Privacy policy

Current policy, updated 13 November 2026. It covers the ManyHats app on phones and the web, and this website.

The plain pages here, like this one and the directory of people, set no cookies and have no ads or tracking. Questions about your data: support@manyhatstt.com. To delete your account, see Delete your account.

Who we are

ManyHats is run by Flagship Business Systems. Write to us about your data at support@manyhatstt.com, or from Help › Contact us.

What we keep

Your name, area, photo, profile theme and hats are public, and so is where you work if you add it. Your email, phone, payment details, notification settings and device push tokens are private to you. Messages are visible only to the two people in them, or to you and a business's team when you message a business. Bookings are visible only to the people in them, and so are the answers you give an offer's questions.

What we collect

Your name, email and the account ID your sign-in gives you. Whatever you add: your area or address, phone or WhatsApp, résumé, photos, videos and audio of your work, hats, offers, jobs, products, reviews, messages, payment details you send someone, and calendar links. Orders and bookings, with their payments as recorded. Views, searches and ad counts, in totals. A search that found nothing, if you then tell us what you need. Your device's push token, so notifications reach it. We never read your phone's location, contacts or calendar.

Businesses

A business page is public: its name, place, hours, contact details, products and the people it confirms as working there. A business's owner, managers and front desk can read the messages people send to the business. Businesses are responsible for what they sell and for the details people give them.

How we use it

To show your hats to people looking for them, deliver messages and notifications, count anonymous views and searches for your own analytics, and keep ManyHats safe.

Ads

Ads show to everyone in the lists people look through. Local businesses and people can pay to show a Sponsored card on Explore, in categories, in search and in the Jobs and Shops lanes; we count how often each is seen and tapped, in total, to tell the advertiser. Other ad spaces show Google ads: AdMob in the phone apps and AdSense on the web. We ask Google for ads that aren't personalised, but Google may use cookies or your device's ad ID to show and measure them, under Google's own privacy policy. Ads never use your ManyHats details and never appear on hat pages or in messages.

What Google gets

In the phone apps, Google's AdMob collects your device's ad ID, an approximate location worked out from your internet address, how ads are seen and tapped, and crash and diagnostic details, to show and measure ads under Google's own privacy policy.

Promotions

People and businesses can promote their own jobs, products, shops and hats. A promotion is counted like a Sponsored card: how often it is seen and tapped, in total, from people who are signed in, plus the contacts, applies or orders it brings while it runs, and how many of the orders asked for from its start until 30 days after its end were confirmed done. The person who bought it sees only those totals, never who saw or tapped it.

What we never do

Sell your data, show ads on hat pages or in messages, or share your private details with anyone you haven't sent them to.

Reviews of clients

Once a job is confirmed, a provider can review the client. That review isn't public and the client doesn't see it. Only other providers that client makes an order with can read it, to know who they're working with. It goes when the client deletes their account.

How quickly people reply

We keep how long each person takes to first answer a request, an order or a new message. Once a day we work out a reply rate and a typical reply time from the last 90 days and put those two numbers on their hats. Only they see them for now; Help says when others can. Nobody can read the individual times, and spam you report and time you're away are left out.

Who you looked at, and your lists

The people whose hats you open are kept for you alone, in Your people, and you can clear them any time. A list is private until you share it. Once shared, anyone with its link sees your name, the list's name and those people's public cards, and never their phone or email. If someone hides a hat, it drops off your list for everyone else.

Warnings and limits

If a report is upheld, we keep any warning for 90 days and any limit until it ends, and only you and our admins can see them.

Reports and safety

When you report something, we keep your report and a copy of what you reported so we can act on it. We may hide a hat, remove a review or suspend an account that breaks the Terms, and we tell the person why. We never read private messages to do this.

Résumés and contact details

Your résumé is private to you. With Open to work on, signed-in people see it in Find people without your phone, email or references, and without your pay unless you show it. A private link shows the same to anyone who has it, stops working when you stop it, and is never listed by search engines. Your phone, email and references go only to someone whose request you accept, read at the moment they look, and every request, answer and look is logged for you to see. Sharing ends after 90 days, when you stop it, or when one of you is blocked or suspended.

Shopping

Your carts are kept on your device, and in your account once you sign in, so they follow you between phone and web; a shop never sees a cart you haven't ordered. When you order, the shop sees your name, what you ordered, your village and directions, and the phone number you give for the driver, and the driver the shop sends sees what they need to bring it. Saved products and "Tell me when it's back" are private to you.

Your choices

Edit or hide any hat, change notification settings, block people, and delete your account from You › Sign-in and security.

How long we keep it

What you add stays until you delete it or your account. Some things go sooner: résumé sharing ends after 90 days, warnings after 90 days, applications 12 months after their job closes, a renter's licence photo 30 days after the rental, and an asker's email and scrambled internet address after 90 days. When you delete your account, these stay with no set end yet: messages you sent, in the other person's chat; orders and bookings with their payments, and you on the customer list of whoever you booked or bought from; reviews you wrote; jobs you posted, closed and open by link only; your name, title and photo on a business page that confirmed you; promotions and plan payments, as our record of payment; and reports. Stored copies of reviews of your hats and businesses, and some shop news photos and product videos, stay out of sight.

Where it lives

ManyHats runs on Google Firebase. Photos are stored in Firebase Storage.

Shops you follow and buy from

A shop's owner and managers see who follows it. A shop's team sees the people who order from it, with their orders and what they spent, and can add notes and tags only the team sees. Shops see how many people visited them and where their orders came from (search, a lane, a shared link or a promotion), in totals, never who visited. To say where an order came from, ManyHats keeps how you last came to each shop in your own account; nobody else can read it, and it goes when you delete your account. Photos you add to a review are public with the review.

Asking with no account

You can ask someone from their hat's web page without an account. We keep your name, what you wrote, when and where if you said, and your answers to their questions, with the request, like any other order. The person you asked sees those and nothing else. If you give an email while email is on, only we see it, and we use it only to send your private link and say when they reply. We also keep a scrambled form of your internet address, which nobody can read back, so we can stop one sender flooding people. We delete the email and the scrambled address after 90 days. If our checks hold your request back as spam, or the person marks it as spam, we delete it after 30 days and that sender is stopped for 30 days. Your private link is the key to your request: anyone who has it can read and answer as you. We don't use cookies for any of this. To have your name and words removed from an order, contact us from Help › Contact us with the link.

Telling people what you need

When a search comes up short and you tell us what you need, it goes up as a one-off job, public like any job, with your name. We tell up to five people who do that kind of work. Admins can see it on a list of what people couldn't find, to know who to sign up. No AI reads or rewrites it.

Jobs and applications

A job you post is public while it is open, with its pay, village and what it needs; its page can show in Google and other search engines, and leaves them when it closes. When you apply, a copy of your résumé, your answers and your note go only to the person or business that posted the job (its owner, managers and the people it names). Your phone, email and references are never in it; they are shared only if you tick to share them or accept a request. Their notes about you stay with their team. Applications are deleted 12 months after the job closes, and you can delete yours any time.

Paying for the business plan

If you pay for the plan by card on the web, you pay on WiPay's own secure page. WiPay handles your card, and we never see its number. We keep that the plan was paid, when, and WiPay's reference.