Privacy policy
Zylo Privacy Policy
This policy explains what personal data the Zylo mobile app and the zylo-app.io website collect, why we collect it, who we share it with, and the choices you have. We never sell your personal data.
1. Who we are
Zylo is operated by Thawr Sàrl, a limited liability company under Swiss law, registered in the Geneva commercial register under UID CHE-420.529.197, with its registered office at Rue Rothschild 50, 1202 Geneva, Switzerland (« Zylo », « we », « us »). We are the data controller for the personal data described in this policy.
You can reach us about privacy at [email protected].
2. Information we collect
Information you give us
- Account: name, email address, phone number, password (stored encrypted), profile photo, and preferred language and currency. If you sign in with Apple or Google, we receive your name and email from that provider.
- Business accounts: company name, business details and contact information.
- Listings: titles, descriptions, photos, prices, category details, delivery options and the city or wilaya you choose.
- Messages: text, photos and voice messages you exchange with other users in the in-app chat.
- Identity verification (optional): if you request a verified badge, a photo of your ID card, passport or driver’s licence, and a selfie. We use these only to confirm your identity.
- Reports, blocks and feedback: content you report, users you block, and feedback you send us.
- Payments (when available): order and transaction details. Card and bank details are entered with our payment provider and are never stored by Zylo.
Information collected automatically
- Location: your approximate location, only if you allow it, to show listings near you.
- Device and usage: device model, operating system, app version, push notification token, and basic logs needed to keep the service running and secure.
We only access your camera, photo library and microphone when you choose to take or attach a photo or record a voice message.
3. How we use your information
We use your data only for the purposes below, each with a legal basis under the Swiss Federal Act on Data Protection (FADP), the EU General Data Protection Regulation (GDPR) where it applies, and Algerian Law No. 18-07 on the protection of personal data.
Purpose | Legal basis |
|---|---|
Create and manage your account, publish your listings, run the chat | Performance of our contract with you (Terms of Use) |
Show listings near you | Your consent (location permission, which you can withdraw in your phone settings) |
Verify your identity for a verified badge | Your consent |
Send notifications about messages, offers and your listings | Performance of the contract; you can turn them off at any time |
Detect fraud, spam and abuse, review reports, enforce our rules | Our legitimate interest in keeping the marketplace safe |
Process payments and orders (when available) | Performance of the contract |
Improve the app using feedback and technical logs | Our legitimate interest |
Meet legal obligations and answer lawful requests from authorities | Legal obligation |
We do not use your data for advertising profiling, and we do not sell it.
4. Who we share it with
Other users see what you choose to publish: your public profile (name, photo, verified badge, member since), your listings and the messages you send them. Your email and phone number are not shown unless you add them to a listing.
Service providers process data on our behalf, under contract, and only to run Zylo:
Provider | What they do for us | Data involved |
|---|---|---|
Supabase | Database, authentication, file storage, server functions | Account, listings, messages, photos, verification documents |
Google Firebase | Push notifications | Device token, notification content |
Google (Maps and Places) | Maps and city search | Search text, approximate location |
Apple and Google sign-in | Optional sign-in | Name, email, sign-in identifier |
Chargily Pay (when payments are enabled) | Payment processing in Algeria | Order amount, payment status |
Apple TestFlight and Google Play | App distribution and beta feedback | Device data, crash reports, feedback you send |
Authorities: we disclose data when required by law or to protect the safety of users and the public.
Business transfers: if Zylo is merged or sold, your data may transfer to the new owner under this same policy.
5. Where your data is stored and how long we keep it
Your data is hosted by Supabase in [REGION, e.g. the European Union]. Some providers listed above may process data in other countries, including the United States. When data leaves your country, we rely on safeguards such as standard contractual clauses recognised under Swiss and EU law.
Data | How long we keep it |
|---|---|
Account and profile | Until you delete your account |
Listings and photos | Until you delete them or your account |
Chat messages | Until you delete your account; the other person keeps their copy of the conversation |
Identity verification documents | Deleted within 30 days after the verification decision |
Reports and moderation records | Up to 3 years, to prevent repeat abuse |
Payment and order records | As long as accounting and tax law requires |
Technical logs | Up to 90 days |
When you delete your account, we delete or anonymise your data within 30 days, except what the law requires us to keep.
6. Your rights
Depending on where you live, you have the right to:
- Access the personal data we hold about you and get a copy
- Correct data that is wrong or incomplete
- Delete your data
- Object to or restrict some uses of your data
- Withdraw consent at any time, for example for location or identity verification
- Port your data to another service
Delete your account from the app: go to Profile, then Settings, then Delete account. This removes your account, listings, photos and messages as described in section 5.
To exercise any other right, email [email protected]. We answer within 30 days. You can also complain to your data protection authority, for example the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland, the CNIL in France or the ANPDP in Algeria.
You can block any user from their profile or from a chat. Blocked users can no longer contact you or see your listings.
7. Security, minimum age and changes
Security. Data is encrypted in transit (HTTPS) and access to our database is restricted by row-level security rules. No system is perfectly secure; if a breach affects your data, we will notify you and the authorities as the law requires.
Minimum age. Zylo is for people aged 18 and over. We do not knowingly collect data from minors and will delete any such account we find.
Changes. We may update this policy as Zylo evolves. We will post the new version here with its date and, for significant changes, notify you in the app.
8. Contact
Thawr Sàrl, Rue Rothschild 50, 1202 Geneva, Switzerland
Email: [email protected]