Privacy Policy

Last updated: 17 October 2026

This policy explains what data the Areed app and website ("the platform", "we") collect, why, how we protect it and your choices. The platform is a classifieds marketplace for publishing and browsing offers and for contact between users; it does not sell goods itself and processes no electronic payment in the app.

1. Data we collect

Account data

• Mobile number: to create the account and sign in with a verification code sent over WhatsApp. Your number is never shown as text on your offers or public profile.
• Username, display name and profile photo (optional), preferred language and country.
• Verification code: we never store the code itself, only an encrypted fingerprint while it is valid. Code request records (number, IP address, device type, delivery status) are deleted automatically after 7 days and used to prevent abuse.

Offers and stores

• Offer content: type, title, description, price and how it is shown (open to bids, depends on the requested offer, negotiable or not) and currency, category and attributes, and the country and city you choose.
• The call / WhatsApp number of an offer: never shown as text, only used to open a call or WhatsApp when an interested user taps the button.
• Photos are re-encoded to WebP and all metadata, including GPS location and camera data, is removed automatically.
• Store (if you create one): name, description, logo and the bank transfer details you choose to publish to buyers.
• Offers and stores are public: visitors of the app and website see them and they may appear in search engines.

Interaction and contact

• Chats: messages, their edits and reactions are stored to deliver and show them to both participants.
• Bids, comments, ratings, followed sellers, followed similar offers and favorites.
• Community questions, replies and their photos, which are public.
• Call and WhatsApp buttons: we record that the button was used (who, when, which offer), not the number.
• Notifications in the app and push notifications. A message push contains the sender's name only, not the message text.

Boost requests and fees

• When you request a boost, you upload a photo of the transfer receipt; it is kept in private storage that only the administration can see, to confirm the request.
• Commission and subscription receipts are sent to the administration over WhatsApp, outside the app.

Location (optional)

• We only ask for your location when you tap "Nearby" or detect my location, after you accept the system permission.
• The coordinates are used at that moment to sort offers by distance or suggest your city, and are not saved to your account.

Safety and moderation

• Reports and blocks you make or that concern you, violations and administrative actions.
• Technical logs: IP address and device type in security logs and the admin audit log. Server logs never contain verification codes or access tokens and are deleted after 14 days.

Device and usage data

• A random device identifier created by the app, operating system and version, app version, and the push token (FCM).
• Internal statistics: offer views, contact button taps, favorites and the account's last activity. We use no third-party analytics or advertising service.

What we do not collect

• We do not access your contacts, messages or files.
• The microphone is used only when you tap voice search; speech is turned into text by your device's speech recognition service. We neither send nor keep the audio.
• The camera and photo library are used only when you choose to add a photo.
• We collect no payment card data.

2. How we use the data

• Running the account, verifying the mobile number and securing sign-in.
• Publishing, showing and searching offers; running chats, bids, comments and notifications.
• Reviewing and moderating content; fighting fraud, spam and abuse; handling reports.
• Activating boosts and subscriptions manually after the transfer is verified.
• Improving the service with aggregated internal statistics.

We do not sell your personal data or use it for targeted advertising.

3. Service providers

We only use the following, to the extent needed to run the service:

• WhatsApp gateway (Ishhar) and WhatsApp (Meta): to send the verification code to your number.
• Firebase Cloud Messaging (Google): to deliver push notifications.
• Hosting and storage provider: servers, databases and photo storage.
• Apple and Google: to distribute the app and run system services (such as speech recognition) under their policies.

We may disclose data when a competent authority requires it under applicable law, or to protect users from fraud.

4. Retention

• Account data: as long as the account exists.
• Verification codes are not stored; request records are kept 7 days.
• In-app notifications: read ones are deleted after 90 days, all after one year.
• Server logs: 14 days. Admin audit log, reports, violations and boost requests: kept for safety, fraud prevention and financial records.
• Deleted offers are hidden immediately from everyone; their record is kept for moderation and fraud prevention.

5. Account deletion

You can delete your account at any time in the app (Account → Delete account) or through the account deletion page. When you do:

• Your mobile number, profile photo and store logo are removed and your name becomes "Deleted user".
• The photos of your offers are deleted from storage; your offers, store and bank accounts are hidden immediately.
• Your comments, bids, ratings, follows, and community questions and replies with their photos are deleted.
• Sessions, registered devices and push tokens, favorites, block list and notifications are deleted.
• Messages you already sent remain with the other participant, who sees your account as unavailable.
• Reports, violations, audit records and boost requests needed for safety and financial records are kept.

6. Security

We use encrypted connections (HTTPS), keep access tokens in the device's secure storage (Keychain / Keystore), encrypt the jobs that send verification codes, and give the administration granular permissions with every view of a user's number logged. No transmission or storage is 100% secure, but we protect your data with reasonable measures.

7. Children

The platform is not intended for people under 18 and we do not knowingly collect their data.

8. Your rights

You can view and edit your account data in the app, delete your offers or account, turn off notifications or location permission in your device settings, and contact us about any request concerning your data.

9. Contact

• WhatsApp: +967781102474
• Email: mnsst.oreed@gmail.com

We may update this policy and will publish the new version in the app and on the website with its date.