Privacy Policy
Effective August 5, 2026
Vendo is a real estate marketplace app for Lebanon, operated by Hiba Mahfoud. This page explains what information the app collects, why, and how you can control or delete it.
Information we collect
Account information. When you create an account, we collect your email address and password. Your password is handled by Firebase Authentication — we never see or store it in plain form. You may optionally add a display name and phone number to your profile.
Listing content. If you post a property, we collect and publicly display its address, city, price, bedroom/bathroom count, square footage, description, contact phone number, and any photos you upload.
Device and usage information. We use Firebase Cloud Messaging to deliver notifications (such as updates on your listing or a daily digest), which requires a device push token. We use Firebase Analytics to understand overall app usage — screens viewed, searches performed, listings viewed, sign-ups — in aggregated form.
Photo access. When you attach a photo to a listing, the app asks for access to your device's photo gallery solely so you can pick an image to upload. We don't access your photos for any other purpose.
How we use it
- To create and secure your account
- To display your listings to people browsing the app
- To let interested buyers or renters reach you using the contact number you chose to publish
- To notify you about your listings or relevant app activity
- To understand usage patterns and improve the app, using aggregated analytics
How we share it
Listing details you choose to publish — including the contact number on that listing — are visible to other people using the app; that visibility is the purpose of posting a listing. We do not sell personal information to third parties.
We rely on Google Firebase (Authentication, Cloud Messaging, Analytics) to run the app. Data handled by Firebase is subject to Google's privacy practices.
What we retain, and for how long
We keep your account and listing data for as long as your account stays active.
While your account is active
- Account credentials and profile
- Listings you've posted, including photos
- Your favorites and saved searches
After a deletion request
- Removed within 30 days (see below)
- Aggregated analytics may remain in anonymized form
- Anything we're legally required to retain
Account & data deletion
You can ask us to delete your Vendo account and everything tied to it, at any time — you don't need to still have the app installed.
How to request deletion
- Email dev.hibamahfoud@gmail.com from the address on your Vendo account.
- Use the subject line “Delete my account”.
- Include the email your Vendo account is registered under, if different from the one you're writing from.
We'll confirm receipt and complete the deletion within 30 days. This permanently removes your login, profile, and every listing you've posted.
Email a deletion request →Children's privacy
Vendo is not directed at children under 13, and we do not knowingly collect personal information from anyone under 13.
Security
We rely on Firebase Authentication and encrypted (HTTPS) connections to protect your information in transit and at rest. No method of transmission or storage is completely secure, but we work to keep your data protected.
Changes to this policy
If this policy changes, we'll update the effective date at the top of this page. Material changes will also be noted in the app.
Contact
Questions about this policy or how your data is handled? Reach us at dev.hibamahfoud@gmail.com.