Privacy Policy

1. Introduction and legal framework

This Privacy Policy explains how SOOKIT, a peer-to-peer marketplace launching in Lebanon, handles personal data. We aim to handle personal data in line with applicable Lebanese law, including Law No. 81/2018 on electronic transactions and personal data. [Registration, controller identity and notification obligations to be confirmed by Lebanese counsel.]

2. Information we process

Account and authentication: your Firebase user ID, email address, sign-in provider (email and password, or Google), and display name. Passwords are handled by Firebase Authentication and are not visible to SOOKIT. If you use Google sign-in, Google provides your name and email to the sign-in process.

Account metadata: account status, language preference, notification preferences, and creation and update timestamps.

Public profile: your display name, general area, and the date you joined. A profile photo path is supported by the product; a profile photo is only processed if you add one.

Marketplace content: listings you create (title, description, price, category, condition, photos and general location), favorites you save, messages you exchange with other users, and reports you submit or that concern you.

Location: the general area (governorate and city or area) you choose or that is attached to a listing. If you choose “Use my location”, your device’s coordinates are used on your device to find the nearest supported area; at present only that general area is saved, on your device.

Usage and device information: SOOKIT uses Firebase Analytics, which may collect device, browser and usage information, and security-related logs and timestamps may be kept by our service providers.

3. Why we process information

To create and secure your account and authenticate you; to operate the marketplace, including showing listings, messages, favorites and profiles; to provide nearby-listing functionality; to prevent fraud and abuse, moderate content and protect user safety; to provide support; to comply with legal obligations; and to understand and improve the Service.

4. Location privacy

Sharing your location is optional. SOOKIT asks for your device location only when you press “Use my location”, never automatically. You can deny permission and instead choose your governorate and area manually, and the marketplace remains fully usable.

Precise location is not shown publicly. Public listings and profiles show only a general area, for example “Beirut — Hamra”. Distances shown in the app are approximate. Location may be used to work out which listings are nearby.

Your chosen area is stored in your browser’s local storage on your device so it can be remembered. You can clear it at any time from the location control on the home page.

Shop checkout: if you press “Use my current location” while entering a delivery address, your device’s coordinates are sent to OpenStreetMap’s Nominatim service to look up the matching street address, which is used only to pre-fill the form for you to review. This happens only when you press the button.

5. Sharing of information

Content you choose to make public (listings, public profile) is visible to other users and visitors. Messages are visible to the participants of the conversation. We do not sell personal data.

We use Google Firebase services (such as Authentication, Firestore, Cloud Storage and Analytics) to operate the Service. These providers process data on our behalf under their own terms and safeguards.

We may disclose information where required by law or valid requests from competent authorities, or where necessary to protect users, investigate fraud, or establish or defend legal claims.

6. International processing

Our service providers may process data on servers located outside Lebanon. [Specific data location and transfer safeguards to be confirmed for the production Firebase project and by Lebanese counsel.]

7. Cookies and local storage

SOOKIT uses browser storage technologies that are necessary for sign-in (Firebase Authentication session data) and to remember your chosen area. Firebase Analytics may use identifiers to measure usage. [Final cookie and analytics-consent approach to be confirmed before launch.]

8. Security

We use access controls and security rules intended to protect data, and service providers apply their own safeguards. No online service can guarantee absolute security, so please use a strong, unique password and keep your credentials private. SOOKIT will never ask for your password.

9. Retention and account deletion

We keep personal data for as long as needed to operate your account and the Service, to prevent fraud and abuse, and to meet legal obligations. [Specific retention periods and the account-deletion process to be finalised before launch.] You can contact us to request deletion of your account; some information may be retained where the law requires or to resolve disputes and protect users.

10. Your rights

Subject to applicable law, you may ask to access, correct, update or delete your personal data, and to object to certain processing. Contact us using the details below; we may need to verify your identity first.

11. Children and minors

SOOKIT is not intended for children. Minors may use the Service only with the involvement and consent of a parent or guardian, and we do not knowingly seek personal data from children without that consent. If you believe a child has provided data without appropriate consent, contact us so we can act.

12. Changes to this policy

We may update this policy and will change the version and effective date when we do. Where a change is material we will give reasonable notice.

13. Contact

Privacy questions and requests: support@sookit.com