Privacy Policy

1. Information we collect

When you create an account or use BarakaGo, we collect:

• Contact information — name, email address, and phone number; provided by you at registration.
• Authentication identifiers — user ID and password (stored as a one-way hash). If you sign in with Telegram, we receive your Telegram ID, username, and profile photo URL.
• Precise location — your device's GPS coordinates while the app is open; only when you grant location permission. We use this to show food offers near you and to compute distance to shops.
• Photos — images you choose from your photo library or camera when creating shop or offer listings (vendor accounts only).

We do not collect tracking identifiers (IDFA, IDFV, advertising IDs) and we do not track you across other apps or websites.

2. How we use your information

We use your information only to provide and improve the BarakaGo service:

• Authenticate your account and keep you signed in
• Show nearby food offers and compute distances
• Place and fulfil orders between buyers and shops
• Display your shop and offer photos to other users (vendor accounts)
• Communicate with you about your account, orders, or service updates
• Detect abuse and enforce our Terms of Service

We do not sell your personal information. We do not use it for advertising or behavioural profiling.

3. Third-party services

To deliver core features, BarakaGo uses:

• Yandex MapKit and Geocoder — map tiles and address lookups. When the map is shown, your approximate location and map area are sent to Yandex (Yandex LLC). yandex.com/legal/privacy
• Telegram Login Widget — optional, only if you choose to sign in with Telegram. Telegram receives a login confirmation; we receive your Telegram public profile. telegram.org/privacy

We do not use third-party analytics, advertising SDKs, or crash reporters that link to identifiable users.

4. How we store and protect your information

• All data in transit is encrypted with HTTPS (TLS 1.2+).
• Authentication tokens are stored in your device's secure Keychain (iOS) or EncryptedSharedPreferences (Android).
• Server-side data is stored in PostgreSQL hosted in Uzbekistan. Photos are stored in MinIO (S3-compatible), accessible only via signed URLs.
• We retain your account data while your account is active. When you delete your account, we soft-delete the record and purge identifying data within 30 days, except where retention is required by Uzbekistan law (tax records, order receipts).

5. Your rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information (you can edit profile fields in the app)
• Delete your account and personal information
• Object to or restrict certain processing
• Receive a copy of your data in a portable format

To exercise these rights, email us at privacy@zangnoma.uz. We respond within 30 days.

6. Children's privacy

BarakaGo is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, contact us and we will delete it.

7. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top. Material changes will be announced in the app or by email at least 14 days before they take effect.

8. Contact us