Kitaab Exchange is a marketplace for used books and school supplies in Karachi, Pakistan. This policy explains what we collect, why, and the choices you have.
What we collect
Account: email and password (handled by Supabase Authentication), your name, and optionally a phone number, your education level, and your school, college or workplace (never shown publicly).
Location: the area of Karachi you choose, and approximate location if you allow it, to show nearby listings and tell buyers roughly where you are.
Content you post: listings, wanted posts, photos, school booklist submissions, ratings and reports.
Chats: text and voice messages you send to other users in the app.
Verification (optional): photos of your CNIC (front and back) and a selfie holding it, if you choose to get verified.
Payments: JazzCash/Easypaisa transaction reference numbers you submit for memberships and wallet withdrawals. We never see your card or account credentials.
Wallet: a record of rewards, boosts and withdrawals on your account.
Device and usage data: a push-notification token, app version, crash and error reports (via Sentry), the install source Google Play reports, so we know which campaign brought you, and a device identifier. The device identifier is stored only as a one-way hash and is used to detect duplicate accounts and referral fraud, never for advertising.
How we use it
To show your listings to other users under your display code (for example #KE1234), not your real name.
To connect buyers and sellers through in-app chat.
To confirm membership payments, process wallet rewards and withdrawals, and verify sellers.
To send notifications about your listings, chats and wallet.
To detect fraud and abuse, and to find and fix bugs.
Who sees your data
Other users see your display code, your area, your listings and your public ratings. They never see your real name, phone number or CNIC.
CNIC and selfie photos are seen only by our operations team and are never shown publicly.
Listings (photos, title, price, area) may be shared publicly, including on our Facebook Page and website, to help them sell.
Service providers
We use a small number of providers to run the app: Supabase (database, authentication and file storage), Sentry (crash reports), Expo and Google (push notifications and app delivery), and Meta (when listings are posted to our Facebook Page). They process data only to provide their service to us. We do not sell your personal data.
Security and storage
Data is stored in access-controlled cloud storage. Verification documents are kept private and are accessible only to you and our review team. No system is perfectly secure, so please don't share personal details in chat.
How long we keep it
We keep your data while your account is active. When you delete your account we remove your personal data as described on our Account & Data Deletion page, except records we must keep for fraud prevention or financial record-keeping.
Your choices
Edit your profile details in the app at any time.
Turn off location or notifications in your phone settings.
Kitaab Exchange is not directed at children under 13, and we do not knowingly collect data from them. If you believe a child has given us data, contact us and we will delete it.
Changes
We may update this policy as the app grows. The date above shows the latest version; continued use means you accept the update.