Version: v2
Effective date: 28 September 2026
Last updated: 28 September 2026
*What v2 changes from v1 of 27 September 2026: v1 announced that ijik collected no location, kept no device identifier, did not know which listings you look at, and had no provider other than its host. That was untrue on those four points, and this version states them exactly. Nothing has been added to what ijik collects: it is the text catching up with the product.*
ijik is a business registered with the Quebec enterprise register, Canada.
For any question about your personal data:
privacy@ijik.app
For general support:
contact@ijik.app
This policy describes what ijik does today, and nothing else.
ijik currently offers a single service: ijik Annonces, a peer-to-peer classifieds platform in Morocco. Other services are planned. None is active.
If ijik ever starts collecting data it does not collect today, this policy will be updated before that collection begins — never after.
### 3.1 What you give us
When you create your account:
- your email address
- your password, which we never see in clear text
In your profile, if you fill them in:
- your first name and your last name
- a public handle, if you would rather be seen under that name
- your profile photo
- your phone number
- your country
- your preferred language
In your address book, if you save an address there:
- a label you choose
- the address itself, the postal code, the region, the city, the neighbourhood
- its exact coordinates, which are used to place your listings approximately (section 5)
In your phone book, if you save a number there:
- a label, the number, its country
- whether it can be reached on WhatsApp
- which one is your default number
If you post a listing:
- the title, the description, the price, the item's condition, whether the price is negotiable
- the category and the city
- the number from your book that you choose to make reachable
- the photos you upload
If you interact with other people:
- the reviews you leave about a seller
- the reports you file
- the people you block
- your favourites and your saved searches
### 3.2 What the app records as you use it
Your approximate location, if you allow it. It is used to show you what is for sale near you. Everything about it is in section 5; the permission can be refused, and the app works without it.
One notification token per device, if you accept notifications. It is a technical identifier issued by Google's notification service, attached to your account, and it is what lets an alert reach the right phone. It is erased when you sign out or refuse notifications.
Listing opens and contacts. When a listing is opened, or a buyer asks for a seller's number, ijik records it with the date, the screen it came from, and the identifier of the account that did it if there is one. What it is for: showing a seller their views and contacts over 7, 14 or 30 days, counting the views displayed on a listing, and spotting abuse. We do not measure how long you look, nor the order in which you browse, and these events build no advertising profile — there is no advertising in ijik.
Searches, in anonymised form. The text searched and the number of results are kept with a fingerprint of who searched, never your identifier. This is used to improve search suggestions. Nobody reads these rows one by one: only functions aggregate them.
A profile record is created automatically when your account opens, with French as the default language. You can change it immediately.
Every item you create carries the date it was created and last modified.
### 3.3 What we do not collect
ijik records no advertising identifier, and integrates no advertising network, no audience measurement tool, no crash reporter.
ijik does not record your IP address in its own data. That prohibition is written into our database technically, not merely promised.
ijik does not ask for your age or your date of birth.
ijik does not read your contact list, your messages, your calendar, your files, or your web browsing history. There is no messaging in ijik: a buyer reaches you on the number you chose to make public.
ijik collects no financial or banking data — nothing is paid for inside the app — no health data, no biometric data, and asks you for neither your origin, nor your religion, nor your orientation.
ijik does not track your location in the background and never asks for precise location: see section 5.
### 3.4 The permissions the app requests
On Android: internet access; approximate location; permission to display notifications. The last two can be refused, and the app remains usable.
On iPhone: the camera and the photo library when you add a photo; approximate location when you ask for what is near you.
Run your account — identify you, let you sign in, display your profile.
Run the service — publish your listings, show them to others, let you be contacted, keep your favourites and your searches, send you the notifications you accepted.
Report to a seller what their listing does — its views, its contacts, its favourites.
Protect users — handle reports, moderate content, enforce our terms of use, spot abuse.
We sell your data to no one. We share it with no advertiser. We do not use it for advertising profiling.
This is the point on which a classifieds app must be clearest, because an address is the closest thing to yourself.
What the app asks for. The device's approximate location, and only when the app is open and you ask for what is on sale near you — the "Near you" row, the map's "locate me" button, the radius in the filters. Never precise location. Never in the background. The permission can be refused; everything else in the app keeps working.
What your location becomes. It is used to compute a distance, then and there. ijik keeps no history of your locations.
Your exact address does not leave your address book. When you post a listing from an address in your book, the listing exposes only an approximate location: either a point you chose to show, or a grid cell of about one kilometre into which your address is rounded. Our database enforces this as the row is written, whatever the app sends: an approximate listing cannot carry your exact coordinates, not even through a programming mistake.
What Google receives. Two things, and both are necessary:
- when you search for an address in your book, the text you type is sent to Google's address service, which returns the suggestions. We keep the identifier of the chosen address, issued by Google;
- when a map is displayed, Google draws it: the map screen's plan is provided by Google, and a listing's map image is requested from Google with that listing's approximate location, never with your exact address.
We therefore declare approximate location to Google Play as collected and shared. That is the careful and truthful declaration.
This is the most important section of this document, because a classifieds platform is public by nature.
### 6.1 Visible to everyone, even without an account
- your published listings: title, description, price, condition, category, city, photos, approximate location
- your public name and your profile photo, on your listings and on your seller storefront
- your average rating and the approved reviews you received or left, with the public name of whoever wrote them
- your storefront counters: active listings, sold listings, join date
The photos you upload to a listing are publicly accessible. Do not photograph anything you would not want public: documents, a licence plate, an identifiable interior of your home.
Your photos' metadata. A device sometimes records the date, the model, sometimes the place, inside the image. Before publication, ijik rebuilds your photos from their pixels alone: that information does not travel with them. This removal is verified on Android. ijik is not published on iPhone yet; we will have verified it there too before publishing it.
Your listings are readable on the web and indexed by search engines. A listing's page exists at a public address on `ijik.app`, with its title, price, description, city and photo, so that it can be found from Google or so that a shared link shows a preview. The way to reach you is not on it: an account is required to see it.
### 6.2 What becomes public when you publish, and nothing before
Your public name — your handle if you chose one, otherwise your first name followed by the initial of your last name — becomes visible the day you publish a listing or leave an approved review. Before that, you appear nowhere.
Your full name is never shown.
And the list of ijik's members cannot be browsed. There is no directory: you reach a seller's storefront from one of their listings or from a review, never from a list of accounts.
### 6.3 Visible only to signed-in people
The number you chose to make reachable in a listing. A visitor without an account sees the listing, not the way to reach you.
### 6.4 Visible to nobody but you
- your email address
- your full name
- your address book, and the exact coordinates it holds
- the numbers in your book that you did not make reachable
- your favourites and your saved searches
- the people you blocked
- the reports you filed
- who exactly opened your listings: a seller sees numbers, never names
### 6.5 Visible to our moderation team
ijik's administrators can consult reports, reported content, and the information needed to handle a complaint or apply a sanction.
Your data is hosted in Ireland, in the European Union, on our provider Supabase's infrastructure.
This means your data benefits from the European protection framework, which is among the most demanding in the world.
If you live in Morocco, your data therefore leaves Moroccan territory to be processed in Europe. We tell you so explicitly.
As long as your account is active, your data is kept. If you do not sign in for three years, we warn you by email, then we delete your account and your data.
Your notifications erase themselves after sixty days.
When you delete your account, it is deactivated immediately, then permanently erased thirty days later. During that period you can change your mind by signing back in. At the end of the thirty days, the following are permanently erased:
- your profile and your photo
- your address book and your phone book
- your listings and their photos
- your favourites, your saved searches
- your reviews, written and received
- your reports and your blocks
- your notification preferences and your device tokens
Some traces are kept without you, for security and accountability reasons: moderation decisions and administration logs are kept, but your identifier is removed from them. Those records can no longer lead back to you.
One exception only, and it does not concern the voluntary deletion of an ordinary account. When an account has been closed by us for a serious reason — harassment or threats, hateful or discriminatory speech, sexual content involving a minor, fraud — we keep the trace of that decision with the identity of the account concerned. We do it for one reason only: to protect other users, and to be able to answer if the decision is questioned. This retention is limited to those cases and those reasons, and it ends five years after the account is closed.
At any time you can:
Consult your profile data, directly in the app.
Correct your information, in the profile screen.
Delete your account, from the app, in the Account section. Deletion takes effect after a thirty-day period during which you can change your mind.
Refuse location and notifications, in your phone's settings, at any time, without losing access to the rest of the app.
Write to us at privacy@ijik.app for any request about your data. We answer within a reasonable time.
If you live in the European Union, you additionally have the rights provided by the General Data Protection Regulation, in particular the right to portability and the right to object.
Your passwords are never stored in clear text.
Access to your data is controlled at the level of the database itself: every query checks who you are before showing you anything. That control does not depend on the app, but on the server.
No system is perfectly secure. Should a breach of your data occur, we would inform you.
ijik is not intended for people under 16.
We do not ask for your age and therefore cannot verify it. If you are the parent or guardian of a minor who created an account, write to us at privacy@ijik.app and we will delete it.
One reservation only, and we would rather state it: if that account was closed by us for a serious reason, the trace of that decision is kept for five years, as explained above. That is what lets us protect others, and it holds whatever the holder's age.
ijik integrates no advertising network, no audience measurement tool, no crash reporter. Four technical providers, and nothing else:
Supabase hosts our database and handles authentication, in Ireland. Your data lives there.
Google provides the maps and the address search: the plan you see, a listing's map image, and the suggestions when you look for an address. What Google receives is described in section 5.
Google, through its notification service (Firebase Cloud Messaging), carries notifications to your phone. It receives your device's token and the notification's content.
Cloudflare serves the `ijik.app` site — the public pages of listings, the regulatory pages you are reading right now, and the preview images of shared links.
Supabase, Google and Cloudflare act on our behalf, on our instructions. The only data we declare as *shared* in Google Play's sense is approximate location, because Google receives it on its own behalf when it draws a map.
We will update this policy as the service evolves.
If a change alters what we collect or what we do with it, we will inform you and ask you to accept the new version before you continue using ijik.
Minor changes — a wording fix, an updated address — do not trigger that procedure.
Every version of this document is dated and kept. You can ask us at any time which version you accepted and when.
Questions about your data: privacy@ijik.app
General support: contact@ijik.app
ijik
Quebec, Canada