Privacy Policy

Who we are

Halladayka (هل لديكَ) is a marketplace that connects people looking for vehicle parts with sellers. This policy covers the Halladayka mobile app and halladayka.com website. The service operator is Halladayka, referred to here as “we”, “us”, or “our”.

Information we collect

• Account information: your name, phone number and country code, optional email address, city, language and account preferences. If you set a password, we store a password hash. We also process verification codes and sign-in sessions.
• Marketplace activity: vehicle make, model and year, saved vehicles, requested parts, photos, seller subscriptions, seller profile details, offers, prices, acceptance decisions, and purchase outcomes you provide.
• Communications: messages and photos, videos or voice recordings you choose to send, their file information, timestamps and read status, and communications with support.
• Location: the city and map coordinates you choose for a request, seller profile or offer. With your device permission, we can use your current location to help place the map pin. You can choose a location manually.
• Device and technical information: app installation identifiers, notification tokens, device platform, notification permissions and preferences, language, last activity times, IP addresses and technical request/error logs used to operate and protect the service.
• Website analytics: we use self-hosted Umami to measure page visits, referring sites, browser and device information, and general usage patterns to help improve the website. Page URL query parameters and fragments are excluded from pageview analytics.
• Website session replays: we use Umami to record interactions in a randomly selected 25% of website visits for up to five minutes to help diagnose problems and improve usability. Recordings can include clicks, scrolling, page addresses and visible page content. Form input values are masked before recording, but other visible text on the page may be included.
• When you sign in on the website, we provide your internal account ID to Umami to link your visits and available session replays for troubleshooting and understanding repeat usage. We do not send your name, email address or phone number as analytics identity data. We clear this identity when you sign out.
• Safety information: blocks, reports, appeals, supporting evidence, moderation decisions and relevant account activity.

How we use information

• Create and secure accounts, verify phone numbers, maintain sessions and save your preferences.
• Match requests to relevant sellers, deliver offers, support conversations, and connect buyers and sellers to arrange a purchase.
• Send verification codes and service updates through SMS, WhatsApp, email and push notifications, depending on the feature and your settings.
• Display maps and resolve cities, maintain saved vehicles and drafts, and calculate marketplace activity and seller response information.
• Provide support, investigate abuse and reports, enforce marketplace rules, prevent fraud, diagnose failures, and comply with applicable legal obligations.

What other users can see

Relevant sellers can see your request, name, vehicle details, submitted media and request location. Buyers can see the seller information, offers, locations and media shared with them. Conversation content is available to the buyer and the participating seller; administrators may review relevant records for support, safety and moderation.

Your phone number is not shown to every seller who receives a request. When you accept an offer or part of an offer, your request contact number becomes available to the accepted seller so you can arrange the purchase. Seller contact details can be shared with buyers through the contact-access feature.

Information you include in messages or uploads is shared with the recipients of that content. Avoid including information you do not want those recipients to see. Recipients may retain copies outside Halladayka.

Services that help us operate

We use service providers to host and secure the service, store uploaded files, and deliver communications. They receive the information needed for those functions. These include:

• Cloudflare for network services and file storage, and our server hosting providers for the application, databases and backups.
• Google Firebase Cloud Messaging and Apple Push Notification service for device tokens and notification delivery.
• Postal for email delivery, Broadnet for SMS, and WhatsApp/Meta through our messaging integration for verification and service messages. Delivery requires recipient details and message content.
• OpenStreetMap map tiles and Nominatim location search. Map and search requests can disclose your IP address, searched places, viewed map areas, or coordinates used to identify a city to those services.

Permissions and your choices

You can manage location, camera, photos, microphone and notification permissions in your device settings. These permissions support the features you choose to use, such as selecting request photos, recording a voice message or placing a location pin. The app does not use background location tracking.

You can edit supported profile information in Account Information and remove saved vehicles. Notification permissions can be turned off in device settings. Turning off push notifications does not stop necessary verification or service messages sent through other channels. Contact us to discuss communication preferences or withdraw consent where processing relies on consent.

The current app does not include advertising SDKs or cross-app advertising tracking. Installation identifiers are used for app operation and notifications.

Cookies and storage on your device

The website uses cookies and browser storage for sessions, security and language preferences. The app stores sign-in tokens using device secure storage and uses local storage for preferences, installation information and saved drafts. Uploaded or downloaded media may also be cached on your device.

Clearing browser data, signing out, or uninstalling the app may remove some local information, but these actions do not delete your account or the information already stored on our servers.

Retention and deletion

In the app, Account → Account Information → Delete account disables your account, signs you out on all devices, closes active requests and disables your selling access. This is a soft deletion: your personal information and marketplace history remain stored. You can verify the same phone number and register a fresh account. Your previous account, history and seller profile remain separate and are not restored or transferred to the new account. This option does not permanently erase your data.

We retain account information and marketplace records while needed to provide the service, maintain transaction and conversation history, address disputes, prevent abuse and meet applicable legal obligations. Closing a request or signing out does not automatically erase its history.

You can request deletion of your account or personal information by contacting us below. Include the phone number or email associated with your account; do not send your password or a verification code. We may need to verify account ownership before acting on a request.

We assess deletion requests and remove or anonymize information that is no longer needed. Some records may need to be retained for legal obligations, unresolved disputes, fraud prevention or security; we will explain any relevant retention when responding. Residual copies may remain in protected backups until those backups are replaced. Copies already held by other marketplace participants are outside our direct control.

Security and international processing

We use measures such as HTTPS, access controls, password hashing and protected storage to help safeguard information. No service can guarantee absolute security. Protect your account and contact us if you suspect unauthorized access.

Our hosting, messaging and infrastructure providers may process information in countries other than where you live. Privacy laws can differ between countries. Applicable protections and legal requirements continue to apply to our handling of your information.

Your privacy rights

Depending on the law that applies to you, you may have rights to access or obtain a copy of your information, correct it, request deletion, object to or restrict certain processing, withdraw consent, or complain to the relevant data protection authority. Contact us to make a request. We will consider it under the applicable law and may verify your identity to protect your information.

Children’s privacy

Halladayka is a vehicle-parts marketplace and is not directed at children. If you believe a child has provided personal information without the authorization required by applicable law, contact us so we can investigate and take appropriate action.

Changes to this policy

We may update this policy when the service or our data practices change. We will publish the updated policy here and change the date above. Where required, we will provide additional notice or request consent for material changes.