Who we are and the scope of this policy
Drivo is an Iraqi classifieds platform for cars, real estate, and motorcycles. This policy applies to the Drivo mobile app and its public support pages. “Drivo” here refers to the app's developer and operator.
Data we process
- Account and identity: Firebase identifier, name, email, contact phone number, optional birth year, profile image, and identifiers for email/password, Google, or Apple authentication.
- Listings and public content: category, title, description, specifications, price, images, seller or dealership information, contact number, and any province, area, address, or map coordinates you choose to add.
- Location you enter: the listing or dealership location that you choose or pin manually. Drivo does not currently request background device-location permission.
- Safety and support: reports about listings, users, or dealerships; the reason and description; reporter and target identifiers; block records; review status and notes; and information you send to support.
- Notifications and device identifiers: the Firebase Cloud Messaging registration token linked to your account, notification-delivery data, and local notification inbox read state.
- Data currently stored only on your device: favorites, recently viewed listings, saved searches, comparisons, language, currency, selected region, and local notification history and preferences. These items are not sent to Drivo as user analytics, although the app may fetch the related public listing when you open it.
Drivo currently does not include a third-party advertising SDK, does not sell your personal data, and does not process payments between users.
How we use data
- Create and secure accounts and operate the features you request.
- Publish and manage listings, connect sellers with buyers, and provide search, notifications, and support.
- Operate dealership accounts, review reports, and prevent fraud and abuse.
- Resolve disputes, enforce Drivo's terms, and meet legal requirements.
We do not use this data for cross-app targeted advertising.
Public content and sharing
Information you intentionally publish in a listing—including images, description, location, seller or dealership identity, and contact phone number—is shown to Drivo users because that is the platform's core purpose. Do not publish personal information that you do not want to make public.
Service providers and storage
- Google Firebase Authentication: account authentication.
- Google Cloud Firestore: account profiles, listings, reports, blocks, dealership data, notifications, and FCM-token records.
- Firebase Cloud Messaging: push-notification registration and delivery.
- Cloudinary: processing, hosting, and deleting listing and profile images.
- Drivo's trusted server: authorizes image deletion and privileged notification operations. Service credentials are not embedded in the app.
These providers process data to supply their services to Drivo under their terms and policies, and processing may occur in countries where they operate.
Retention and limited exceptions
- Account, listing, dealership, and FCM-token data is retained while the account is active or as needed to provide the requested service.
- Favorites, recently viewed listings, saved searches, comparisons, and local notification state stay on the device until you clear them, delete through the app, clear app data, or uninstall the app.
- After deletion, we may retain reports, moderation decisions, fraud-prevention records, and the minimum security or legal evidence needed to investigate abuse, prevent repeated fraud, resolve disputes, enforce terms, or comply with law. Access is restricted, records are reviewed periodically, and they are not used for marketing to the deleted user.
- Backups or provider records may remain for a limited time under secure backup cycles or legal retention orders, then are deleted or anonymized when applicable.
Account and data deletion
You can delete your account inside the app through Account/Profile → Settings → Permanently delete account, or submit a verified web request without reinstalling the app through the Drivo account deletion page.
The in-app route deletes the active profile, related listings and images, owned dealership records and memberships, blocks, account-directed notifications, Firebase Authentication account, and local app data. It also revokes the Apple token when Sign in with Apple was used. Limited reports and security or legal records may be excepted as described above.
We verify ownership before completing a web request. Verified requests are usually completed within 30 days, and we send confirmation when finished. A web request cannot erase data that exists only on your phone; clear the app data or uninstall the app for that.
Security
We use authentication, Firebase security rules, encrypted HTTPS/TLS connections in transit, restricted service credentials, and a trusted server for sensitive operations. No internet service can guarantee absolute security. If you believe your account or data is at risk, contact us immediately.
Children's privacy
Drivo is a general classifieds platform and is not designed to intentionally collect children's data. A parent or guardian who believes a child provided personal data without appropriate authorization can contact us to request review and deletion.
Changes to this policy
We may update this policy when app services or regulatory requirements change. We publish the updated version on this page with a revised date.
Contact us
For privacy, support, or deletion requests, include only the account email or phone number needed for identification. Never send your password or a one-time sign-in code.