Privacy Policy

Effective date: 2026-03-05

This Privacy Policy explains how Yatolla (“we”, “us”, “our”) collects, uses, shares, and protects information when you use the Yatolla mobile application and related services (the “Service”).

1) What Yatolla does

Yatolla is a digital platform for advertising and discovering:

• properties for rent/lease,
• transport vehicles for hire,
• financial products from multiple financial institutions,
• quick jobs and worker profiles (informal and simple skilled workers),
• business directory listings, recommendations, vacancies, and tenders,
• smart shopping views for comparing prices and budgeting.

2) Information we collect

A. Information you provide

• Account information: name (optional), phone number (required if you use phone verification), and other details you choose to add.
• Listings and content: property/vehicle/business details, job posts, worker profile details, vacancy/tender information, messages, photos, and any other content you submit.
• Support communications: messages you send to customer support.

B. Information collected automatically

• Device and app data: device identifiers, app version, crash logs, performance data, and diagnostic events.
• Usage data: interactions with features (e.g., viewing listings, saving items, comparing prices, creating posts).
• Approximate location (optional): if you enable device permissions, we may use it to improve local discovery. You can disable it in your device settings.

3) Phone verification and SMS (Firebase Authentication)

If you choose (or are required) to sign in using a phone number, we use Firebase Authentication (a Google service) to send an SMS one-time verification code and to validate the code.

• What we use it for: account creation, sign-in, account recovery, and preventing spam or abuse.
• What is processed: your phone number, verification codes, and authentication metadata (e.g., timestamps, device signals used to prevent fraud).
• SMS delivery: messages may be delivered using third-party telecom/SMS providers as part of Firebase’s service.
• Fees: your mobile carrier may charge SMS/data fees.

4) How we use information

• Provide and operate the Service: create accounts, publish and display listings, and enable discovery and comparisons.
• Safety and integrity: prevent fraud, spam, and abuse; enforce our Terms.
• Improve the Service: analytics, troubleshooting, feature improvements, and user experience optimization.
• Communications: send service-related notices (e.g., verification messages, security alerts, policy updates).
• Legal compliance: comply with applicable laws and lawful requests.

5) How we share information

We may share information in the following cases:

• With service providers: hosting, analytics, security, and authentication providers (including Google Firebase) that help us operate the Service.
• With other users: information you choose to publish (e.g., listings, business directory info, worker profile details) may be visible to others based on your settings and what you post.
• For legal reasons: to comply with law, enforce agreements, or protect rights, safety, and security.
• Business transfers: if we are involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction.

We do not sell your personal information.

6) Data retention

We keep information as long as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion as described below, subject to legal and operational requirements.

7) Your choices and rights

• Account updates: you can update certain profile details in the app (where available).
• Permissions: you can enable/disable optional permissions (like location) in your device settings.
• Access / deletion: you can request access to or deletion of your personal data by contacting us.

8) Security

We use reasonable administrative, technical, and organizational safeguards designed to protect information. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

9) Children’s privacy

The Service is not intended for children under the age of 13 (or the age required by local law), and we do not knowingly collect personal information from children.

10) International transfers

Your information may be processed in countries other than your own, including where our service providers (such as Firebase) operate. We take steps designed to ensure appropriate safeguards where required by law.

11) Google API Services User Data Policy (if applicable)

If our Service uses or transfers information received from Google APIs, our use and transfer of that information will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

12) Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the effective date above.

13) Contact us

If you have questions or requests about privacy, contact us:

• Email: support@indabukotechcrafts.com
• Company/Owner: Indabuko Tech Crafts
• Address: Royal Science & Technology Park, Phocweni, Manzini
• Country/Region: Eswatini