Privacy Policy — Dalili
Last updated: 2 October 2026
This policy explains what personal information the Dalili mobile application collects, why it is collected, how it is used, and what choices you have.
Dalili is operated by Fekrapps, a business registered in Algeria (registre de commerce no. 109304090209124126). Fekrapps is the data controller responsible for the information described here.
For any question about your personal data, contact privacy@dalili.app.
1. What Dalili is
Dalili is a directory of local businesses and service providers in Algeria. Customers can search for businesses, read and write reviews, and send virtual gifts. Business owners can create listings, respond to reviews, promote their business, and receive gifts that can be converted into money.
2. Information we collect
2.1 Information you give us
When you create an account
- Your mobile phone number (Algerian numbers only)
- A username you choose, which is permanent and publicly visible
- Your password, which is stored in an encrypted form we cannot read
- Your wilaya
- Confirmation that you are 18 or older and accept our Terms
If you create a business listing
- Business name, category or categories, wilaya, and contact phone number
- An optional description and optional photographs
- An optional indication of the service provider's gender, where relevant to the service
If you write a review
- A star rating and written text, both publicly visible alongside your username
If you buy coins, a subscription, or promotion
- The payment reference you enter after making a BaridiMob transfer
- We do not collect or store your card details, banking credentials, or BaridiMob login. Payment is made directly through BaridiMob; we only see the reference you tell us about.
If you request identity verification (KYC)
Identity verification is optional. It is required only if you wish to withdraw money you have received through gifts. If you request it, we collect:
- Your first and last name
- Your date of birth
- Photographs of the front and back of your national identity card
- A photograph of yourself (selfie)
- A photograph of your Algérie Poste CCP document
- Your BaridiMob account details
These photographs must be taken with the camera inside the app at the time of submission. Existing images from your device gallery cannot be used.
2.2 Information collected automatically
- Device token for notifications, so we can send you push notifications. You can disable notification types individually in the app, or turn off notifications entirely in your device settings.
- Technical records of verification codes, meaning the phone number and time of each SMS code request and each attempt to enter one. These exist to prevent abuse and to limit the cost of fraudulent requests. The codes themselves are generated and held by our SMS provider, not by us.
- Records of your transactions within the app: purchases, gifts sent and received, promotions bought, and withdrawals requested.
We do not collect your location, your contacts, your browsing activity outside Dalili, or any advertising identifier.
3. Why we use your information
| Purpose | Information used |
|---|---|
| Creating and securing your account | Phone number, password, username |
| Confirming your phone number is yours | Phone number, verification code records |
| Showing your listing and reviews to other users | Business details, photos, reviews, username |
| Showing you businesses relevant to your area | Wilaya |
| Processing coin purchases, subscriptions, and promotions | Payment reference, transaction records |
| Confirming your identity before paying out money | KYC documents |
| Sending you notifications you have not disabled | Device token, notification preferences |
| Preventing fraud, abuse, and spam | Verification code records, transaction records, reports |
| Responding to reports of inappropriate content | Reports, the reported content |
4. What other people can see
Publicly visible to anyone using Dalili, including people without an account:
- Your username
- Your wilaya
- Reviews you have written, with your rating and text
- Any business listing you create, including its photos, description, and contact number
- Badges on your business, such as the verified checkmark or subscription tier
Visible only to you:
- Your phone number
- Your coin balance and transaction history
- Your notification preferences
- Everything you submit for identity verification
Never visible to other users: your identity documents, your date of birth, your BaridiMob details, and your password.
If you create a business listing, the contact phone number you provide on that listing is public by design, so that customers can reach you. This may be the same number you use to sign in, or a different one.
5. Who we share information with
We do not sell your personal information, and we do not share it for advertising.
We use the following service providers, each of which processes only what is necessary for its function:
| Provider | What it handles | Where |
|---|---|---|
| Supabase | Our database, file storage, and account authentication | Ireland (European Union) |
| smssak | Sending SMS verification codes | Algeria |
| Google Firebase | Delivering push notifications | United States |
| Resend | Sending administrative emails to us | United States |
Your data is stored primarily in the European Union. Push notification delivery and our internal email notifications involve providers based in the United States.
We may disclose information to Algerian authorities where we are legally required to do so, or where we have a reasonable belief that it is necessary to investigate fraud or a serious violation of our Terms.
6. How long we keep information
Identity verification documents are deleted from our systems once your verification has been reviewed. A record that you were verified is kept, but the documents themselves are removed.
Your account information is kept while your account exists. If you delete your account, your listings are hidden immediately and your account is marked for deletion after thirty days. Reviews you have written remain visible but are no longer attributed to you — they appear as written by a deleted user, so that businesses do not lose their rating history.
Transaction records are kept after account deletion where we need them for financial and legal records.
Verification code records are automatically deleted after seven days.
7. Your choices
- Change your information. You can update your name, wilaya, and business details at any time in the app. Your username cannot be changed once chosen.
- Control notifications. Each type of notification can be turned on or off individually in your profile.
- Delete your account. You can delete your account from your profile screen. You can also request deletion by writing to privacy@dalili.app, which is useful if you no longer have the app installed or no longer have access to your phone number.
- Skip identity verification. It is entirely optional unless you want to withdraw money.
8. Security
Passwords and verification PINs are stored in an encrypted form that cannot be reversed. Access to the database is restricted so that users can only read and modify their own information. Identity documents are stored with no public access and can be seen only by the administrator.
No system is perfectly secure, and we do not claim otherwise. If we become aware of a breach affecting your personal data, we will inform you.
9. Children
Dalili is not intended for anyone under 18. You must confirm that you are 18 or older to create an account. If we learn that an account belongs to someone under 18, we will remove it.
10. Changes to this policy
If we change this policy, we will update the date at the top and, where the change is significant, notify you within the app.
11. Contact
Questions about this policy or your personal data: privacy@dalili.app
Fekrapps, Algeria
Registre de commerce: 109304090209124126