Privacy Policy

How AlKhiidma handles your data

Last updated: 1 January 2026

What we collect

Your name, email, emirate, optional phone number, password (stored hashed with bcrypt), the listings you publish, the messages you exchange with other members, and pickup requests you send or receive through the platform (for coordination between members only).

Why we collect it

To run the marketplace: showing your listings to relevant buyers, delivering messages and pickup requests to the right counterparties, producing your ESG report, and keeping the platform safe.

Where it lives

Account and listing data is stored on MongoDB Atlas in the EU/UAE regions. Photos uploaded for listings are stored on Cloudinary. Sessions are signed JWTs stored in an HTTP-only cookie on your device.

What we share

Public listing details (title, photos, location, asking price, seller name and rating) are visible to other authenticated members. Phone and email are only shown on a listing once a viewer signs in. We never sell your data to advertisers.

Your rights

You can edit your profile, delete any listing you have posted, and request a full export or deletion of your account by emailing privacy@khiidma.ae. We respond within 30 days.

Retention

Account data is retained while your account is active. After deletion we keep transaction records for 7 years to satisfy UAE accounting requirements; everything else is purged within 30 days.

Cookies

We use a single first-party session cookie to keep you signed in. See Cookie Settings for details.