Privacy Policy
We respect your city life and personal boundaries.
This policy explains how Machi handles account, profile, public content, city selection, device, log, cookie, payment, membership, order, service booking, messaging and notification data.
Last updated: September 2026
1. Who we are and principles
- Operator
- Machi is a local-life and city connection service organized by country, city and language. It is developed and operated by Zhixike Technology (Guangzhou) Co., Ltd. (XICO AI, https://xicoai.com), a company registered in the People's Republic of China; “we” in this policy means that company. Address: Rm 215A, Rm 410, 4/F, Bldg 1, No. 19 Guangsheng Rd, Nansha, Guangzhou, Guangdong, China. Representative: Yao Kai. Contact: hi@machicity.com.
- No sale of personal data
- Machi does not sell users' personal data to advertisers and does not add emails to unrelated ad lists.
- Data minimization and control
- We collect what is needed to provide the service, safety review, payments, memberships and service bookings. You can manage profile, languages, notifications and deletion requests.
2. Information we collect
- Account and profile
- Email, username, display name, avatar, bio, language preferences, city/region selection and account security state.
- User content
- Posts, comments, profiles, business content, housing, hiring, secondhand and service information you publish may be visible to other users.
- Location and city choice
- Machi mainly uses your selected country, city and browsing region to organize content. Precise location is processed only after permission.
- Device, logs and cookies
- Device details, IP address, approximate region, request time, path, response status, cookies and similar technologies support login, preferences, analytics, security and abuse prevention.
- Payments, memberships and orders
- Membership, digital resource, service booking and order information is stored for fulfillment, support, invoices, refunds and risk control. Full card details are handled by Stripe, Apple or Google; Machi does not store full card numbers.
- Bookings, messages and notifications
- Booking forms, communication records, notification preferences, reports and message content may be processed for support, safety review, dispute handling or abuse investigation.
3. Use, sharing and retention
- How we use information
- For login, content display, city recommendation, multilingual experience, membership benefits, service fulfillment, payments, safety review, support, notifications and service improvement.
- How we share information
- We may share necessary information with cloud, email, analytics, payment, App Store / Google Play, support and safety providers, or disclose it when required by law or user safety.
- Third-party services
- Stripe, Apple, Google, email and sign-in services process relevant information under their own policies. Payment card data is handled directly by payment providers.
- Retention
- Account and order data is kept while the account exists and as needed for legal or financial duties. Access logs are usually pruned after about 90 days. Safety, report, transaction and dispute records may be retained longer.
- User rights and deletion
- You may request access, correction, account deletion or processing limits. After deletion, public content, transaction records, legally required orders and safety records may be retained or anonymized.
- Minors, security and cross-border processing
- Machi does not target minors with unsuitable content. We use permission controls, audit and security measures. User data is stored mainly on servers in Tokyo, Japan. Because the operating company is based in China, data may be processed across the countries and regions where users, providers or team members operate, including Japan and China.
- Policy updates
- Updates are posted on the website. Major changes may be announced through in-app notice, email or other reasonable methods.