information	Name, email address, phone number	You enter this during onboarding.
Identifiers	Firebase user ID (UID), the building you live in (buildingId), your unit number	The UID is assigned by Firebase Authentication. Building and unit are entered by you during onboarding.
User-generated content	Profile photo, photos of items you list to borrow, chat messages, comments, posts, thank-you notes, RSVPs, and reviews	You create this content while using the app.
Inferred information	The street address of your building (derived from the building you select)	We map your buildingId to a known building in our admin-curated catalog.
Usage / analytics	None at this time. We do not run an analytics SDK or advertising SDK.	—

We do not collect your precise GPS location, contacts list, calendar, browsing history outside the app, or any biometric data. We know which building you say you live in — not where your phone is.

3. How we use it

We use the information above to:

• Provide the core service — show you the feed for your building, deliver borrow requests and favors, route chat messages, and display events.
• Verify that you are the person controlling your account, through Firebase Authentication, Sign in with Apple, or Sign in with Google.
• Verify that you are a resident of a supported building (by matching the building you selected against our admin-curated catalog).
• Let neighbors recognize and contact each other inside the app (showing your display name, profile photo, and unit number to other residents of your building).
• Send transactional notifications (for example, when a neighbor replies to a favor request you made).
• Keep accounts secure and investigate reports of abuse, harassment, fraud, or violations of our Terms.

We do not use your data to train AI models, build advertising profiles, or score you for any purpose outside the app.

4. Who we share with

POMEs is a small operation, and our sharing is intentionally narrow.

• Firebase (Google LLC) — we use Firebase Authentication, Cloud Firestore, Cloud Storage, and Firebase Hosting to run the app. Your account data and content are stored on Firebase infrastructure, subject to Google’s Firebase privacy and security terms.
• Apple, Inc. — if you use Sign in with Apple, Apple acts as the identity provider for that sign-in flow. We receive only the identifiers Apple returns to us.
• Google LLC — if you use Sign in with Google, Google acts as the identity provider for that sign-in flow. We receive only the identifiers Google returns to us.
• Other residents of your building — the parts of your profile and content that you publish in the app (display name, profile photo, unit number, posts, borrow listings, comments, etc.) are visible to other verified residents of your building. This is the whole point of the app.
• Law enforcement or legal process — we may disclose information if we are required to by valid legal process, or if we reasonably believe it is necessary to prevent imminent harm.

We do not sell your personal information. We do not share it with advertisers, data brokers, or marketing networks. We do not have a paid analytics partner. There is no advertising in the app.

5. How long we keep it

We keep your account data and content for as long as your account is active.

When you delete your account (see Section 6), we run an automated cascade delete that removes your Firebase Authentication record and your data across our Firestore collections (including your borrow items, favor posts, events, chat threads and messages, notes, likes on feed cards and comments, comments, notifications, and your profile photo).

We may retain a limited subset of data after deletion if we have a legitimate, narrow reason — for example, to investigate an open report of abuse, comply with a legal obligation, or prevent a banned user from rejoining. In those cases we retain only what is needed for that specific purpose, and only for as long as that purpose lasts.

6. Your rights and choices

You have meaningful control over your data inside the app:

• Access. You can review your profile, posts, borrow listings, favors, events, chats, and notes from inside your account at any time.
• Correction. You can edit your profile information (name, photo, unit, etc.) and edit or delete content you have posted.
• Deletion. Tap “Delete Account” in the app to permanently delete your account and trigger the cascade delete described above. You may also email spaik@pomes.app to request deletion.
• Data portability. You can email spaik@pomes.app to request a copy of the personal data associated with your account.
• Communication preferences. You can disable push notifications from your device’s system settings.

If you live in a jurisdiction that gives you additional rights (for example, the right to object to processing or to lodge a complaint with a regulator), you can exercise them by contacting us at the same address.

7. Children’s privacy

POMEs is intended for users 13 years of age or older. The app is not directed to children under 13, and we do not knowingly collect personal information from children under 13. This is consistent with the U.S. Children’s Online Privacy Protection Act (COPPA).

If we learn that we have collected information from a child under 13, we will delete the account and the associated data promptly. If you believe a child under 13 has created an account, please email spaik@pomes.app.

8. Security

We rely on Firebase’s managed infrastructure for security. Data is encrypted in transit (HTTPS / TLS) and at rest. Passwords are never stored in plaintext — Firebase Authentication stores only salted hashes, and we never see your raw password. If you forget your password you can reset it via email from the sign-in screen.

No system is perfectly secure. We do our best, but we cannot guarantee absolute security, and you should choose a strong, unique password and protect access to your device.

9. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top, post a banner inside the app the next time you open it, and (where we have your email) send you an email summarizing what changed. The current version always lives at pomes.app/privacy.

10. Contact

Questions, requests, or concerns? Email spaik@pomes.app.