Privacy Policy

Cominly, operated by Shashitu Enterprises LLC · Last updated: November 2026

Cominly ("we", "our", or "us") is operated by Shashitu Enterprises LLC. This Privacy Policy explains how we collect, use, and protect your information when you use the Cominly mobile application and when you visit our website at cominly.com. Most of this policy describes the app, because that is where almost everything we collect comes from. The "Analytics" section below says what happens when you only visit the website.

Information We Collect

• Account information: email address and/or phone number, display name, profile photo
• If you sign in with Apple or Google: the identifier that provider assigns to your account, your name if you choose to share it, and your email address along with whether the provider has confirmed it. If you use Apple's Hide My Email, we receive Apple's private relay address, not your real one
• Optional profile details you choose to add, such as your street or section, profession, and skills
• Community membership and role information
• Posts, comments, messages, reactions, poll votes and answers, safety alerts, and other content you create
• If a community runs a pledge or donation drive, the amount you pledge and any note you add
• A legal name, if you join a group that asks members to identify themselves — for example a mutual-aid fund. This is separate from your display name, and you are asked for it only at the point of joining such a group
• Payment details you choose to share with your group (such as a payment handle or account name) and any payment confirmation image you upload
• Savings circle, dues, and contribution records — amounts, cycles, and payment status
• Appointments you book or receive, and the services a provider offers
• Marketplace listings you post
• Events you create or RSVP to
• Contact details you choose to share in a chat or direct message
• Web addresses you post, so we can show a preview of the linked page and check that it is not a known scam or malware site
• Device information and push notification tokens
• Usage data (which features you use, when you're active)

How We Use Your Information

• To provide and operate the Cominly service
• To verify your email or phone number and help you recover your account, including sending one-time codes by email or SMS
• To let you sign in with Apple or Google and to recognize your account when you return
• To send notifications about community activity
• To enable communication between community members
• To enforce our Terms of Service and community guidelines
• To automatically screen community and display names for policy compliance (using automated tools, as expected for user-generated content platforms)
• To automatically check uploaded profile and community photos for nudity or violence, and links you post for known scam and malware sites
• To improve and develop new features

Information Sharing

• Your profile information is visible to members of your communities
• Content you create — posts, comments, reactions, and poll votes and answers — is visible to members of that community, and reactions and non-anonymous poll votes are shown with your name
• Community admins and owners can see member details and, for non-anonymous polls and pledges, who responded (and, for pledges, the amount and any note) so they can organize and follow up
• Anonymous polls and pledges are never linked to your name — no one, including admins and our team, can see how you responded
• Payment details you enter for a circle or dues group are shown to the members of that group
• Payment confirmations you upload are visible to the organizers who review them
• Contribution and dues status is visible to your group's organizers and, where the group shows it, to other members
• Appointment details are visible to you and the provider you booked with
• Event RSVPs are visible to community members
• A contact you share in a message is visible to whoever can see that message
• If you join a mutual-aid fund, its organizers can see the legal name you gave and, if you have one on file, your phone number — so they can confirm who is in the fund. No other member sees either
• Your email is never shared with other members, and your phone number is not shared except with the organizers of a mutual-aid fund you have joined, as above
• If you sign in with Apple or Google, that provider learns that you used Cominly to sign in. We do not send them your posts, messages, or community activity. Their handling of that information is covered by their own privacy policies
• We use trusted service providers to run the service, including MongoDB (database hosting), Cloudflare (image and file storage, website hosting, and website analytics), Resend (email), Twilio (SMS codes), Expo (push notification delivery), PostHog (app analytics), and Google (checking uploaded profile and community photos, and links you post, for harmful content; Google receives only the photo or the web address, not your name or account). They process only what they need to provide their service
• Our team may access your information to operate, secure, moderate, and support the service
• Today we do not sell your personal information to third parties. If this ever changes we will update this policy and ask you to review it before the change takes effect (see "Changes to This Policy")
• If the app shows sponsored content, it is labelled and chosen based on context (for example, the community or local area) — not on a profile of you. Advertisers do not receive your personal information, and we do not share information with ad networks or data brokers
• We may share information if required by law

Analytics

We use PostHog, a third-party product-analytics service, to understand how the app is used (for example, which screens and features are popular) so we can improve it. This includes anonymous usage events, screen views, and a device/user identifier. We do not send the content of your messages or posts. Analytics is optional: you choose at signup, and you can turn it off anytime in Settings > Privacy. Today we do not use this data for advertising or cross-app tracking, and we do not sell it. If this ever changes we will update this policy and ask you to review it before the change takes effect (see "Changes to This Policy").

Our website at cominly.com is separate. It uses Cloudflare Web Analytics, which counts page visits and tells us which pages people read and which sites they arrived from. It sets no cookies, stores nothing on your device, builds no profile of you, and does not follow you to other websites. It cannot identify you, and it is not connected to any app account. There is nothing to opt out of, because nothing personal is collected. Browsing the website does not require an account, and reading it alone tells us nothing about who you are.

Money in Communities

Some communities use Cominly to organize savings circles, dues, or contributions. The app records what members enter — amounts, who has paid, and any payment details or confirmation images they choose to share with their group. Cominly does not process payments and never sees or handles the money itself; members pay each other directly outside the app. We do not verify payment details or confirmations.

These records are part of the group's history. If you leave a group or delete your account, the record of what you paid and what you received stays with the group so its accounts still add up, and payment confirmations you uploaded stay visible to its organizers. Deleting your account removes your profile, and with it any legal name you gave to join a fund.

We use money records only to run your group's features in the app. We do not use them for advertising or credit scoring, and we do not sell them.

Polls, Questions & Pledges

Communities can run polls, open questions, and pledge or donation drives. For non-anonymous ones, community admins and owners can see who responded — and for pledges, the amount and any note you add — so they can organize and follow up (for example, to arrange a donation). For anonymous ones, your response is never linked to your identity, and no one, including admins and our team, can see how you responded. Pledge amounts are commitments recorded in the app. As with other money between members, the app does not process payments — members arrange payment outside Cominly (see "Money in Communities").

Links You Share

When you post a web address, our servers fetch that page to show a preview — its title, description, and preview image — and cache it. We only fetch public web addresses, and we do not send your identity to the linked site.

Data Storage & Security

Your data is stored on servers in the United States. Using Cominly means your information is transferred to and processed in the United States. We use industry-standard encryption and follow best practices to protect it. However, no method of transmission over the internet is 100% secure.

When personal data is transferred from the European Economic Area, the United Kingdom, or Switzerland to the United States, we rely on the European Commission's standard contractual clauses (with the UK addendum where it applies) or another transfer mechanism recognized by law. The providers who run parts of the service for us process data on our instructions under contracts that require them to protect it.

Data Retention & Account Deletion

You can delete your account at any time from Settings. When you do, we permanently remove your personal profile and delete your direct messages. Content you posted in a community (such as posts and comments) is kept but anonymized — your name is replaced with "Former member" and your profile photo is removed — so community history stays intact without identifying you. If you leave a community without deleting your account, your content remains attributed to you. Savings-circle, dues, and fund records are handled as described in "Money in Communities".

Your Rights

• You can update or delete your profile at any time
• You can leave any community at any time
• You can delete your account at any time from Settings (see "Data Retention & Account Deletion")
• You can opt out of push notifications in your device settings
• You can opt out of usage analytics in Settings > Privacy

Wherever you live, you can ask us for a copy of your personal data, ask us to correct or delete it, or ask how we use it, by emailing [email protected]. We answer within 30 days, or sooner where your local law requires, and we will not treat you differently for asking. If we cannot do what you ask, we will tell you why, and you can ask us to reconsider by replying to our answer.

We do not sell your personal information, and we do not share it for advertising that follows you across other apps or websites.

If You Are in the EEA or UK

Shashitu Enterprises LLC is the controller of your personal data. Contact us at [email protected].

We rely on these legal bases:

• Contract — to create your account and run the service you signed up for
• Legitimate interests — security, moderation, preventing abuse, and understanding how the service is performing so we can keep it reliable
• Consent — optional analytics (you can withdraw anytime in Settings > Privacy)

You have the right to access, correct, erase, or port your personal data; to object to or restrict certain processing; and to withdraw consent where we rely on it. In the app, you can turn off analytics in Settings and delete your account from Settings. For other requests, email us.

You also have the right to complain to your local data-protection supervisory authority.

Rights in Other Countries

Cominly is available in many countries, and your local law may give you more rights than those above. We honor them. In particular:

• United States, including California and other states with privacy laws: you can know, access, correct, and delete your personal information, and appeal if we decline a request. We do not sell or share personal information as those laws define it.
• Canada: you can access and correct your information and withdraw consent, and you can complain to the Office of the Privacy Commissioner of Canada or your provincial commissioner.
• Brazil: you have the rights in Article 18 of the LGPD, including confirmation, access, correction, anonymization, portability, deletion, and information about sharing, and you can complain to the ANPD.
• India: under the Digital Personal Data Protection Act you can get a summary of your data, correct or erase it, nominate someone to exercise your rights, and raise a grievance with us by email; if we do not resolve it, you can approach the Data Protection Board of India.
• Kenya, Nigeria, South Africa, Ethiopia, and other countries with data-protection laws: you have the rights your national law gives, including access, correction, deletion, and objection, and you can complain to your national authority, such as the Office of the Data Protection Commissioner in Kenya, the Nigeria Data Protection Commission, the Information Regulator in South Africa, or the Ethiopian Communications Authority.
• Anywhere else: you have the rights in "Your Rights" and any further rights your local law gives you.

Children's Privacy

Cominly is not intended for children under 13, or under the higher minimum age required in your country. We do not knowingly collect information from children below that age. Where your local law requires a parent's or guardian's consent for someone your age, you may use Cominly only with that consent. If you believe a child has given us information without the consent their law requires, email us and we will delete it.

Changes to This Policy

We may update this policy from time to time. When we do, we will update the "Last updated" date and the privacy version. For minor changes, we may notify you through the app. For significant changes — such as new categories of data we collect, new purposes of use, or new ways we share information — we will ask you to review and accept the updated policy before you continue using Cominly. If you do not accept, you may stop using the app and delete your account.

Contact Us

Shashitu Enterprises LLC

Email: [email protected]