Scope and age
Xóm Ơi is ODERYN’s neighbourhood marketplace and community app for people aged 18 or over on Android and iOS. This policy explains the data used to run the service. Contact oderynstudio@gmail.com. This build does not ask for or check age. Do not use it if you are under 18.
Information we process
Sign-in uses email and password. Google sign-in or Sign in with Apple are offered when enabled. On iOS, Google is offered only together with Sign in with Apple. Phone sign-in is currently disabled; we do not collect a phone number for account sign-in. Supabase handles authentication; we handle your account ID, email, nickname and optional profile photo. We process listings and photos, community posts and replies, groups and events, chats, trade proposals and confirmations, reviews, reports, blocks and in-app notifications. On Android, if notifications are on, we store an FCM token and installation ID. The push payload is only `{xom:inbox}` and contains no message text. On iOS, if push is enabled, we store an APNs device token and installation ID; the current server does not send iOS pushes. Photos are re-encoded to remove embedded metadata, including EXIF location. We do not collect contacts, calendar or card details.
Area verification and visibility
To verify your neighbourhood, precise device coordinates are sent to Geoapify for a place name and are not stored by us. We keep the area name and a point rounded to about 1 km, never your home address. Android uses the Google Maps SDK, including device location on the area map; iOS uses Apple MapKit. Google Play Integrity on Android and Apple App Attest on iOS are used where area verification is available. Nearby users can see your nickname, profile photo, listings, public posts and area name. Chats are visible to their participants; exact group meeting places are visible to the organiser and registered attendees.
Ads and optional purchases
The Android home feed shows Google AdMob native ads. This build does not show a Google UMP consent form. Google may process an advertising ID, ad interactions, IP-derived approximate location and SDK diagnostics under its policy. Local shop ads are selected by the distance between your verified area center and the shop’s verified area center, within a campaign radius of 500–5000 m; the displayed distance is rounded to 100 m. The two areas need not have the same name. A shop profile can include a phone number, Zalo ID, hours and photo. We store ad impression and click events with your account ID. Call and Zalo buttons open the shop’s contact details. On Android, optional listing bumps (“Đẩy tin”), local shop ad credits and a Pro dealer subscription use Google Play Billing. Google processes payment. We store a SHA-256 hash of the purchase token, plus the order ID, product ID and grant record; we do not store the token or card details. There are no in-app purchases on iOS. AdMob may collect and share this data, including crash logs and diagnostics, for advertising, analytics and fraud prevention, security and compliance. The app’s own diagnostics stay on the device. The current test period is a free preview of digital extras, with no real charges. Any later paid purchase will show its price and terms in Google Play before confirmation.
Providers and security
Supabase processes account, content and purchase grant data in Singapore. Google provides sign-in, Firebase Cloud Messaging, Play Integrity, Google Maps, AdMob and Google Play Billing as applicable; Apple provides Sign in with Apple, App Attest and MapKit as applicable. Geoapify receives coordinates for area verification. Account email is sent by the SMTP provider configured in Supabase Auth; oderynstudio@gmail.com is the support mailbox. Cloudflare serves this website. We do not sell personal data. Use device permission settings to control optional location and notification access.
Retention, rights and deletion
Request account deletion in the app at Me → Settings → Request account deletion, or email oderynstudio@gmail.com; see the deletion instructions. We seal the account immediately and hide its listings and posts. Signing in does not cancel the request. Within 30 days, enter your password on the deletion screen and tap Cancel deletion request. After 30 days we erase sign-in details, profile and photo files, listings, posts, verified area, push tokens, notifications, your block list and personal purchase and grant records. We remove memberships, join requests and group-message text. Groups you created are closed, while title and description remain for members. Events you created are cancelled and their meeting place is deleted; the title remains. In 1:1 chats, your text remains in the other person’s thread with your account ID; your profile name becomes “—” and your photo is removed. Trade-review comments are cleared but ratings remain. Reports, group bans and moderation records remain tied to your account ID, with no set end date. Listing IDs remain tied to your account ID to prevent link reuse. Photo files are deleted, but proof rows keep account ID, storage key, hash and source URL for late removal; these are personal records. A deletion receipt and account ID remain, and its status link expires 30 days after completion. Records required by law may also be retained. Contact us to access, correct, export or delete data or withdraw consent.
Changes and contact
We will post changes here and announce material changes in the app. No storage or transmission is perfectly secure. For privacy questions, write to oderynstudio@gmail.com.
Support · ODERYN Studio
Questions about an app, an early test, or an idea worth making — we would like to hear it.
oderynstudio@gmail.com ↗Xóm Ơi · oderyn.com