fix: canonical privacy URL throughout the Play kit; drop duplicate policy page

PRIVACY.md

@@ -4,7 +4,8 @@
 
 This is the whole policy. No dark patterns, no legalese.
 
-Hosted copy (for app-store listings): <https://forage.techempower.org/privacy.html>
+Hosted copy (for app-store listings): <https://techempower.org/forageforall/privacy>
+(auto-generated from this file — see the techempower.org repo)
 Account deletion requests: <https://forage.techempower.org/delete-account.html>
 
 ## What we collect

docs/delete-account.html

@@ -86,13 +86,13 @@ <h2>Deleting some data without closing your account</h2>
     <div class="callout">
       <p style="margin:0"><strong>Good to know:</strong> browsing the map never required an account in the
       first place — accounts exist only so the community can trust who's confirming what's ripe.
-      Read the full <a href="/privacy.html">privacy policy</a>.</p>
+      Read the full <a href="https://techempower.org/forageforall/privacy">privacy policy</a>.</p>
     </div>
 
     <footer>
       Forage for All is a free, open-source (AGPLv3) project by
       <a href="https://techempower.org">TechEmpower</a>, a 501(c)(3) nonprofit.
-      · <a href="/">Home</a> · <a href="/privacy.html">Privacy policy</a>
+      · <a href="/">Home</a> · <a href="https://techempower.org/forageforall/privacy">Privacy policy</a>
     </footer>
   </main>
 </body>

docs/play-store/SUBMISSION-RUNBOOK.md

@@ -12,7 +12,9 @@ on branch `feat/play-store-submission`; this file sequences the rest.
 - `app.config.ts`: stable applicationId `org.forageforall.app`, permissions minimized
   (location only; unused camera/audio/storage **blocked**), `targetSdkVersion 35` via
   `expo-build-properties` (Play hard-requires ≥35 for new apps since 2025-08-31)
-- Hosted privacy policy → `https://forage.techempower.org/privacy.html`
+- Hosted privacy policy → `https://techempower.org/forageforall/privacy` (live; on the
+  publisher's own domain, auto-generated from this repo's `PRIVACY.md` — see
+  maintenance note in 2.3)
 - Hosted deletion page → `https://forage.techempower.org/delete-account.html`
   (+ in-app Profile → Delete account entry point, as Play's deletion policy requires)
 - Play icon 512 + feature graphic 1024×500 generated (`assets/` here)
@@ -127,7 +129,7 @@ es-US* and paste the Spanish set.
 
 | Form | Answer | Source |
 |---|---|---|
-| Privacy policy | `https://forage.techempower.org/privacy.html` | — |
+| Privacy policy | `https://techempower.org/forageforall/privacy` | — |
 | App access | “All functionality available without special access” — browsing is anonymous; publishing uses open self-serve signup (any email, magic code — a reviewer can create an account in seconds; pre-provisioned test credentials are impossible with magic-code auth) | — |
 | Ads | **No** | AGENTS.md hard rule |
 | Content rating | Fill per **`content-rating.md`** | sheet |
@@ -140,6 +142,13 @@ es-US* and paste the Spanish set.
 | Financial features | None | — |
 | Health | None | — |
 
+> **Keeping the hosted policy in sync:** the privacy URL above is a static page
+> on techempower.org generated **from this repo's `PRIVACY.md`**. If `PRIVACY.md`
+> changes, regenerate the page in the techempower.org repo via `npx marked` →
+> `lib/data/privacy-forageforall.ts` (documented in that repo's commit `19ad615`)
+> and redeploy. PRIVACY.md stays the single source of truth — never edit the
+> hosted page directly.
+
 **2.4 · First upload → Internal testing.** Test and release → Internal testing →
 Create release → upload the `.aab` from 1.2 → release notes (one line:
 “First Play build — community map of edible plants on public land.”) → add a

docs/play-store/listing.md

@@ -50,7 +50,7 @@ Drop a pin, pick the species from the catalog, and mark ripeness. Others confirm
 • Pin coordinates are rounded to a ~110 m grid before they're saved — the neighborhood, not the doorstep
 • Your device location never leaves your device; it only centers the map
 • Browsing needs no account, and anonymous reports are allowed
-Full policy (short and human-readable): forage.techempower.org/privacy.html
+Full policy (short and human-readable): techempower.org/forageforall/privacy
 
 🌱 FREE AND OPEN SOURCE
 Forage for All is AGPLv3 open source, built by volunteers, run by a 501(c)(3) nonprofit. Free forever: no subscriptions, no paywalls, no venture funding, no data sold. Read the code, file an issue, or contribute at github.com/techempower-org/forageforall.
@@ -81,7 +81,7 @@ Marca un punto, elige la especie del catálogo e indica su maduración. Otras pe
 • Las coordenadas se redondean a una cuadrícula de ~110 m antes de guardarse: el vecindario, no la puerta de tu casa
 • La ubicación de tu dispositivo nunca sale de él; solo centra el mapa
 • Explorar no requiere cuenta, y se permiten reportes anónimos
-Política completa (corta y legible): forage.techempower.org/privacy.html
+Política completa (corta y legible): techempower.org/forageforall/privacy
 
 🌱 GRATIS Y DE CÓDIGO ABIERTO
 Forage for All es código abierto (AGPLv3), construido por voluntarios y operado por una organización sin fines de lucro 501(c)(3). Gratis para siempre: sin suscripciones, sin muros de pago, sin capital de riesgo, sin venta de datos. Lee el código en github.com/techempower-org/forageforall.
@@ -136,4 +136,4 @@ already placed in the copy; keep them if you edit:
 
 - Support email: `jp@techempower.org`
 - Website: `https://forage.techempower.org/`
-- Privacy policy URL (App content form): `https://forage.techempower.org/privacy.html`
+- Privacy policy URL (App content form): `https://techempower.org/forageforall/privacy`