Privacy Policy

Effective Date: 02.10.2026

This Privacy Policy describes how Shard Soft LTD ("we", "us", or "our") collects, uses, and discloses your personal information when you use our website, Alo.sy (the "Website"), and the Alo.sy app for iOS and Android (the "App"). The Website and the App share one account, and this policy covers both.

1. Information We Collect

We may collect the following types of information:

Personal identification information (name, email address, phone number, etc.).
Listings and related content you provide, including photos and, if you choose to add it on the Website, the listing's location on the map.
Messages you send to sellers through the Website or the App, with the contact details you choose to include in them.
Usage data including your IP address, browser type, and access times.
If you sign in with Facebook, Google or Apple, the details described in section 3.

The App uses your camera only when you choose to photograph an item for a listing, and opens your photo library only so that you can choose the pictures to attach. We receive only the photos you take or choose for the listing; nothing else on your device is uploaded. You can withdraw the camera and photos permissions in your phone's settings at any time.

Notifications on your phone

If you allow notifications in the Alo.sy app, we store a notification token for your phone, issued by Apple or Google through Expo, the service we send notifications through, together with the app version, platform and language. We use it to tell you about activity on your account, such as a new message about your listing. The token is deleted when you sign out on that phone, delete your account, or uninstall the app. You can turn notifications off at any time in your phone's settings.

Approximate location

If you allow location in the app, the app uses your position on your phone to pick your governorate, and sends us an approximate location: your governorate, coordinates rounded to about 10 km, and the type of phone (iOS or Android). We never store your exact position. We keep only the latest value for your account (and, if you allow notifications, for each phone), replacing it each time. It is deleted when you delete your account, and a phone's copy is also deleted when you sign out on that phone or uninstall the app. We use it to help keep your account secure (for example, noticing a sign-in from an unusual place), to understand where our users are, and for marketing, such as deciding where to promote Alo.sy. The app uses location only while it is open, never in the background. You can turn it off at any time in your phone's settings, and the app works without it.

2. How We Use Your Information

We use the information we collect to:

Provide and improve our services.
Communicate with you regarding your account or listings.
Send updates, promotional content, or respond to inquiries.
Comply with legal obligations under Syrian law.

3. Signing In with Facebook, Google or Apple

If you choose to sign in with Facebook, Google or Apple, we receive from that provider your name, your email address (if the provider shares it) and the identifier the provider assigns to your account, and we store them so that we recognise you the next time you sign in. If you use Apple's "Hide My Email", we receive only the relay address Apple gives us. For Apple sign-in we also keep a token that lets us revoke our access when you delete your account. We never receive your password for these services, and we do not post anything on your behalf.

4. Sharing Your Information

We do not sell your personal data. We may share information with third parties only to the extent necessary to operate our services, fulfill legal requirements, or protect our rights.

The listings you publish, and the contact details you choose to show on them, are public: anyone using the Website or the App can see them. The seller's phone number and other contact details are shown only to signed-in users.

The service providers that process data for us to run the Website and the App are:

Google Cloud: hosting, database and file storage.
Cloudflare: content delivery and protection against attacks; all traffic to the Website passes through it.
Microsoft 365: sending account emails and receiving the mail you send to our addresses.
Sentry: crash and error reports from the Website and the App, used to find and fix faults. A report describes the fault, the app version and the device type and operating system; we do not attach your name, email address or IP address to it.
Expo: delivering push notifications to the App, through Apple and Google.
Google Analytics: statistics on how the Website is used.
Google reCAPTCHA: protecting the registration, contact and message forms from spam.
Meta (Facebook), Google and Apple: only when you choose to sign in with them.

5. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law.

When you delete your account, your profile details, your listings and their photos, and your messages are deleted immediately (see section 8). Records we are required to keep by Syrian law are retained for the period the law prescribes. Technical server logs that may contain your IP address are rotated within 90 days.

6. Cookies

We may use cookies and similar technologies to enhance user experience and analyze website traffic.

7. Your Rights

Under Syrian law, you may have the right to:

Access the personal data we hold about you.
Request corrections to your data.
Request deletion of your personal data.

To exercise these rights, write to us through our contact form: www.alo.sy/en/contacts, or delete your account yourself as described in section 8.

8. Deleting Your Account

You can delete your account at any time. In the App, go to Account → Profile → Delete account. Confirm with your password or by signing in again with Facebook, Google or Apple; or ask for a confirmation link by email: we send it to the email address on the account, it is valid for one hour, and opening it and confirming deletes the account. On the Website, sign in, open your profile page and use Delete Account; an account opened with Facebook, Google or Apple has no password, so you confirm by typing the word shown. If you can no longer sign in, write to us through our contact form: www.alo.sy/en/contacts, entering the email address registered on the account. Full instructions, and the list of what is deleted, are on the Account and Data Deletion page: www.alo.sy/en/account-deletion

9. Data Security

We implement appropriate security measures to protect your data. However, no method of transmission over the Internet is completely secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on the Website.

11. Contact Us

If you have any questions about this Privacy Policy, you may contact us:

Contact form: www.alo.sy/en/contacts
Address: Damascus, Syria