Privacy Policy
Mazad Syria ("we", "us", "the app") respects your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights you have over your data. It is written to satisfy the Apple App Store Review Guidelines (sections 1.2 and 5.1) and applicable data-protection laws.
1. Data we collect
Account data. When you register we collect your name, email address, an optional phone number, and a password (stored as a bcrypt hash — never in plaintext).
Listing data. When you post an ad we store the title, description, price, category, condition, images, contact phone (if you choose to attach one), governorate, neighborhood and — if you drop a pin on the interactive map — an approximate latitude/longitude and a normalized SVG position so we can render your pin on the map.
Communications. Messages you send through the in-app chat, reports you file against other listings, and moderation decisions are stored so we can act on them and provide an audit trail.
Device data. We rely on standard authentication tokens (JWT) stored locally in secure storage. We do NOT collect IDFA, do NOT track you across other apps or websites, and do NOT integrate any third-party analytics, advertising or attribution SDKs.
Camera and photo library. With your explicit permission we access the camera and photo library ONLY when you tap "add photo" while posting an ad. Images are stored on our servers as base64 blobs attached to your listing.
2. How we use your data
- To operate the marketplace (show your listings, deliver messages, run the moderation queue).
- To let other users contact you via the phone number you choose to expose on your ad (opt-in per ad).
- To keep the platform safe (respond to abuse reports, apply account bans).
- To send you critical service notifications (e.g. password reset, phone verification).
We do NOT sell your data. We do NOT profile you for third-party advertising. We do NOT run any App Tracking Transparency (ATT) prompt because we do not track you.
3. Data sharing
- Other users can see your public listings, your display name, your ad's location details you chose to publish and (if you enabled it) your contact phone.
- Moderators employed by us can see reports and message threads that were flagged.
- We disclose data to authorities only when compelled by valid legal process.
4. Storage & retention
Data is stored on our servers (MongoDB) for as long as your account is active. When you delete your account (Profile → Delete account) we permanently and irreversibly delete, within 30 days, your user record, all your listings, all your favorites, every message thread you participated in, every report you filed, and every payment record. There is no soft-delete or archive copy.
5. Your rights
- Access & portability. Contact us at the address in Section 11 to request a machine-readable export of your data.
- Correction. Edit your profile and listings any time from the app.
- Deletion. Profile → Delete account triggers an immediate cascade delete (see Section 4).
- Objection / withdrawal of consent. Stop using the app or delete your account.
6. Children
Mazad Syria is not directed at anyone under 18. We do not knowingly collect data from minors. If you believe a minor has created an account, use the contact address in Section 11 and we will remove it within 24 hours.
7. Security
Passwords are hashed with bcrypt. Session tokens use JWT with signing keys stored server-side. All network traffic is encrypted with HTTPS (TLS 1.2+).
8. User-generated content, blocking and moderation
Because Mazad Syria hosts user-generated content, we operate a zero-tolerance policy for objectionable content in accordance with Apple App Store Review Guideline 1.2:
- Every ad and every user profile has a "Report" button that opens a categorized abuse-report dialog.
- Every ad and every user profile has a "Block user" button that removes the offending party's listings from your feed and stops them from messaging you.
- We review every report within 24 hours. Content that violates our Terms is removed, and repeat offenders are permanently banned.
- Content depicting or targeting minors, sexual violence, weapons, or illegal goods is escalated to law enforcement.
9. Changes to this policy
We will notify you in-app when this policy changes materially and require re-acceptance for material changes. Continued use after the effective date constitutes acceptance.
10. Publicly hosted copy
A canonical, publicly-reachable copy of this policy is available at https://www.mazadsyria.app/privacy.html and is used as the "Privacy Policy URL" in the App Store listing.
11. Contact
For any inquiry — general support, data access, data deletion, abuse reports, payment issues, or legal questions — write to support@mazadsyria.app. We reply within 24–48 hours (Sunday to Thursday).