Privacy

What we collect

Your phone number

It is how you sign in — there is no password. Verification is handled by Google Firebase, who receive your number to send the code. Your number is not shown to other people unless you choose to show it on an ad.

What you put in an ad

The title, description, photographs, price, category and district. This is public. So is your display name and the district on your profile. An ad is meant to be found, including by search engines.

Messages

Chat is stored so it is there when you come back, and so we can investigate a report. Staff do not read conversations routinely; they read a specific conversation when somebody reports it or when we are investigating fraud.

Identity documents, if you ask to be verified

If you apply for a verified badge you send a photograph of a government document. This is the most sensitive thing we hold and it is treated differently from everything else:

• It is stored separately from photographs and CVs, in a place with no public web address. There is no link that serves it — not to you, not to anybody.
• Only our review staff can open it, and only while deciding your request.
• It is deleted 90 days after the decision. If you withdraw your request before it is read, it is deleted immediately.
• We keep the outcome — verified or not, and the reference — after the document is gone. The outcome is not a copy of your document.

A CV, if you apply for a job

Sent to that employer and to nobody else. Same storage rules as above: no public address, and not readable by other users.

Location

Only if you turn it on, and only to sort listings by distance. We store the district you choose, not a continuous history of where you have been.

Technical records

Server logs, which include IP addresses, kept for a short period for security and debugging. Device tokens if you allow notifications, so we can send them.

Who else sees it

These are the only parties, and each gets only what it needs to work:

• Google Firebase — phone verification and push notifications. Your number is held there so you can sign in.
• Google Cloud — runs the site and stores every file you upload: listing photos, and separately your identity documents and any CV you send with a job application. Our servers and storage are in Google’s Mumbai region.
• MongoDB Atlas — the database itself: your account, your listings, your messages. It is operated by MongoDB, Inc. rather than by Google, and it is hosted outside Nepal.
• Other users — only what you have published, plus what you send them in chat.

Listing photos are served from a public address, so anyone holding the link to an image can open it. Identity documents and CVs are not: they sit in separate, private storage and are served only after we check who is asking.

We do not sell personal data, and we do not hand a seller’s details to an advertiser. Brand advertising on this site is targeted by district and category — by what is being looked at, not by who is looking at it.

How long we keep it

• Identity documents — 90 days after a decision, or immediately on withdrawal.
• Listings — an ad expires after 60 days and you can delete it sooner.
• Messages — while your account exists.
• Your account — until you delete it.

What you can ask for

You can delete your account from your account page, which removes your profile and your ads. You can ask us for a copy of what we hold about you, and you can ask us to correct it.

Some things survive a deletion request because they have to: records of a payment we are required to keep, and the fact that a decision was made on a verification request. Neither includes your document.

Asking us about any of this

Contact details are on the site once support has been set up.

We will never ask for your password — there isn’t one — and we will never ask for a photograph of your documents in a chat message. If somebody does, they are not us. See staying safe.