Provisions Index

Audible's privacy practices are governed by Amazon's Privacy Notice rather than a standalone Audible privacy policy, meaning Amazon's broader data terms apply to your Audible usage....

Why it matters: Amazon's Privacy Notice is a broad document covering a large number of services and data uses. By accepting Audible's terms, you are subject to Amazon's full data collection and use framework, which includes advertising, AI training, and third-party data sharing....

California residents have the right to know what data Audible and Amazon collect about them, request deletion of that data, and opt out of the sale or sharing of their personal information....

Why it matters: If you live in California, you have legally enforceable rights to access, delete, and limit the use of your personal data collected by Audible and Amazon under the CCPA and CPRA....

Fiverr charges buyers an additional service fee on top of the seller's listed price for every order placed on the platform....

Why it matters: The total cost you pay is higher than the price listed on a Gig — this fee adds to every transaction and may not be prominently displayed until checkout....

When you post content on Fiverr — including Gig descriptions, images, or other materials — you grant Fiverr a broad, worldwide, royalty-free license to use, reproduce, and display that content....

Why it matters: Any content you upload to Fiverr can be used by the company for its own business purposes without paying you, which could be a concern for original creative work or proprietary materials....

Sellers must wait a specified clearing period before withdrawing their earnings, and Fiverr may place additional holds on funds in certain circumstances....

Why it matters: Freelancers cannot access their money immediately after completing a job — funds are held for a period, which can impact cash flow for sellers who rely on Fiverr income....

Orders can be cancelled under specific conditions, but refund eligibility and the process for disputes about delivered work are governed by Fiverr's policies, which favour resolution through Fiverr's own dispute system....

Why it matters: If you're unhappy with work you paid for, your refund options are limited and you must go through Fiverr's internal process first, which may not always resolve in your favour....

Fiverr prohibits a wide range of content and conduct on its platform and can remove content or take action against users who violate these restrictions without necessarily providing advance notice....

Why it matters: Your content can be removed and your account actioned by Fiverr based on its own interpretation of its conduct rules, with limited transparency about the decision-making process....

Fiverr's Terms are governed by Israeli law for non-US users, and the laws of the State of California for US users, with disputes subject to courts in those jurisdictions if arbitration does not apply....

Why it matters: If you have a dispute with Fiverr that isn't resolved by arbitration, you may need to pursue it under foreign law or in a distant court, which is costly and impractical for most users....

Fiverr requires all users to be at least 13 years old, and users between 13 and 18 must have parental or guardian consent to use the platform....

Why it matters: Minors using the platform without proper parental consent may have their accounts terminated, and transactions entered into by minors may not be legally enforceable....

BeReal may ask for access to your phone's contact list to help you find friends on the platform. This means contact data from people who have not agreed to BeReal's terms is uploaded to BeReal's servers....

Why it matters: Uploading your contacts shares the personal information of third parties — your friends and family — who have never consented to BeReal collecting their data....

BeReal is a French company but may transfer your personal data to countries outside the EU/EEA, including to the United States, using Standard Contractual Clauses as the legal safeguard....

Why it matters: Your data may leave the EU and be stored or processed in countries with weaker privacy protections, though Standard Contractual Clauses are the EU's approved mechanism for this....

BeReal requires users to be at least 13 years old. The company states it does not knowingly collect personal data from children under 13, but does not describe robust age verification mechanisms....

Why it matters: Without strong age verification, children under 13 may use the platform and have their sensitive data — including photos and location — collected without the heightened protections required by law....

BeReal retains your personal data for as long as your account is active and for a period after account deletion, depending on the type of data and legal obligations....

Why it matters: Your data is not immediately erased when you stop using BeReal — some information may be retained for extended periods for legal or business purposes even after you delete your account....

California residents have the right to opt out of BeReal selling or sharing their personal information with third parties for cross-context behavioral advertising under CCPA/CPRA....

Why it matters: This gives California users a legal mechanism to stop BeReal from monetising their personal data by sharing it with advertisers, which is a meaningful privacy protection under state law....

Verizon may use your Customer Proprietary Network Information (CPNI) — which includes details about your phone calls, services, and network usage — for marketing its own products and services....

Why it matters: CPNI is legally protected data under federal telecommunications law, and its use for marketing must follow specific rules; consumers have a right to restrict this use....

California residents have specific legal rights including the right to know what personal information Verizon collects, the right to delete it, the right to correct it, and the right to opt out of its sale or sharing....

Why it matters: These rights give California consumers meaningful control over their personal data, but exercising them requires knowing they exist and actively submitting requests to Verizon....

Verizon retains personal data for as long as needed for business or legal purposes and may de-identify data to use it for analytics and sharing without the same privacy restrictions....

Why it matters: De-identified data can sometimes be re-identified, and vague retention periods mean your data could be held and used for extended periods beyond what you might expect....

Verizon states it does not knowingly collect personal information from children under 13 without parental consent, in compliance with federal children's privacy law (COPPA)....

Why it matters: While this is a legal baseline requirement, parents should be aware that family plans may involve minors whose data could still be collected incidentally through shared account usage....

Poshmark shares your personal information — including browsing behavior, purchase history, and device data — with third-party advertising and analytics companies to show you targeted ads....

Why it matters: This sharing can result in your personal data being used by companies you have no direct relationship with, and it may constitute a 'sale' of data under some state privacy laws....

If you live in California, you have the right to know what personal data Poshmark has collected about you, request it be deleted, and opt out of its sale or sharing....

Why it matters: California residents have legally enforceable rights under CCPA/CPRA that Poshmark is obligated to honor, giving you meaningful control over your personal data....

Poshmark uses cookies, pixel tags, and similar tracking tools to monitor your activity on and off the platform for advertising, analytics, and personalization purposes....

Why it matters: These tracking technologies allow Poshmark and its partners to build detailed profiles of your behavior, both on and off the platform, which are used for targeted advertising....

Poshmark collects your payment card details and banking information when you make purchases or receive payments as a seller on the platform....

Why it matters: The collection and storage of financial information creates risk if data is breached or mishandled, and consumers should understand how this sensitive data is protected....

Poshmark retains your personal information for as long as necessary to provide services and comply with legal obligations, which may mean they keep your data for an extended period even after you stop using the platform....

Why it matters: Long data retention periods mean your personal information remains accessible to Poshmark and potentially to third parties long after you have stopped actively using the service....

Poshmark may collect your precise or approximate location data through your device when you use the app, which can be used for personalization and advertising purposes....

Why it matters: Location data is sensitive personal information that can reveal your home address, daily routines, and other private details about your life....

When you close your Poshmark account, the company may retain certain personal information as required by law or for legitimate business purposes, meaning deletion is not always complete....

Why it matters: Closing your account does not guarantee full erasure of your personal data, which may remain in Poshmark's systems or with third parties they have previously shared it with....

Coinbase can change the rules of your agreement at any time, and simply continuing to use the service after receiving an email means you've automatically agreed to the new terms....

Why it matters: Coinbase can change fees, data practices, arbitration terms, or other material provisions with only email notice — and your continued use of the platform is treated as acceptance even if you didn't read the new terms....

Before you can use Coinbase, you must provide your real name, address, Social Security number, and other identity documents — and Coinbase can ask for more information at any time as required by federal anti-money laundering law....

Why it matters: You are required to share highly sensitive personal and financial information including your SSN with Coinbase as a condition of service, and this data is subject to their privacy practices and potential government disclosure obligations....

Coinbase charges multiple types of fees including transaction fees and a hidden 'spread' built into the price of cryptocurrency — so the price you see may already include Coinbase's profit margin on top of the market price....

Why it matters: The spread is effectively a hidden markup on your cryptocurrency purchase or sale price that is separate from the disclosed transaction fee, meaning the total cost of trading on Coinbase may be significantly higher than the listed fee alone suggests....

You are entirely responsible for figuring out and paying taxes on your cryptocurrency transactions — Coinbase will not help you calculate taxes, but may report your transaction data to the IRS....

Why it matters: Cryptocurrency taxation is complex (every trade is potentially a taxable event), and Coinbase's reporting to the IRS means the agency already has your transaction data — meaning failure to properly report can result in significant penalties and interest....

Google states that Gemini Apps are not intended for users under the applicable age threshold (generally under 13 in the US, or higher in some regions), and that certain features like AI model training opt-outs have additional protections for younger users....

Why it matters: Families and educators should be aware of the age restrictions and confirm that minors are not using Gemini without appropriate account controls, as minors' data carries heightened legal protections....

Google collects your general location information when you use Gemini to help provide location-relevant responses, and this is linked to your account data....

Why it matters: Location data combined with conversation history creates a detailed profile of your whereabouts and interests, which carries significant privacy implications....

For users accessing Gemini through Google Workspace (business or school accounts), different data handling rules apply, and administrators may control how Gemini is used and what data is retained....

Why it matters: Employees and students using Gemini through work or school accounts may have reduced privacy rights, as their organization's administrators can access settings, logs, and controls....

Users have the right to access, download, and delete their Gemini conversation data through Google Account tools such as Google Takeout and My Activity....

Why it matters: Knowing these rights exist and how to exercise them empowers consumers to control what personal information Google holds about their Gemini usage....

If you use Fitbit outside the United States, your personal data may be transferred to and processed in the US, where privacy laws may offer fewer protections than in your home country....

Why it matters: For EU and UK users in particular, transferring health data to the US may not carry the same legal protections as data kept within the European Economic Area, depending on the safeguards Fitbit uses....

Fitbit states that users can access, export, and request deletion of their personal data through account settings or by contacting Fitbit. The scope and timeline for these rights may differ depending on whether you use a Google Account....

Why it matters: Knowing you have the right to delete your health data and how to exercise it is critical, especially given the sensitivity of the biometric and health information Fitbit stores....

Fitbit retains your personal data for as long as your account is active and for a period afterward as required by law or business purposes. Deleting your account does not guarantee immediate or permanent deletion of all data....

Why it matters: Your sensitive health data may remain on Fitbit's servers even after you stop using the service or delete your account, potentially for extended legal or business retention periods....

Users — particularly those in the EU/EEA and California — have rights to access, correct, delete, or port their personal data, and can object to certain types of processing....

Why it matters: These rights give you meaningful control over your personal data, but you must actively exercise them by contacting Waze, as they are not automatic....

Waze states that its services are not directed at children under 13 (or higher age thresholds in some jurisdictions) and that it does not knowingly collect personal data from children....

Why it matters: If a child uses Waze without parental knowledge, their location and personal data may be collected without the additional protections required by law for minors....

Waze may transfer your personal data to countries outside your own, including to the United States, where data protection laws may differ from those in your home country....

Why it matters: If you are in the EU or UK, your data may be transferred to jurisdictions with different — potentially lower — levels of legal protection for your personal information....

When you report accidents, traffic, or other events in Waze, this content is shared with the Waze community and may be used to improve Waze services....

Why it matters: Reports you submit may be linked to your account and location at the time of submission, creating a record of your activity and whereabouts....

Waze retains your personal data for as long as your account is active or as needed to provide services, comply with legal obligations, or resolve disputes....

Why it matters: Vague retention periods mean your location history and personal data could be stored indefinitely unless you actively request deletion....

Waze integrates with third-party services (such as music apps and fuel price providers) and may share data with these partners when you use integrated features....

Why it matters: Using third-party features within Waze can trigger additional data sharing with external companies whose own privacy policies govern how your data is used....

Waze states that it uses anonymized and aggregated data about driving patterns and traffic conditions to improve its services and may share such data with third parties....

Why it matters: While Waze describes this data as anonymous, research has shown that anonymized location data can often be re-identified, potentially revealing your identity and movements....

You generally cannot save or store Google Maps data locally, except for very limited temporary caching to improve app performance....

Why it matters: This restriction ensures all Maps data must flow through Google's live APIs, preventing developers from building offline-capable or independent datasets from Google's mapping data....

Any Maps content or API output must only be shown inside a Google Maps-branded interface — you cannot extract and display it in a standalone or non-Google context....

Why it matters: This restricts developers from displaying Google Maps data in any interface that does not use Google's Maps framework, preventing integration of Google map data into alternative visualizations or mixed-provider solutions....

If you build an app using Google Maps APIs, you must make your users agree to terms of service that include Google's key restrictions and protect Google's ownership of its map content....

Why it matters: End users of developer applications are indirectly bound by Google's Maps Platform terms through the developer's required pass-through, extending Google's legal framework into consumer-facing applications without direct notice to consumers....

Google owns everything in the Maps Platform — all maps, data, technology, and content — and using the API gives you no ownership rights over any of it....

Why it matters: Users of the Maps APIs acquire only a limited, revocable license to use Google's content, with no proprietary rights that could survive termination of the agreement....

Any legal dispute about these terms must be resolved under California law in courts located in Santa Clara County — regardless of where you are based....

Why it matters: Non-California businesses and international developers are required to litigate in Santa Clara County, California, creating significant practical and financial barriers to pursuing legal claims against Google....

Strava maintains a separate Consumer Health Data Policy for US users that governs how it handles sensitive health-related data like heart rate, sleep, and fitness metrics....

Why it matters: Several US states have enacted specific consumer health data laws (e.g., Washington My Health MY Data Act) that give users stronger rights over their health data, and this separate policy is intended to address those obligations....

Strava transfers your personal data internationally, including to the United States, using Standard Contractual Clauses and other mechanisms to comply with data protection laws....

Why it matters: If you live in the EU or UK, your personal data is transferred to countries with different privacy protections, and the legal mechanisms Strava uses to do this can affect your rights and remedies....