Privacy Policy

ZedList — Biggest Online Marketplace Connecting Buyers and Sellers • Effective Date: January 2025 • Last Updated: April 2026

Welcome to ZedList ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your data when you use the ZedList mobile application and associated services (collectively, the "Service"). By accessing or using ZedList, you agree to the terms of this Privacy Policy. If you do not agree, please do not use the Service.

1. Information We Collect

1.1 Information You Provide Directly

When you create an account or use our Service, you may provide the following information:

• Account Information: When you sign in using Google Sign-In (powered by Google OAuth 2.0), we receive your Google account display name, email address, and profile photo URL. We do not receive or store your Google account password.
• Listing Information: When you post a listing, you provide a title, description, price, category, images, and optionally a phone number, email address, and website URL for contact purposes.
• Location Information: You may provide or confirm your country, province, district, and community to help buyers find listings near them.
• Communication Data: If you contact us for support or submit a report, we collect the content of that communication.

1.2 Information Collected Automatically

When you use the Service, certain information is collected automatically:

• Device Information: Device type, operating system, operating system version, app version, screen resolution, and device language settings.
• Usage Data: Pages and features you access, time spent on the app, interaction patterns, and navigation paths.
• Log Data: IP address, access timestamps, referring URLs, and crash or error reports.
• Approximate Location: With your explicit permission, we use your device's GPS or network-based location services to determine your country. This is used solely to display country-relevant listings and to assign your country flag. We do not track, store, or share your precise GPS coordinates.

1.3 Information from Third-Party Services

• Google Sign-In: When you authenticate via Google, we receive only the scopes you authorize (typically email, display name, and profile picture). We access this data through Google's secure OAuth 2.0 protocol.
• Google AdMob: Our app displays advertisements through Google AdMob. AdMob may collect device advertising identifiers (such as the Google Advertising ID), IP address, and general interaction data to serve relevant ads. Please refer to Google's Privacy Policy for details.
• RevenueCat: For subscription management, we use RevenueCat, which processes purchase transactions through Google Play Billing. RevenueCat may receive your anonymized user identifier and purchase history. Please refer to RevenueCat's Privacy Policy for details.
• Supabase: Our backend infrastructure is hosted on Supabase. Data is transmitted and stored securely using industry-standard encryption. Please refer to Supabase's Privacy Policy for details.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Providing the Service: To create and manage your account, display your listings to potential buyers, and enable communication between buyers and sellers.
• Location-Based Features: To display listings relevant to your country and region, show your country flag to other users, and enforce country-based posting rules.
• Personalization: To remember your preferences, selected country, and browsing history within the app.
• Advertising: To display advertisements through Google AdMob. Pro subscribers have ads removed as part of their subscription benefits.
• Subscription Management: To process and manage your subscription plan, verify entitlements, and enforce plan-specific usage limits.
• Safety and Security: To detect and prevent fraud, abuse, spam, and violations of our Terms and Conditions.
• Analytics and Improvement: To understand how users interact with our Service, identify technical issues, and improve the overall user experience.
• Legal Compliance: To comply with applicable laws, regulations, and legal processes.
• Communication: To send important service updates, security alerts, and policy changes. We do not send marketing emails.

3. How We Share Your Information

We do not sell, rent, or trade your personal information to third parties. We may share information in the following limited circumstances:

• Public Listing Data: When you post a listing, your listing title, description, images, price, category, location (country, province, district), and contact information (phone number, email, or website, if provided) are visible to all users of the Service.
• Country Flag: Your detected or selected country flag is displayed publicly next to your listings to help buyers identify seller locations.
• Service Providers: We share data with trusted third-party service providers (Google, Supabase, RevenueCat) solely to operate and improve the Service. These providers are bound by their own privacy policies and data processing agreements.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of ZedList, our users, or the public.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of that transaction. We will notify users of any such change.

4. Authentication and Account Security

ZedList uses Google Sign-In as the sole method of authentication. This means:

• We never create, store, or manage passwords. Authentication is handled entirely by Google's secure OAuth 2.0 infrastructure.
• Your Google credentials are never transmitted to or stored on our servers.
• You can revoke ZedList's access at any time through your Google Account permissions.
• Each Google account corresponds to one ZedList user account. Your unique Google user ID is used to associate your listings and subscription with your account.
• Session tokens are managed securely through Supabase Auth and are automatically refreshed or expired according to industry best practices.

5. Location Data

Location data is a core part of ZedList's functionality as a regional marketplace:

• Permission: We request location permission explicitly before accessing your device's location services. You may deny this permission, though it will limit certain features.
• Purpose: Location is used only to determine your country for displaying relevant listings and assigning a country flag.
• Precision: We resolve your location to country level only. Your exact latitude and longitude are processed in-memory on your device and are not stored on our servers.
• Manual Override: You can manually select a different country to browse listings from other African nations. However, you may only post listings in your home country.
• Revocation: You may revoke location permission at any time through your device settings. Some features may become unavailable.

6. Advertising

ZedList displays advertisements to support the free tier of the Service:

• Ad Provider: Advertisements are served by Google AdMob, a service operated by Google LLC.
• Ad Types: The app may display banner ads, interstitial ads, and rewarded ads.
• Data Used for Ads: AdMob may use your device's advertising identifier, general location (country/region), and anonymized interaction data to serve contextually relevant advertisements.
• Ad-Free Experience: Users who subscribe to the Pro plan through Google Play have all advertisements removed automatically.
• Opt-Out: You can limit personalized advertising by adjusting your device's ad settings (Settings > Google > Ads on Android devices) or by subscribing to the Pro plan.

7. Subscriptions and In-App Purchases

• Subscriptions are processed through Google Play Billing and managed via RevenueCat.
• We do not collect or store your payment card details. All payment processing is handled by Google Play.
• Subscription entitlements (e.g., Pro status) are verified server-side through RevenueCat to prevent tampering.
• You can manage or cancel your subscription at any time through the Google Play Store > Subscriptions.

8. Data Storage and Security

• Your data is stored securely on Supabase's cloud infrastructure, which uses PostgreSQL databases with encryption at rest and in transit (TLS 1.2+).
• Row-Level Security (RLS) policies ensure that users can only access and modify their own data.
• We implement rate limiting, input sanitization, and content validation to protect against abuse and injection attacks.
• Images uploaded with listings are stored in secure cloud storage with access controls.
• While we take reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.

9. Data Retention

• Account Data: Your account information is retained for as long as your account is active.
• Listings: Listings remain visible until you delete them or your account is terminated.
• Usage Logs: Anonymized usage and analytics data may be retained for up to 24 months for service improvement purposes.
• Deleted Data: When you delete your account or a listing, the data is permanently removed from our active databases within 30 days. Residual copies in encrypted backups are purged according to Supabase's backup retention schedule.

10. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: You can view your account information and listings at any time within the app.
• Correction: You can edit your listings and update your contact information.
• Deletion: You can delete individual listings or request full account deletion by contacting us.
• Portability: You may request a copy of your personal data in a structured, machine-readable format.
• Restriction: You may request that we limit the processing of your personal data under certain circumstances.
• Objection: You may object to processing of your personal data for certain purposes.
• Withdraw Consent: You can revoke Google Sign-In access or location permissions at any time through your device or Google account settings.

To exercise any of these rights, please contact us using the information provided in Section 15 below.

11. Children's Privacy

ZedList is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a child under 18, we will take immediate steps to delete such information from our servers. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

12. International Data Transfers

ZedList operates across multiple African countries. Your data may be processed and stored in countries other than your own. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws. We ensure that appropriate safeguards are in place, including the use of encrypted connections and reputable, compliant service providers.

13. Cookies and Local Storage

• ZedList uses browser local storage (not cookies) to store your preferences, selected country, and session state.
• No third-party tracking cookies are placed by ZedList directly.
• Third-party services (Google AdMob, Google Analytics) may use their own cookies or identifiers as described in their respective privacy policies.
• You can clear local storage at any time through your browser or app settings, though this will reset your preferences.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Notify users through an in-app notice where appropriate.
• Post the revised policy on this page.

Your continued use of the Service after any changes constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• App: Use the "Report" feature within the ZedList app.
• Email: zedlisthelp@gmail.com

We will respond to all legitimate requests within a few days.