Privacy Policy

Diba Marketplace is the data controller for personal information collected through dibamarkets.com and the Diba app. Our contact address for privacy is privacy@dibamarkets.com.

We collect only what we need to run the marketplace:

• Account: name, phone number, city, avatar, email if you sign in with Google.
• Content: listings, photos, messages, reviews, favourites, and searches.
• Transaction context: orders, offers, and sales you record on the platform.
• Location: the approximate city you set on your profile and listings. We do not collect precise GPS coordinates.
• Technical: device type, browser, app version, error logs, and analytics events.

• Run your public profile, listings, and messaging.
• Match buyers with sellers via search, filters, and recommendations.
• Send transactional notifications (messages, offers, orders, follow updates).
• Detect and prevent fraud, abuse, and prohibited listings.
• Improve the product using aggregated, non-identifying analytics.

We never sell your personal data.

Your display name, city, avatar, listings, reviews, and follower counts are public. Your phone number is revealed only on active listings and shop pages so buyers can reach you. Private messages are visible only to you and the other participant. Your email address is never public.

We share limited data with service providers acting on our behalf:

• Cloud hosting and database infrastructure (used to store and serve your data).
• Email and notification delivery.
• Analytics and error tracking (aggregated data only).

We may disclose information to comply with Gambian law or a valid legal request.

Diba uses essential cookies for authentication and preferences (theme, language). We use first-party analytics to understand how the marketplace is used. No data is shared with advertisers, and we do not run third-party ad tracking.

We keep your account data while your account is active. When you delete your account, your listings, profile, and messages are removed within 30 days. We may retain limited records (reports, sanctions, financial audit trails) longer where legally required.

Under Gambian and international best practice you can:

• Access and correct your profile at any time from Settings.
• Download or request a copy of your data via privacy@dibamarkets.com.
• Delete your account from Settings → Delete Account.
• Object to certain processing, or ask us to restrict it.
• Complain to a relevant supervisory authority.

Data is stored in secure Lovable Cloud infrastructure with row-level access controls, TLS in transit, and encrypted storage at rest. We limit staff access and audit sensitive actions. No online service can guarantee absolute security — use a strong password and keep your login private.

Diba is not directed at children under 18. If we learn we've collected data from a child, we will delete it.

Some of our processors operate outside The Gambia. We only work with providers that offer adequate safeguards for your data.

We may update this policy from time to time. Material changes will be highlighted in the app or emailed to you. The "Last updated" date at the top reflects the latest version.

Privacy questions: privacy@dibamarkets.com.