Privacy Policy
Effective Date: September 1, 2026 | Last Updated: September 3, 2026
Welcome to Nezoola. This Privacy Policy explains how we collect, use, and protect your personal information, and the choices you have concerning it. By using the Nezoola app (the "Service"), you entrust us with your information, and we take that responsibility seriously. Please read this policy carefully.
Throughout this policy, "we," "us," and "our" refer to Nezoola. "You" and "your" refer to you as a user.
1. Information We Collect
1.1 Information You Provide Directly
When you use Nezoola, you share some information with us directly. This includes:
- Account details: your name, email address, and password (which we store in a securely hashed form using bcrypt), and optionally your phone number and profile picture.
- Profile information: your date of birth, gender, city, and place preferences such as favorite categories, preferred vibe, and budget range. You can update or remove any of these at any time in the app settings.
- Google account data (if you sign in with Google): your name, email address, and profile photo, exactly as Google shares them with us.
- Saved places: the places you choose to bookmark for later.
- Contact form submissions: your name, email address, subject, and the content of your message.
1.2 Information We Collect Automatically
As you use the app, we automatically collect a limited amount of technical information to keep the Service working and to improve it:
- App usage analytics: screen views, search queries, feature interactions, and session data collected through Firebase Analytics, a service provided by Google.
- Crash and performance data: error logs, along with your device model, operating system version, and app version, collected through Firebase Crashlytics (a Google service) so we can diagnose and fix issues.
- Device identifiers: a Firebase Installation ID and App Instance ID (pseudonymous identifiers used by Firebase for analytics and crash reporting). These are resettable identifiers used only by Firebase (Google) for the purposes described in Section 3 of this Policy, and they are never shared with any other party, advertiser, or data broker.
- Push notification token: a device token issued by Firebase Cloud Messaging (a Google service) that lets us deliver notifications to your device about your account and content.
- Authentication metadata: login timestamps and session tokens, used to keep you signed in across your device.
- Server request logs: IP addresses, browser or app details, and request URLs, logged for security and debugging purposes.
1.3 Information We Do NOT Collect
We have designed Nezoola with privacy in mind, and there are certain things we deliberately do not collect:
- Device location. We never request location access from your device. Coordinates may be sent to Google Maps only when you explicitly type in an address for geocoding.
- Camera or photo gallery access. We never request these permissions, and the app does not currently support photo uploads. The Service may receive images through other means, such as administrative or future client-side functionality.
- Contacts or call logs.
- Advertising identifiers.
2. How We Use Your Information
We use the information we collect to provide, operate, and improve the Service. Concretely, we use it to:
- Set up and manage your account, including verifying your sign-in and keeping your session secure.
- Respond to your inquiries and messages through the contact form.
- Detect, prevent, and fix technical issues so the app runs smoothly.
- Understand broadly how people use the app so we can make it better.
- Enforce our Terms of Service and keep the platform safe.
3. Third-Party Services and Data Sharing
To run the Service, we rely on a small number of trusted third-party providers. Some of them may process limited information on our behalf:
- Firebase Authentication: we use your name, email address, and authentication identifiers to let you sign in and manage your account.
- Firebase Analytics: we use usage events, search queries, and feature interactions for analytics.
- Firebase Crashlytics: we use crash logs, device model, OS version, and app version for crash diagnostics.
- Google Analytics 4 Data API: we use aggregated, anonymized analytics queries for server-side reporting.
- Cloudflare R2: we use it to store and deliver images provided to the Service.
- Firebase Cloud Messaging: we use your device push token to deliver notifications about your account and content.
- Heroku (Salesforce): we use cloud application hosting, where our servers process and serve the Service.
- MongoDB Atlas: we store all user data in cloud database hosting.
- Gmail / Google SMTP: we use it to send contact-form emails and account verification emails.
You can read each provider's own privacy policy at Firebase Privacy, Cloudflare Privacy, Google Privacy, MongoDB Terms, and Salesforce Privacy.
A note on cross-border processing: some of the providers above process data outside Egypt (for example, in the United States, including our hosting provider Heroku), where data protection laws may differ from Egypt's. The Service relies on these providers to operate, so your information may be processed in countries outside Egypt as part of using Nezoola. We encourage you to read the privacy policies of these third-party services.
We do NOT sell your personal information to any third party, share it with advertisers, use it for personalized advertising, or share it with data brokers.
4. Do Not Sell My Personal Information
Nezoola never sells, trades, or otherwise transfers your personal information to outside parties for money or any other benefit, and we do not use your data for targeted advertising.
5. Ratings and Saved Content
Ratings, saved places, and other content you submit to Nezoola may be shown publicly within the app. By submitting content, you grant Nezoola a non-exclusive, worldwide, royalty-free license to display, distribute, and promote that content within the Service.
6. Data Security
We take reasonable and industry-standard measures to protect your information:
- Passwords are hashed with bcrypt (a one-way hashing method) before they are stored.
- All communication between your device and our servers is encrypted with HTTPS/TLS, enforced by our hosting provider.
- Authentication relies on short-lived JWT access tokens with secure refresh-token rotation.
- API access is rate-limited and restricted by origin.
- Security headers are applied to all server responses.
Even with these safeguards, no method of transmission over the Internet or electronic storage is 100% secure, so we cannot guarantee absolute security.
7. Data Retention
We keep your data only as long as needed for the purposes described in this policy. On request, your account and its related data are removed. Some data may be retained for a limited period (for example, logs used for security and backups) and is never used for any other purpose.
8. Your Rights
You have control over your personal information. You may:
- Correct any inaccurate personal data.
- Delete your account and all associated data.
To exercise these rights, use "Delete My Account" in the app settings.
9. Account Deletion
You can delete your account at any time:
- Open the Nezoola app
- Navigate to Profile > Settings
- Tap "Delete My Account" and confirm
Deletion permanently removes your profile, preferences, saved places, and authentication credentials. Deletion is processed immediately, though some data may remain in backup systems for a limited period; backup copies are never restored into active use.
10. Changes to This Policy
From time to time, we may update this Privacy Policy to reflect changes in our Service or in the law. We will notify you of any material changes by posting the updated policy in the app and updating the "Last Updated" date above. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.
11. Governing Law
This Privacy Policy is governed by and construed in accordance with the laws of Egypt. Any disputes will be subject to the exclusive jurisdiction of the courts of Egypt.
12. Contact Us