Privacy Policy
This page explains what we collect, why, who receives it, and what you can ask us to do about it.
1. What we collect
At registration: email address, password (stored only as a hash, so we cannot read it), country, phone number and preferred language. When you book: your name, phone, email and whatever note you write. As you browse: the country and city inferred from your IP address, and the places you have viewed.
2. Why we collect it
To deliver what you asked for (getting your booking request to the merchant, who needs your phone to reach you), to keep accounts secure (a CAPTCHA and rate limits block automated abuse), and to show the right city, language and currency for where you are.
3. Your location
By default we infer your location from your IP address, to city level, not to exact coordinates. If you press the locate button, your browser asks for separate permission. Declining does not affect anything else.
4. Who receives your data
The merchant you book with receives your name, phone, email and note, because they have to be able to reach you. Payment providers (ECPay, PayPal) handle merchant listing fees. Email is sent through Resend. The site and its databases run on Cloudflare, and traffic is measured with Cloudflare Web Analytics, which writes no cookies and builds no user identifier. We do not sell personal data and we do not run cross-site advertising trackers.
5. Automatic translation
When you and a merchant write in different languages, the system translates the message with Cloudflare Workers AI and includes the original text alongside it. The translation exists to deliver that one message; the content is not used to train models.
6. Speech
The voice that reads out addresses and place names is synthesised on your own device. The text is never sent to our servers and nothing is recorded.
7. How long we keep it
Account data is kept until you delete your account. Booking records are kept for two years as evidence in case of a dispute. Server access logs are kept for 30 days.
8. Your rights
You can ask to see, correct, delete or receive a copy of your data, and you can withdraw consent. Users in the EU and UK have the rights granted by the GDPR; users in Taiwan are covered by the Personal Data Protection Act. Write to legal@citymobee.com and we will reply within 30 days.
9. Children
This site is not for anyone under 13, and we do not knowingly collect data from children.
10. International transfers
The site runs on servers around the world, so your data may be processed outside the country you are in. This policy applies wherever it is processed.
11. Security
Everything travels over HTTPS, passwords are stored as hashes, and the merchant console and member area authenticate separately.
12. Changes and contact
We update the date on this page whenever the policy changes. Questions go to legal@citymobee.com.