This policy explains how Celis Somalia ("Celis", "we", "us") handles information in the Celis buyer and seller marketplace app.
1. Information we collect
Account information includes your email address or phone number used to sign in, password handled by Supabase Auth, display name, avatar, biography, selected region, phone number, seller type, business name, logo, registration number, address, shop slug, seller number, and account dates. Listings include the title, description, price, condition, delivery method, and public photos you upload. We also store buyer-seller conversations and messages, reports, blocks, and a push-notification token when notifications are enabled. We do not collect precise device location.
2. How we use information
We use this information to create and secure accounts, publish and manage listings, connect buyers and sellers through Celis messages, deliver requested push notifications, operate seller profiles, prevent abuse, review reports, enforce blocks, and maintain marketplace records. We do not sell personal information.
3. What other people can see
Anyone can see active listings and their public photos. Celis exposes only a limited marketplace identity for attribution: user ID, display name, avatar, verification status, and membership date. Your phone number, email address, push token, business registration number, and business address are not available through the public profile service. Conversation participants can read the messages in their conversation. Reports and block relationships are not public.
4. Service providers and sharing
Supabase processes account authentication, database records, and listing-image storage for Celis. Google Firebase Cloud Messaging processes push tokens and delivery information when push notifications are enabled. We disclose information to these providers only to operate those services. Public listing information is shared with marketplace visitors, and messages are shared with their participants. We do not share data with advertising networks or analytics providers because Celis does not use them.
5. Information kept on your device
Celis keeps your theme, language, preferred region, data-saver choice, saved listing IDs, listing draft, app-tour status, notification choices and permission status, and cached app data in local device storage. These preferences are not uploaded by the app. Removing the app may remove them. Celis uses no analytics, crash-reporting, advertising, cross-app tracking, or similar tracking SDK.
6. Security
Celis uses Supabase authentication and database access rules. The profiles and users tables allow signed-in users to read their own rows; public marketplace screens use a separate limited identity service that excludes contact and account-security fields. Conversations and messages are restricted to their participants. Listing photos are intentionally public. No system is completely secure, so report a suspected security or privacy issue to privacy@celis.so.
7. Retention
We keep account and marketplace data while your account is active. Account deletion immediately removes or anonymizes profile, contact, business, push-token, saved-item, notification, block, disposable activity, and untransacted listing data. Existing messages, reviews, moderation reports, completed orders, payouts, and audit records may be retained without your live account identity because another participant, marketplace safety, accounting, or dispute handling may rely on them. Celis has not yet adopted fixed time limits for those retained records; those limits require legal and operational review.
8. Access, correction, export, and deletion
You can review and correct available profile information in the app. To delete your account, open Profile, choose Delete Account, verify your identity, and confirm permanent deletion. Active orders, escrow, wallet payments, or pending payouts must be resolved first. For an access, correction, or portable-copy request that is not available in the app, email privacy@celis.so. We will verify that the requester owns the account before disclosing or changing data.
9. Children's privacy
Celis is not intended for anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided information to Celis, contact privacy@celis.so.
10. Location, transfers, and legal rights
Celis is designed for the Somalia market. A location in Celis is a region chosen from a list, not device GPS. Supabase and Google may process data outside Somalia. The governing-law and dispute forum for Celis, and whether laws such as the EU GDPR apply to particular diaspora users, require qualified legal review. Where applicable law gives you additional privacy rights, contact privacy@celis.so to exercise them.
11. Changes to this policy
We may update this policy when Celis features, processors, or legal obligations change. We will change the last-updated date and publish the current policy in the app and at celis.so/privacy. Material changes should be reviewed before release so the policy and Google Play Data safety answers remain consistent.
12. Contact
For privacy requests, account-data questions, or suspected security issues, email privacy@celis.so. Include the email address or phone number linked to your account, but never send your password or one-time verification code.