Privacy Policy

Last updated: October 22, 2025

1. Introduction

YallaSell ("we", "our", or "us") operates a peer-to-peer marketplace platform that allows users in the Kingdom of Saudi Arabia to buy and sell items. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our mobile application and services.

By using YallaSell, you agree to the collection and use of information in accordance with this policy. We are committed to protecting your privacy and complying with applicable Saudi Arabian data protection laws, including the Personal Data Protection Law (PDPL).

2. Information We Collect

2.1 Personal Information

When you create an account, we collect:

  • Phone number (required for authentication)
  • Name
  • Email address (optional)
  • Profile avatar/photo (optional)
  • Language preference (Arabic or English)
  • Preferred city for browsing listings

2.2 Location Information

We collect and process location data to provide location-based services:

  • GPS coordinates (latitude/longitude) when you create or view listings
  • City and area information for listing locations
  • Location preferences for personalized search results

You can control location permissions through your device settings. Denying location access may limit certain features of the app.

2.3 Listing Content

When you create a listing, we collect:

  • Item title and description
  • Price and category
  • Item condition (new, like new, good, fair)
  • Photos (stored in our secure cloud storage)
  • Category-specific metadata (e.g., for vehicles: make, model, year, mileage)
  • Listing status (active, sold, deleted)

2.4 Communications

We store and process all communications through our platform:

  • Messages between buyers and sellers
  • Message read status and delivery status
  • Conversation metadata and timestamps
  • Support tickets and communications with our team

2.5 Device and Usage Information

We automatically collect certain information about your device and usage:

  • Device type and operating system (iOS or Android)
  • Push notification tokens (for sending notifications)
  • App version and device identifiers
  • Listing view counts and interaction data
  • Favorites and saved searches
  • Search queries and filters applied
  • Last seen timestamp
  • Connection status and network information

2.6 Notification Preferences

We store your notification preferences:

  • New message notifications
  • Listing update alerts
  • Price drop notifications
  • Category-specific notification preferences
  • Marketing communications preferences

3. How We Use Your Information

We use your personal information for:

  • Account Management: Creating and maintaining your account, authentication, and user profile
  • Platform Services: Enabling listing creation, browsing, messaging between users, and transactions
  • Location Services: Showing nearby listings, filtering by location, and displaying listing locations
  • Communications: Facilitating buyer-seller messaging, sending push notifications, and providing customer support
  • Personalization: Customizing search results, recommending relevant listings, and respecting language preferences
  • Safety and Security: Detecting fraud, preventing abuse, enforcing our Terms of Service, and resolving disputes
  • Analytics: Understanding usage patterns, improving app performance, and developing new features
  • Legal Compliance: Complying with Saudi Arabian laws and regulations, responding to legal requests

4. Data Sharing and Disclosure

4.1 Public Information

The following information is publicly visible to all YallaSell users:

  • Your name and profile avatar
  • Your active listings (title, description, price, photos, location)
  • Listing interaction counts (views)

4.2 Other Users

When you message another user about a listing:

  • They can see your name, avatar, and message history
  • They can view your other active listings
  • Your phone number is NOT shared unless you explicitly provide it in messages

4.3 Service Providers

We share your data with trusted third-party service providers who process data on our behalf:

  • Supabase: Database hosting, authentication, cloud storage for images, and real-time messaging infrastructure
  • Expo: Push notification delivery and device API services
  • Vercel: Application hosting and content delivery network (CDN)

These providers are contractually required to protect your data and use it only for providing services to YallaSell.

4.4 Legal Requirements

We may disclose your information if required by law, court order, or governmental request, or to protect our rights, property, or safety, or that of our users or the public.

4.5 Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal information may be transferred. We will notify you via email and/or prominent notice in the app before your information becomes subject to a different privacy policy.

5. Data Storage and Security

5.1 Data Location

Your personal data is stored on servers provided by Supabase and may be processed in data centers located outside of Saudi Arabia. We ensure that appropriate safeguards are in place for international data transfers.

5.2 Security Measures

We implement industry-standard security measures to protect your data:

  • Encrypted data transmission (HTTPS/TLS)
  • Secure authentication using phone number verification
  • Row-level security policies in our database
  • Regular security audits and updates
  • Access controls limiting employee access to personal data

However, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.

5.3 Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. If you delete your account, we will delete or anonymize your personal data within 90 days, except where we must retain it for legal or security purposes.

6. Your Rights and Choices

Under Saudi Arabian data protection law (PDPL), you have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Correction: Update or correct inaccurate personal information
  • Deletion: Request deletion of your personal data (subject to legal obligations)
  • Portability: Request your data in a portable format
  • Restriction: Request restriction of processing under certain circumstances
  • Objection: Object to processing of your personal data
  • Withdraw Consent: Withdraw consent for data processing where consent was the basis

To exercise these rights, contact us at support@yallasell.com or through the in-app support feature.

6.1 Device Permissions

You can control app permissions in your device settings:

  • Location: Required for location-based features; app will work with reduced functionality if denied
  • Camera/Photos: Required for uploading listing images; you can revoke access anytime
  • Notifications: Optional; you can disable push notifications in device settings or in-app preferences

6.2 Communication Preferences

Manage your notification preferences in Settings within the app. You can opt out of marketing notifications while still receiving essential service notifications.

7. Children's Privacy

YallaSell is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child under 18, please contact us immediately, and we will delete the information.

8. International Data Transfers

Your information may be transferred to and processed in countries outside of Saudi Arabia, including the United States and European Union, where our service providers operate. We ensure that appropriate safeguards are in place, such as standard contractual clauses approved by relevant authorities.

9. Cookies and Tracking

Our mobile app does not use cookies. However, we do collect device identifiers and usage analytics as described in Section 2.5. You cannot opt out of this data collection as it is essential for app functionality and security.

10. Changes to This Privacy Policy

We may update this Privacy Policy periodically. Changes will be effective when posted with a new "Last updated" date. Significant changes will be communicated via:

  • In-app notification
  • Email (if you provided an email address)
  • Prominent notice on this page

Your continued use of YallaSell after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices:

  • Email: support@yallasell.com
  • In-App Support: Use the "Contact Support" feature in the app settings

For data protection inquiries specific to Saudi Arabian regulations, please include "PDPL Request" in your subject line.

12. Governing Law

This Privacy Policy is governed by the laws of the Kingdom of Saudi Arabia. Any disputes arising from this policy shall be resolved in accordance with Saudi Arabian law and under the jurisdiction of Saudi Arabian courts.