Privacy Policy

Addiyon ("we", "our", or "us") runs a classifieds marketplace in Ethiopia, available at addiyon.com and as an Android app. This policy describes exactly what information the marketplace collects, why we collect it, who processes it on our behalf, and how you can delete it. It applies to both the website and the app.

Account information. Your name, email address, phone number, and an optional Telegram username. If you register with a password we store only a salted hash of it; if you sign in with Google, we receive your Google account identifier, name, email address, and profile picture. You may upload a profile photo.

Listings you post. Title, description, category, price, item attributes, the locality you select from our list, the contact details you choose to publish, and the photos you upload.

Marketplace activity. Saved listings, sellers you follow, sellers you block, listings you view, searches you run, and your notification preferences and read status. Google Analytics also measures page or normalized app-screen views, sessions, app lifecycle events, and page or screen engagement. The mobile integration does not send route parameters, listing or seller IDs, search text, contact details, or an Addiyon account identifier to Google Analytics. We increment an aggregate popularity score when a listing is opened and aggregate search terms for the Popular searches list; neither is a per-user history.

Safety and moderation records. Reports you submit about a listing or a seller, the reason and details you provide, a snapshot of the reported content, and the outcome of our review.

Job applicant information. If you apply for a role, we collect your name, email address, optional phone number and professional-profile link, the note you provide, your PDF resume, the position, and application status. Applicant information is kept separate from public marketplace listings and is not published.

Device and technical information. IP address, request logs, app/device details, Firebase and Crashlytics installation IDs, Google Analytics browser client or mobile app-instance ID, push notification token, Play Integrity results, crash diagnostics, and coarse location derived by Google Analytics from a masked IP address.

On-device storage. The app keeps a local cache of public marketplace content so browsing stays fast and works during brief connectivity loss. Your session identifier is held in the device's encrypted secure storage. The website may store a first-party Google Analytics identifier in your browser.

To be explicit, and in contrast to what a generic marketplace policy might claim, the app does not collect or process any of the following:

• Precise or background device location. The app requests no location permission. A listing's area is a locality you pick yourself from a list.
• Payment or financial data. We process no payments and integrate no payment provider. Buyers and sellers arrange payment between themselves, outside Addiyon.
• Advertising identifiers or ad networks. The app contains no advertising SDK and we run no behavioural advertising.
• Advertising analytics or cross-app profiles. We use Google Analytics for the product-usage measurement described above, but the Android app disables advertising-ID collection and ad personalization signals. The app contains no ad network, and we do not use Analytics to build cross-app advertising profiles.
• Your contacts, calendar, microphone, or camera capture. The app has no permission for these.
• Access to your whole photo library. Photos are chosen through the Android system picker, which returns only the images you select.

• Create and manage your account and keep you signed in.
• Publish, display, search, and rank listings, and let buyers contact sellers using the details a seller chooses to publish.
• Show you saved listings, followed sellers, and relevant results, and hide sellers you have blocked.
• Send transactional email, including one-time verification codes, and push notifications you have enabled.
• Review listings for prohibited, fraudulent, duplicated, or unsafe content, and act on reports from users.
• Keep the service secure and available: verifying that requests come from a genuine app install, limiting abusive traffic, diagnosing crashes, and investigating incidents.
• Measure page and screen usage, sessions, and feature adoption so we can understand and improve the marketplace.
• Evaluate job applications, contact candidates, conduct interviews, and maintain records of the recruitment process.
• Comply with legal obligations and enforce our Terms.

Every listing is screened automatically before it goes live. The listing's title, description, and photos are sent to third-party AI providers that classify prohibited or unsafe content, and we compare short numeric fingerprints of listing photos against other listings to detect duplicate reposts. A listing may be rejected by this process, and the stored rejection reason explains why. Administrators can review these decisions. This screening applies to listing content only; it is not applied to your account details, and it is not used to profile you.

Listings are public by design. Your listing content, the locality you selected, your seller display name and profile photo, and any contact details you chose to publish are visible to anyone using Addiyon, including people who are not signed in, and may be indexed by search engines. Your email address, password, session data, saved listings, followed and blocked sellers, and the reports you submit are never published. Job applications and resumes are also never published. Do not put information in a listing that you do not want to be public.

Google Play defines collection as data sent off your device, including data sent to processors that operate services for us. Under that definition, the Android app collects the categories below. Optional means you can use the marketplace without providing that category; required means the relevant collection has no in-app opt-out.

• Optional personal information: name, email address, account identifiers, and phone number for accounts, sign-in, seller contact, duplicate detection, and account management.
• Optional approximate location and photos: a locality you select for a listing, listing photos, and an optional profile photo. Photos are also used for safety review and duplicate detection.
• Required app interactions: opening a listing records an aggregate popularity event used to rank listings. Google Analytics also records normalized screen views, sessions, app lifecycle events, and screen engagement for product analytics. Route parameters, listing and seller IDs, search text, and account IDs are not included. The app does not offer an analytics opt-out.
• Optional app activity and content: searches, listing content, report details, saves, follows, blocks, and notification choices. These provide marketplace features, safety controls, relevant content, and enabled communications.
• Required crash and diagnostic data: Crashlytics reports app failures and App Check errors for stability analytics and security troubleshooting, without an in-app opt-out.
• Required device or app identifiers: Firebase and Crashlytics installation identifiers support crash measurement and App Check security. Google Analytics assigns a pseudonymous app-instance ID and derives coarse location from a masked IP address to provide usage reporting. Advertising-ID collection and ad personalization are disabled. If you enable notifications, a push token also routes marketplace updates and announcements to your installation.

We do not use these categories for advertising. Section 6 explains why user-directed public listings and processing by our service providers are not reported as data sharing in Google Play.

We do not sell or rent personal information, disclose it for advertising, or allow providers to use it for their own marketing. When you choose to publish a listing, its public fields are deliberately made available to other users as explained in section 5.

The following providers receive only the information needed to operate services for us and process it on our instructions:

• Cloud hosting and managed database — running the service and storing marketplace data.
• Object storage and content delivery — storing and serving listing and profile photos, and privately storing applicant resumes for authorized recruitment review.
• Email providers — delivering verification codes and account email.
• AI moderation providers — screening listing text and photos and adjudicating possible duplicate listings. We do not opt in to programmes that use our API inputs to train general models.
• Google and Firebase — Google Sign-In, Firebase App Check with Play Integrity, Firebase Cloud Messaging, and Firebase Crashlytics, plus Google Analytics for website and app usage measurement.
• Google Play — app distribution and in-app updates.

Google Play does not classify processing by service providers or a user-directed public disclosure as data sharing. That is why our Play Data Safety label says “No data shared with third parties,” even though this section transparently identifies the providers that process data for Addiyon. We may also disclose information when legally required or necessary to protect users, rights, safety, or property.

The Android app requests only what it needs: network access, notification delivery if you allow it, and a short vibration for alerts. Choosing photos uses the Android system photo picker, which shares only the images you pick and requires no permission. You can change or withdraw the notification permission at any time in Android settings; the rest of the app keeps working if you do.

All traffic between the apps and our servers uses HTTPS. Passwords are stored only as salted hashes, sessions are server-side and revocable, the session identifier is kept in the device's encrypted secure storage, and the app attaches a Firebase App Check attestation that our servers verify to tell genuine app installs from other traffic. Uploaded images are validated, re-encoded, and stored under server-generated filenames. Access to production systems is restricted. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You can permanently delete your account from the app, on the Account screen, or from our account-deletion page, which also offers a verified support route if you cannot sign in.

Without deleting your account, you can directly delete your listings, unsave listings, unfollow or unblock sellers, and change notification preferences using the app or website. We do not currently offer a separate public request process for selective data deletion; the account-deletion page is for deleting the complete account.

Deletion removes your profile, sign-in methods, sessions, listings and their media, saved and followed data, blocked-seller records, notifications, preferences, and device tokens. Media deletion is durably queued and retried if storage is temporarily unavailable. Reports and moderation evidence may be retained for safety, fraud prevention, legal compliance, and disputes; structured account, contact, and media identifiers are removed from those retained snapshots. Server logs are kept for a limited period for security and operations. Backup copies age out through our normal backup lifecycle and are not used except for disaster recovery. Aggregate listing-view scores and popular-search counts are not maintained as per-user histories. We do not link the mobile Google Analytics app-instance ID to your Addiyon account, so account deletion does not identify and remove pseudonymous Analytics events or aggregate reports. Event-level Analytics data follows the retention setting configured for our Google Analytics property.

Job applications and privately stored resumes are scheduled for deletion after 12 months unless a shorter period is requested or a longer period is required for an active hiring process, employment, legal compliance, or a dispute. Applicants can contact us using the details below to ask about or request deletion of their application.

• View and correct your profile details in the app or on the web.
• Edit or remove any listing you have posted.
• Turn notifications on or off in the app and in Android settings.
• Block a seller to hide their listings from your view.
• Delete your account, and with it the data described in section 9.
• Contact us at the address below to ask what we hold about you or to raise a privacy concern.

Addiyon is intended for adults. Our Terms of Service require you to be at least 18 years old to create an account or post a listing. We do not knowingly collect personal information from children, and we delete such an account if we learn it exists.

We operate in Ethiopia, and some of the providers listed in section 6 process data on servers outside Ethiopia. Where that happens, the information is handled under those providers' contractual commitments to us.

We may update this Privacy Policy. If we make material changes, we will update the "Last Updated" date above and, where appropriate, notify you in the app.

For privacy questions or requests, contact us:

• Email: support@addiyon.com
• Phone: +251 940224433
• Address: Addis Ababa, Ethiopia