Privacy Policy

This Privacy Policy explains how MyNumber ("we", "our", or "us") collects, uses, shares, and protects information when you use the MyNumber mobile application and website (mynumberiq.net) (together, the "Service"). The Service operates a marketplace where users in Iraq can buy and sell vehicle license plates and phone numbers.

By using the Service you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Information you provide to us

• Account information: your name, phone number, date of birth, password (stored as a hash by our authentication provider), and optionally a profile photo you upload.
• Listing content: titles, descriptions, prices, images, the license-plate or phone-number details you offer for sale, and the province / location you select.
• Communications: messages you exchange with other users through our in-app chat; support requests you send us.
• Preferences: language, dark-mode setting, and notification preferences (push notifications).

Information collected automatically

• Device information: device model, operating system version, application version, and a randomly-generated device identifier stored locally on your device. This is used to recognise the devices you sign in from for security purposes.
• Authentication activity: the date, time, IP address, and approximate location (derived from your IP address) of each sign-in, sign-out, password change, and security event on your account.
• Usage data: the listings you view, search queries you perform, listings you favourite, and similar interactions, used to operate and improve the marketplace.
• Push notification tokens: if you enable push notifications, a token issued by the Android or iOS push notification service is stored so we can deliver notifications to your device.

Biometric authentication

If you enable Face ID / Touch ID / fingerprint sign-in, the biometric data never leaves your device. Apple and Google handle the matching locally; MyNumber only receives a yes/no result.

2. How We Use Your Information

• Create and operate your account.
• Publish your listings and let prospective buyers contact you.
• Facilitate buyer-seller communication through our in-app chat.
• Detect and prevent fraud, abuse, unauthorised access, and other violations of our Terms of Service.
• Recognise devices you have previously signed in from, so we can challenge unusual sign-ins with a one-time code sent by SMS or WhatsApp.
• Operate, maintain, debug, and improve the Service.
• Send one-time verification codes by SMS or WhatsApp to sign you in and to confirm sensitive actions.
• With your consent, send push notifications. You can opt out at any time in Settings.
• Comply with our legal obligations.

3. How We Share Your Information

We do not sell your personal information. We share information only with:

Other users of the Service

Listings, your seller name and avatar, and the content of messages you send are visible to other users of the Service as you would expect from a public marketplace.

Service providers

• Cloud hosting and database providers — database, authentication, file storage, and serverless function hosting for the app, and hosting for our website.
• Push notification providers — delivery of push notifications to your device on Android and iOS.
• SMS and messaging providers — delivery of one-time login codes by SMS and WhatsApp (they receive your phone number in order to send the code).
• Email delivery providers — email sent from our website contact form.
• IP geolocation providers — IP-based approximate location shown to you in your Login Activity ("a sign-in from Erbil", etc.).
• Translation providers — if you choose to translate a chat message, the text of that message is sent to a third-party translation service. This happens only when you ask for a translation, and we ask for your agreement the first time. Note that this may include messages written by the other person in the conversation.

These providers process your information only to perform services on our behalf, under contractual confidentiality obligations, except for the translation service described above, which is a public service we do not control. A current list of the specific providers we use is available on request — email us at support@mynumberiq.net.

Legal disclosures

We may disclose information to law enforcement or other authorities if we believe in good faith that disclosure is required by law, to protect the rights, property, or safety of MyNumber, our users, or the public, or to investigate suspected fraud or violations of our Terms.

4. Data Retention

We keep your information for as long as your account is active, and afterwards as needed to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account:

• Your listings, favourites, blocked-user list, and uploaded images are deleted.
• Messages you sent to other users are retained on the recipient's side, but your name is replaced with "Deleted account" so you are no longer identifiable from those messages.
• Authentication and security audit logs are retained for a limited period for security investigations and then deleted.

5. Your Rights

You may at any time:

• Access and update your profile information through Settings → Edit Profile.
• Delete your account through Settings → Security → Delete Account. Deletion takes effect immediately after you confirm with your password; no email confirmation is required.
• Opt out of marketing communications through Settings → Notifications.
• Review and revoke trusted devices through Settings → Security.
• Contact us with any questions, requests, or complaints using the contact details below.

6. Security

We use industry-standard measures to protect your information, including:

• HTTPS / TLS for all network traffic.
• Encryption at rest for our database and storage, provided by our hosting provider.
• Row-level security policies that restrict each user's data to their own account.
• Optional biometric or password protection for the app session.
• Trusted-device verification: sign-ins from unfamiliar devices are challenged with a one-time code sent by SMS or WhatsApp.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but we work continuously to maintain and improve our safeguards.

7. Children

The Service is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. International Data Transfers

Our service providers may process your data outside Iraq, including in the European Union and the United States. Our main database and file storage are located in the European Union. By using the Service you consent to this transfer.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified in-app or by email at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance.

10. Contact Us

Questions, complaints, or requests about your personal information can be sent to:

MyNumber
Email: support@mynumberiq.net