ZilyApp Privacy Policy

ZilyApp is a free digital-commerce platform connecting small businesses with consumers in local neighborhoods.

It provides wallet features that make it easy to pay for physical goods and services, sometimes with a small, transaction-based commission.

We prioritize your privacy and the protection of your personal information

We collect personal information solely to provide essential functionality and deliver the value users expect from the app.

All data types and permissions, as outlined below, are collected only with the user's explicit consent.

Details on data storage, sharing limitations, and user control are provided in the following sections.

1. Device Location: Used to help users find and locate shops of interest nearby.
2. Device Camera: Enables User Profile Image capture, and Product Image capture for sellers.
3. Device Storage (Media): Allows sellers to upload storefront images from their device.
4. Phone Book: Provides the option to select contacts to share the app's Play Store link.

1. Account Creation: Name, Username, Email Address (optional), Phone number, and Passwords (securely encrypted using bcrypt).
2. Wallet Creation and Operation: Bank Name, Account number, NO CARD DETAILS COLLECTED, Wallet balance, Wallet transaction history.
3. Location Data: Buyer location (Latitude and Longitude) for matching with nearby shops, Shop coordinates (for matching with buyers nearby). Note: USER LOCATION ARE NOT MONITORED.
4. Others: User feedback, Support Tickets, Survey responses, Bookmarks of shops or products within the application.

1. Device type (e.g., Android, iOS).
2. Operating system version.

Help buyers and sellers maintain records of their transactions

1. Order details (products/services purchased).
2. Payment history (linked to the wallet feature).

Cookies or other similar technologies are not used for analytics or personalization.

A server-generated token is securely stored on the user&apso;s device to associate the user's account with a specific device.

This enhances user security by enabling the system to alert the user if it detects attempted login to the app from another device. We also use it to enforce a policy that prevents users from being logged in on multiple devices simultaneously.

Login timestamps: used as non-personally identifiable information to monitor platform traffic patterns, manage load and resource provisioning, and analyze usage. This data is not processed by, and is not shared with, any third party. 


Users have full control over their accounts and may create or delete them at any time. Deleted user records are retained for a maximum of 30 days for recovery purposes, after which they are permanently erased.

Protection of Personally Identifiable Information (PII):

1. Sensitive data, such as bank details, is never shared with other users.
2. Phone numbers are used exclusively for KYC (Know Your Customer) processes and platform-mediated transactional communications; they are not shared with other users.
3. Location data is collected solely to determine nearby points of interest and is cleared upon user logout. This information is neither stored nor shared.
4. PII stored in our database is encrypted and protected by strict access controls, which are role-based and granted only on a need-to-know basis. Access patterns are internally monitored through system logs.
5. Home addresses, when provided for delivery services, are stored in encrypted form and handled with the same security measures as passwords. Users may delete this information at any time.

2. Data Sharing:

1. Banking Integration: PII required for bank integration and wallet issuance (e.g., phone number and necessary bank details) is shared exclusively with verified banking partners
2. Legal Obligations: PII is disclosed only when legally required by law enforcement or regulatory bodies (e.g., anti-money laundering investigations).
3. No Data Sales: User information is never sold, whether as PII or non-PII.

1. 1. Target Audience Disclaimer:
   This app is intended for use by individuals who are of tertiary institution age or older. By creating an account, users confirm that they meet this age requirement. The platform is not designed for, nor does it knowingly collect or solicit personal information from, individuals under this age group.
2. 2. Children&apso;s Privacy Policy:
   We are committed to protecting the privacy of children. Our platform is not intended for use by individuals under the tertiary institution age grade, and we do not knowingly collect, store, or process personal information from such individuals. If we become aware that personal information has been inadvertently collected from someone under this age grade, we will take immediate steps to delete it. Parents or guardians who believe their child has provided us with information may contact us at zilycloud@zilycloud.com to request deletion.