Privacy Policy

1. Data controller

The data controller for your personal data is Miftah Aqari (Nouakchott, Mauritania). For any question about your personal data or to exercise your rights, contact us at [email protected] — we reply within 30 days.

2. Data we collect

We only collect the data needed to run the service, depending on the features you use:

• Account and identifiers

  Phone number (your sign-in and SMS verification identifier), name, profile photo, preferred language. Your PIN is protected with cryptographic hashing — we never store or see it in plain text.

• Content you publish

  Property listings (title, description, price, address, features), photos and videos you upload, and messages exchanged with other users through the app's built-in chat.

• Location

  Approximate or precise device location, only if you explicitly allow it, to show listings near you and place your own listings on the map. We never collect your location in the background.

• Listing payment

  If your listing is above the free-publishing threshold: the Bankily transfer screenshot you provide as proof of payment. If you save a card, only its brand and last 4 digits — never the full card number, exact expiry, or CVV.

• Identity verification

  Only if you request account certification (the “Verified” badge): the identity documents you choose to upload for that purpose. This step is optional.

• Technical data and notifications

  Device type and operating system, push notification token (to send you alerts), and technical logs related to security (e.g. sign-in attempts, SMS/OTP delivery).

3. Why we use this data

We use your data only to: create, verify (SMS) and secure your account; publish, moderate and display your listings; let other users contact you and chat with you through the built-in messaging; show relevant listings based on your location when you allow it; send notifications and search alerts; process listing fees and verify Bankily payment proofs; certify accounts that request it; and prevent fraud and abuse (e.g. rate-limiting SMS sent to a given phone number). We do not use your data for third-party targeted advertising and we do not resell it.

4. Legal basis

Processing is based on: performance of the contract formed when you create an account (providing the real-estate matching service); your explicit consent for geolocation, push notifications and identity verification, which you can withdraw at any time in your device or app settings; and our legitimate interest in securing, improving, and protecting the platform against fraud, in accordance with applicable Mauritanian law.

5. Who we share your data with

We do not sell or rent your data to third parties. It is only shared with: other users, when needed for the service (e.g. your contact details shown on a listing you publish, or your message in a conversation); our technical providers, acting on our behalf and only to the extent needed for their service — hosting and database, secure storage for photos/videos, SMS delivery for verification, Google (maps and geolocation via Google Maps), and Firebase/Google (push notification delivery); and competent authorities, only when required by Mauritanian law.

6. Retention and deletion of your data

We keep your data while your account remains active. You can delete your account at any time, directly in the app: Account → Account management → Delete account, then confirm with your PIN — see “Your rights” below for details. Deletion is immediate and permanent: your profile, listings and media, favorites, search alerts, notifications, bookings, contracts, and saved payment methods are removed from our active systems — this is not a deactivation. Limited data may be kept longer where required by law, for security, fraud prevention, or dispute resolution (e.g. transaction logs); such data is retained only as long as necessary, then deleted or anonymized. Messages you sent may remain visible to other participants in their conversation history.

7. Security

We apply reasonable technical and organizational measures to protect your data: encrypted connections (HTTPS), your PIN protected by cryptographic hashing and never stored in plain text, restricted and logged access to our infrastructure, and SMS rate-limiting to prevent abuse. No system is perfectly secure; please never share your PIN with anyone and keep your device secure.

8. Your rights

Subject to applicable law, you may request access, rectification, deletion, or restriction of processing, and withdraw consent where processing relies on it (for example, disabling location in your device settings). You can delete your account and all of your data at any time, directly from the app — Account → Account management → Delete account, confirm with your PIN, deletion is immediate and permanent — with no need to contact us. For any other request about your rights, email [email protected].

9. Minors

The service is intended for adults or persons able to contract under Mauritanian law. We do not knowingly collect data from children; if we become aware that we have, we delete it promptly.

10. Changes to this policy

We may update this policy, in particular when we add new features. The last-updated date appears at the top of this page. For material changes to how we process your data, we will notify you in the app or through another appropriate channel before they take effect.

11. Contact

For any question about this policy, your personal data, or to exercise your rights: [email protected].