بِسْمِ ٱللَّٰهِ ٱلرَّحْمَٰنِ ٱلرَّحِيمِ
Effective date: 2 July 2026
Zonero (Aap Ki Apni Shopping Zone) ("we", "us", or "our"), based in Karachi, Pakistan, operates the Zonero website and mobile application (collectively, the "Service"). This Privacy Policy explains what personal information we collect, why we collect it, how we use and protect it, and the choices you have.
By creating an account or using the Service you agree to the practices described in this policy. If you do not agree, please discontinue use of the Service.
To verify your identity and prevent fraud we collect:
When you grant notification permission we store a device push token to deliver alerts about orders, campaigns, promotions, and messages.
| Create and manage your account | Account information |
| Display your listings to other users | Listing content, city |
| Enable buyer-seller chat and offer negotiation | Chat messages, media |
| Verify your identity and prevent fraud | ID/liveness data, device fingerprint |
| Process and track your orders | Orders, delivery address |
| Confirm lucky-draw participation | Payment screenshots, entry records |
| Send push notifications (orders, campaigns, promos) | Push token |
| Improve search results and personalise the feed | Search history, product views |
| Administer campaigns and calculate winners | Participation records |
| Detect abuse and enforce community guidelines | Usage data, verification data |
We do not sell your personal information. We share data only in the following limited circumstances:
| Permission | Why it is needed |
|---|---|
| Camera | Capturing liveness-check photos/video for identity verification; uploading listing or profile photos |
| Microphone | Recording audio during the liveness verification session |
| Photos / Media Storage | Uploading photos and videos for listings and chat (Android ≤ 12) |
| Notifications | Sending order updates, campaign alerts, and promotional messages |
You can revoke any of these permissions through your device settings at any time. Revoking camera or microphone access will prevent identity verification from completing.
You have the right to:
All data is transmitted using TLS/HTTPS encryption. Data at rest is protected by Supabase's infrastructure-level encryption. Access to personal data is restricted to authorised personnel only. We use Row-Level Security policies to ensure users can only access their own data. Despite these measures, no system is completely secure; please use a strong, unique password and keep your account credentials private.
The Service is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us immediately and we will delete it.
The Service may contain links to third-party websites (e.g., WhatsApp for payment coordination). We are not responsible for the privacy practices of those sites. We encourage you to review their privacy policies.
We may update this Privacy Policy periodically. We will notify you of material changes by posting the new policy in the app and/or sending a notification. Continued use of the Service after changes take effect constitutes acceptance of the updated policy.
For any questions, data access requests, or complaints about this Privacy Policy, please contact:
