Privacy Policy

1. Information We Collect

• Account data: name, email address, and password (stored as a secure hash) when you register.
• Profile data: delivery addresses, order history, and support ticket history.
• Usage data: product views, search queries, pages visited, and in-app events collected anonymously to our own servers to improve the service.
• Device data: device model and operating system version collected solely for crash diagnostics and compatibility purposes.
• Communications: messages sent through our built-in messenger between buyers and sellers.

2. How We Use Your Information

• To create and manage your account and authenticate your identity.
• To process orders and facilitate communication between you and sellers.
• To improve our platform based on aggregated, anonymised usage analytics.
• To send transactional notifications (order updates, support replies) — we do not send marketing emails without your explicit consent.
• To detect fraud and ensure the security of the platform.

3. Data Sharing

We do not sell your personal data. We share data only with the following parties: (a) sellers on our platform, to the extent necessary to fulfil your order (e.g. delivery address); (b) cloud infrastructure providers (hosting, object storage) bound by data-processing agreements; (c) law enforcement authorities when required by applicable law.

4. Data Security

All data is transmitted over HTTPS. Passwords are never stored in plain text. On the mobile app, authentication tokens are stored exclusively in the device Keychain (iOS) or Keystore (Android) — they are never written to unencrypted storage. We apply industry-standard encryption at rest for our databases.

5. Cookies and Tracking

Our website uses strictly necessary cookies for authentication and language preferences. We do not use third-party advertising trackers or cross-site tracking cookies. Our mobile app does not use any advertising SDKs. Analytics events are sent only to our own servers and are not shared with third parties for targeting.

6. Your Rights

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct inaccurate or incomplete data.
• Erasure: request deletion of your account and associated personal data.
• Portability: receive your data in a machine-readable format.
• Objection: opt out of analytics data collection at any time via the app settings.

7. Data Retention

We retain your account data for as long as your account is active. Order and support ticket records are kept for 5 years to comply with applicable commercial laws. You may request early deletion by contacting us.

8. Children's Privacy

Ninhao is not directed to children under 13 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Significant changes will be notified via email or an in-app notice at least 14 days before they take effect.

10. Contact

For privacy-related questions or to exercise your rights, contact us at ivan.oliinyk@ninhao.org. We will respond within 30 days.