Privacy policy

1. Who we are

Four Store runs this app and the website at fourstore.app. For anything about your privacy, email privacy@fourstore.app.

2. Who can use Four Store

You must be 18 or older to create an account.

3. What we collect

Your account

• If you sign up with email: your email address and password. The password is stored as a hash by our sign-in provider, not as readable text.
• If you sign in with Google: the account details Google shares with us, such as your name, email address and profile picture link. We use only your name, as your display name.
• If you sign in with Telegram: your Telegram ID and the name and username Telegram shares. Telegram doesn't give us your phone number or an email address.
• Your display name, account type (private seller or store), area, and the date you joined.

Contact details (optional)

• Your phone number, Telegram username and WhatsApp number, if you add them.

Store applications

• Store name, TIN, address and area.
• Your business license, as a photo or a PDF.

Listings

• Title, description, brand, model, storage, RAM, condition, price, area and status.
• Your photos. Before upload, the app removes the hidden information photos carry, such as the location where they were taken.
• For phones, optionally up to two IMEI numbers.
• For iPhones, optionally the battery health percentage, cycle count and a screenshot of the Battery Health screen. The screenshot has its hidden information removed in the same way as your photos.

Chats and offers

• The messages you send, offers and answers to offers, the time of each, and when you last read each chat.

Reports and blocks

• Reports you make: what you reported, the reason, your note and the outcome.
• People you block.

Technical logs

• Our hosting providers (Supabase and Cloudflare) keep technical logs of requests to our services, which include IP addresses.

What we don't collect

• We don't use advertising, analytics or crash-reporting tools.
• We don't ask for your location. The area you choose is a sub-city picked from a list.

4. What others can see

Anyone, even without an account

• Active and sold listings: photos, details, price, area, the battery screenshot, and the last 4 digits of the IMEI.
• The seller's display name, account type, area and join date.
• A store's name, address and area.

Signed-in users

• A seller's contact details, one listing at a time, and only while that listing is active.
• A buyer whom the seller has blocked doesn't get them.
• Banned users don't get them.

Only you (and our admins)

• Your email address, your contact details as stored, and your full IMEI numbers.
• Your store application and license.

Only you

• Who you have blocked, and when you last read each chat. The person you blocked isn't told.

Only the two people in a chat

• Its messages and offers, and each other's display name.

Our admins

• The private information above, plus all reports and the admin record described in section 5.

5. Admins and reported chats

Admins can't read your chats in general. Through our tools, an admin can read a chat only:

• when someone has reported a message in it, or reported the other person from it
• and only while that report is open.

Once the report is closed, admins can no longer read that chat through our tools.

Every time an admin reads a reported chat, and every admin action, is written to an admin record. An action is approving or rejecting a store, removing a listing, banning or unbanning someone, or closing a report. The record shows who did it, what they did and when. It's built so that it can't be edited or deleted through our tools. It doesn't contain message text. Admins looking up an account's details is not recorded.

The admin website keeps the admin's sign-in in the browser tab only, and it's gone when the tab is closed.

The people who run Four Store can also access the database directly, to operate and secure the service.

6. Who we share data with

We don't sell your data or share it for advertising. We use these services to run Four Store:

When you tap Call, Telegram or WhatsApp on a listing, your phone opens that app. From then on, your conversation happens there and follows that app's privacy rules.

7. Information stored on your phone

To work offline and open faster, the app keeps on your phone:

• your sign-in
• your language and theme
• the first page of Home and the list of categories
• a preview of your inbox and your unread count.

Your inbox data is erased when you log out. Copies of photos you picked may stay in the app's temporary storage on your phone.

8. How long we keep data

We have no automatic deletion. Data stays until you delete it in the app or we delete it at your request:

• Removed listings: when you remove a listing, buyers no longer see it, but the listing, its photos and its battery screenshot stay stored.
• Messages: messages can't be edited or deleted, by you or by the other person.
• Store licenses: your license stays stored after your application is approved or rejected.
• Contact details: you can empty any of them at any time in My contact details, and they're removed.
• Admin record: kept permanently (see section 5).

9. Deleting your account

The app doesn't delete accounts by itself yet. To delete yours:

1. Email privacy@fourstore.app from the email address on your account. If you signed in with Telegram and have no email, say your display name and Telegram username.
2. You can also use Delete my account on the Profile tab, which brings you to these instructions.

We'll confirm the request and delete your account by hand within 30 days. We delete:

• your account and profile
• your contact details
• your listings, with their photos and battery screenshots
• your store application and license
• your reports and blocks
• the reports others made about you
• your chats.

Please note:

• Your chats are deleted for the other person too. The people you chatted with will no longer see those conversations.
• The admin record stays. It holds which admin did what to which account and when, and any notes.
• Copies may remain in our providers' backups and logs for a limited time.

10. Your rights

• Correct your details. You can change your contact details and your listings in the app at any time. To correct anything else, such as your display name, area or a store application, email us.
• Delete your account. See section 9. You can start from Delete my account on the Profile tab.
• Get a copy of your data. Email privacy@fourstore.app from the email address on your account (or, without an email, with your display name and Telegram username). We'll put the copy together by hand and send it within 30 days.
• Ask questions. Email privacy@fourstore.app about anything in this policy.

11. How we protect your data

• Database rules decide who can see each piece of data, not only the app.
• Licenses are stored privately.
• Full IMEI numbers are never shown publicly.
• Hidden information is removed from photos before upload.
• No system is perfectly secure. If something goes wrong that affects your data, we will take reasonable steps to tell affected users.

12. Changes to this policy

When we change this policy, we'll update the effective date on this page. For important changes, we'll show a notice in the app or email people where we can.

13. Contact

privacy@fourstore.app