1.Information We Collect

Account & profile information

When you sign up, log in, or edit your profile, we collect information such as your name, phone number and/or email address, country code, and, if you choose to add one, a profile picture.

Addresses

Delivery addresses you save to your account so we can process and deliver your orders.

Orders, cart & transactions

Details about the products you browse, add to your cart, purchase, or add to your wishlist, along with your order history, order status, and any refund requests you submit.

Payment information

When you pay for an order online, your payment is processed through a secure third-party payment gateway. Lokal does not collect or store your full card number, CVV, or banking credentials on our servers.

Content you create

Product ratings and reviews you post, and any photos you choose to attach to your profile or a review.

Device & usage information

Device type and operating system, app version, language preference (English or Arabic), a push-notification device token, and general log/diagnostic data used to keep the App working reliably and securely.

2.How We Use Your Information

• Create and manage your account, and authenticate you when you log in.
• Process orders, payments, deliveries, and refund requests.
• Show your saved addresses, wishlist, and order history back to you.
• Display product ratings and reviews to other users of the App.
• Send order updates, offers, and other notifications you have not opted out of.
• Provide customer support and respond to your requests.
• Maintain the security, integrity, and proper functioning of the App, and detect fraud or abuse.
• Improve and troubleshoot the App's features and performance.

3.Device Permissions

The App may request the following device permissions. You can grant or deny each one, and change your choice at any time in your device Settings.

4.How We Share Information

We do not sell your personal information. We share information only in these situations:

• Service providers — infrastructure, hosting, and cloud storage providers that operate the App's backend on our behalf.
• Push notification services — Google Firebase Cloud Messaging is used to deliver notifications to your device (see below).
• Payment processors — third-party payment gateways that securely handle online payments for your orders.
• Other users — your product ratings, reviews, and any store/product links you choose to share are visible to other users or the person you share them with.
• Legal reasons — if required to comply with a law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Lokal, our users, or the public.

5.Push Notifications

The App uses Google Firebase Cloud Messaging to deliver order updates and offer notifications to your device. This involves sending a device token to Firebase's servers so notifications can be routed to your device. You can disable notifications at any time from your device Settings or, where available, in the App's notification preferences.

6.Data Retention

We keep your personal information for as long as your account is active or as needed to provide you the App's features. Certain order, transaction, and financial records may be retained for a longer period where required for accounting, tax, fraud-prevention, or other legal obligations, even after you delete your account. See Account & Data Deletion below for details on what happens when you delete your account.

7.Data Security

We use reasonable technical and organizational measures — such as encrypted storage of sensitive credentials on your device and secured connections between the App and our servers — to protect your information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8.Your Rights & Choices

• Access & update — review and edit your profile, addresses, and account details directly in the App.
• Delete — permanently delete your account and associated data from the App, or by contacting us. See Account & Data Deletion below.
• Notification preferences — turn push notifications on or off at any time.
• Withdraw consent — where processing is based on your consent, you may withdraw it by contacting us; this will not affect processing carried out before withdrawal.

9.Children's Privacy

The App is not directed to children, and we do not knowingly collect personal information from children under the age required by applicable local law to consent to data processing without parental approval. If you believe a child has provided us with personal information, please contact us so we can remove it.

10.International Users

Your information may be stored and processed in countries other than the one in which you live, including where our hosting and service providers operate. Wherever your information is processed, we take steps to protect it consistent with this Privacy Policy.

11.Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page, and, where appropriate, through a notice inside the App. Continued use of the App after changes take effect constitutes your acceptance of the revised policy.

12.Contact Us

If you have questions about this Privacy Policy or how your data is handled, contact us:

1.Option A — Delete your account in the App

1. Open the Lokal app and log in to your account.
2. Go to the Profile tab.
3. Scroll down to Delete Account and tap it.
4. Read the confirmation dialog and tap Yes, Delete to confirm.

Your account and all associated data are removed immediately once you confirm. This is available in both English and Arabic.

2.Option B — Request deletion without the App

If you no longer have the App installed, can't log in, or prefer to request deletion by email or phone, contact us using the details below. To verify it's really you, please include the phone number or email address registered on your Lokal account.

We will confirm your identity, process the request, and notify you once your account and data have been deleted.

3.What Gets Deleted

4.Timeline

In-app deletion takes effect immediately. Deletion requests submitted by email or phone are typically completed within 30 days of identity verification. Any data retained for legal or accounting obligations, as described above, is deleted or anonymized once that retention period ends.