Privacy Policy

This Privacy Policy explains how MyNumber ("we", "our", or "us") collects, uses, shares, and protects information when you use the MyNumber mobile application and website (mynumberiq.net) (together, the "Service"). The Service operates a marketplace where users in Iraq can buy and sell vehicle license plates and phone numbers.

By using the Service you agree to the practices described in this policy. If you do not agree, please do not use the Service.

1. Information We Collect

Information you provide to us

• Account information: your name, phone number, date of birth, password (stored as a hash by our authentication provider), and optionally a profile photo you upload.
• Listing content: titles, descriptions, prices, images, the license-plate or phone-number details you offer for sale, and the province / location you select.
• Communications: messages you exchange with other users through our in-app chat; support requests you send us.
• Preferences: language, dark-mode setting, and notification preferences (push notifications).

Information collected automatically

• Device information: device model, operating system version, application version, and a randomly-generated device identifier stored locally on your device. This is used to recognise the devices you sign in from for security purposes.
• Authentication activity: the date, time, IP address, and approximate location (derived from IP via ipinfo.io) of each sign-in, sign-out, password change, and security event on your account.
• Usage data: the listings you view, search queries you perform, listings you favourite, and similar interactions, used to operate and improve the marketplace.
• Push notification tokens: if you enable push notifications, a token from Firebase Cloud Messaging (FCM) or Apple Push Notification service (APNs) is stored so we can deliver notifications to your device.

Biometric authentication

If you enable Face ID / Touch ID / fingerprint sign-in, the biometric data never leaves your device. Apple and Google handle the matching locally; MyNumber only receives a yes/no result.

2. How We Use Your Information

• Create and operate your account.
• Publish your listings and let prospective buyers contact you.
• Facilitate buyer-seller communication through our in-app chat.
• Detect and prevent fraud, abuse, unauthorised access, and other violations of our Terms of Service.
• Recognise devices you have previously signed in from, so we can challenge unusual sign-ins with a one-time code sent by SMS or WhatsApp.
• Operate, maintain, debug, and improve the Service.
• Send one-time verification codes by SMS or WhatsApp to sign you in and to confirm sensitive actions.
• With your consent, send push notifications. You can opt out at any time in Settings.
• Comply with our legal obligations.

3. How We Share Your Information

We do not sell your personal information. We share information only with:

Other users of the Service

Listings, your seller name and avatar, and the content of messages you send are visible to other users of the Service as you would expect from a public marketplace.

Service providers

• Supabase — database, authentication, file storage, and serverless function hosting.
• Google Firebase Cloud Messaging — push notification delivery on Android.
• Apple Push Notification service — push notification delivery on iOS.
• OTPIQ — delivery of one-time login codes by SMS and WhatsApp (receives your phone number to send the code).
• Resend — email delivery for our website contact form.
• ipinfo.io — IP-based approximate geolocation shown to you in your Login Activity ("a sign-in from Erbil", etc.).
• Vercel — hosting for our website.

These providers process your information only to perform services on our behalf, under contractual confidentiality obligations.

Legal disclosures

We may disclose information to law enforcement or other authorities if we believe in good faith that disclosure is required by law, to protect the rights, property, or safety of MyNumber, our users, or the public, or to investigate suspected fraud or violations of our Terms.

4. Data Retention

We keep your information for as long as your account is active, and afterwards as needed to comply with legal obligations, resolve disputes, and enforce our agreements. When you delete your account:

• Your listings, favourites, blocked-user list, and uploaded images are deleted.
• Messages you sent to other users are retained on the recipient's side, but your name is replaced with "Deleted account" so you are no longer identifiable from those messages.
• Authentication and security audit logs are retained for a limited period for security investigations and then deleted.

5. Your Rights

You may at any time:

• Access and update your profile information through Settings → Edit Profile.
• Delete your account through Settings → Security → Delete Account. Deletion takes effect immediately after you confirm with your password; no email confirmation is required.
• Opt out of marketing communications through Settings → Notifications.
• Review and revoke trusted devices through Settings → Security.
• Contact us with any questions, requests, or complaints using the contact details below.

6. Security

We use industry-standard measures to protect your information, including:

• HTTPS / TLS for all network traffic.
• Encryption at rest for our database and storage, provided by Supabase.
• Row-level security policies that restrict each user's data to their own account.
• Optional biometric or password protection for the app session.
• Trusted-device verification: sign-ins from unfamiliar devices are challenged with a one-time code sent by SMS or WhatsApp.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security but we work continuously to maintain and improve our safeguards.

7. Children

The Service is intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it.

8. International Data Transfers

Our service providers (Supabase, Firebase, Vercel, Resend, ipinfo.io) may process your data outside Iraq, including in the European Union and the United States. By using the Service you consent to this transfer.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified in-app or by email at least 14 days before they take effect. Continued use of the Service after the effective date constitutes acceptance.

10. Contact Us

Questions, complaints, or requests about your personal information can be sent to:

MyNumber
Email: support@mynumberiq.net