Addiyon ("we", "our", or "us") runs a classifieds marketplace in Ethiopia, available at addiyon.com and as an Android app. This policy describes exactly what information the marketplace collects, why we collect it, who processes it on our behalf, and how you can delete it. It applies to both the website and the app.

Account information. Your name, email address, phone number, and an optional Telegram username. If you register with a password we store only a salted hash of it; if you sign in with Google or Facebook, we receive the provider account identifier, name, email address, and profile picture made available by that provider. If you use Telegram phone verification, we receive your Telegram account identifier and the profile details Telegram makes available, such as your name, username, and profile picture. We receive your Telegram-verified phone number only when you choose to share it for verification. You may upload a profile photo.

Listings you post. Title, description, category, price, item attributes, the locality you select from our list, the contact details you choose to publish, and the photos you upload.

Marketplace activity. Saved listings, sellers you follow, sellers you block, listings you view, searches you run, and your notification preferences and read status. Google Analytics also measures page or normalized app-screen views, sessions, app lifecycle events, and page or screen engagement. The mobile integration does not send route parameters, listing or seller IDs, search text, contact details, or an Addiyon account identifier to Google Analytics. We increment an aggregate popularity score when a listing is opened and aggregate search terms for the Popular searches list; neither is a per-user history.

Safety and moderation records. Reports you submit about a listing or a seller, the reason and details you provide, a snapshot of the reported content, and the outcome of our review.

Job applicant information. If you apply for a role, we collect your name, email address, optional phone number and professional-profile link, the note you provide, your PDF resume, the position, and application status. Applicant information is kept separate from public marketplace listings and is not published.

Device and technical information. IP address, request logs, app/device details, Firebase and Crashlytics installation IDs, Google Analytics browser client or mobile app-instance ID, push notification token, Play Integrity results, crash diagnostics, and coarse location derived by Google Analytics from a masked IP address. When mobile advertising is enabled, Google Mobile Ads also processes ad-request, device/app, Android Advertising ID when available, and ad-view or interaction information needed to select, deliver, secure, limit, and measure ads. Where allowed, AdMob may share the full IP address with eligible buyers as an auction-quality signal.

On-device storage. The app keeps a local cache of public marketplace content so browsing stays fast and works during brief connectivity loss. Your session identifier is held in the device's encrypted secure storage. The website may store a first-party Google Analytics identifier in your browser.

To be explicit, and in contrast to what a generic marketplace policy might claim, the app does not collect or process any of the following:

• Precise or background device location. The app requests no location permission. A listing's area is a locality you pick yourself from a list.
• Payment or financial data. We process no payments and integrate no payment provider. Buyers and sellers arrange payment between themselves, outside Addiyon.
• Advertising analytics or cross-app profiles. We use Google Analytics for the product-usage measurement described above, but its Android integration disables advertising-ID collection and ad-personalization signals. Google Mobile Ads separately selects and measures ads under the consent choices described in section 6, but we do not use Analytics to build cross-app advertising profiles.
• Your contacts, calendar, microphone, or camera capture. The app has no permission for these.
• Access to your whole photo library. Photos are chosen through the Android system picker, which returns only the images you select.

• Create and manage your account and keep you signed in.
• Publish, display, search, and rank listings, and let buyers contact sellers using the details a seller chooses to publish.
• Show you saved listings, followed sellers, and relevant results, and hide sellers you have blocked.
• Send transactional email and requested WhatsApp phone-verification codes, verify a phone number you choose to share through Telegram, and deliver push notifications you have enabled.
• Review listings for prohibited, fraudulent, duplicated, or unsafe content, and act on reports from users.
• Keep the service secure and available: verifying that requests come from a genuine app install, limiting abusive traffic, diagnosing crashes, and investigating incidents.
• Measure page and screen usage, sessions, and feature adoption so we can understand and improve the marketplace.
• Display, secure, limit, and measure mobile ads on reviewed, eligible English marketplace screens according to applicable consent choices.
• Evaluate job applications, contact candidates, conduct interviews, and maintain records of the recruitment process.
• Comply with legal obligations and enforce our Terms.

Every listing is screened automatically before it goes live. The listing's title, description, and photos are sent to third-party AI providers that classify prohibited or unsafe content, and we compare short numeric fingerprints of listing photos against other listings to detect duplicate reposts. A listing may be rejected by this process, and the stored rejection reason explains why. Administrators can review these decisions. This screening applies to listing content only; it is not applied to your account details, and it is not used to profile you.

Listings are public by design. Your listing content, the locality you selected, your seller display name and profile photo, and any contact details you chose to publish are visible to anyone using Addiyon, including people who are not signed in, and may be indexed by search engines. Your email address, password, session data, saved listings, followed and blocked sellers, and the reports you submit are never published. Job applications and resumes are also never published. Do not put information in a listing that you do not want to be public.

Google Play defines collection as data sent off your device, including data sent to processors that operate services for us. Under that definition, the Android app collects the categories below. Optional means you can use the marketplace without providing that category; required means the relevant collection has no in-app opt-out.

• Optional personal information: name, email address, account identifiers (including identifiers supplied by a chosen sign-in provider), and phone number for accounts, sign-in, seller contact, duplicate detection, phone verification, and account management.
• Optional approximate location and photos: a locality you select for a listing, listing photos, and an optional profile photo. Photos are also used for safety review and duplicate detection.
• Required app interactions: opening a listing records an aggregate popularity event used to rank listings. Google Analytics also records normalized screen views, sessions, app lifecycle events, and screen engagement for product analytics. Route parameters, listing and seller IDs, search text, and account IDs are not included. The app does not offer an analytics opt-out.
• Optional app activity and content: searches, listing content, report details, saves, follows, blocks, and notification choices. These provide marketplace features, safety controls, relevant content, and enabled communications.
• Required crash and diagnostic data: Crashlytics reports app failures and App Check errors for stability analytics and security troubleshooting, without an in-app opt-out.
• Required device or app identifiers: Firebase and Crashlytics installation identifiers support crash measurement and App Check security. Google Analytics assigns a pseudonymous app-instance ID and derives coarse location from a masked IP address to provide usage reporting. Analytics advertising-ID collection and personalization signals remain disabled. Google Mobile Ads may access the Android Advertising ID for ad delivery and measurement when the identifier is available. If you enable notifications, a push token also routes marketplace updates and announcements to your installation.
• Advertising data on eligible screens: when mobile advertising is enabled, Google Mobile Ads processes ad requests, device/app and diagnostic information, IP address, and ad views or interactions for ad selection, fraud prevention, frequency limiting, and measurement. Google may serve personalized, non-personalized, or limited ads according to the user's consent, region, and Google's serving rules. The app does not request Privacy Sandbox ad-targeting permissions. Where allowed, AdMob may share the full IP address with eligible buyers as an auction-quality signal.

We do not use account details, searches, saves, follows, blocks, contacts, or listing-submission data to target ads. Section 6 describes the limited advertising surfaces and the providers involved. The Play Data Safety form for an ads-enabled release must match Google's current Mobile Ads SDK disclosure and the app's actual configuration.

We do not sell or rent the personal information tied to your Addiyon account, or give that account information to advertisers for their own marketing. Eligible website pages may use advertising cookies and similar technologies, and eligible Android marketplace screens may display ads, as described below. When you publish a listing, its public fields are deliberately made available to other users as explained in section 5.

The following providers receive only the information needed to operate services for us and process it on our instructions:

• Cloud hosting and managed database — running the service and storing marketplace data.
• Object storage and content delivery — storing and serving listing and profile photos, and privately storing applicant resumes for authorized recruitment review.
• Email providers — delivering verification codes and account email.
• AI moderation providers — screening listing text and photos and adjudicating possible duplicate listings. We do not opt in to programmes that use our API inputs to train general models.
• Google and Firebase — Google Sign-In, Firebase App Check with Play Integrity, Firebase Cloud Messaging, and Firebase Crashlytics, plus Google Analytics for website and app usage measurement.
• Meta — Facebook Login on the website and Android app, and WhatsApp delivery of requested phone-verification codes. Meta provides the Facebook account details used to access your Addiyonaccount and receives the destination phone number and transactional template needed to deliver a WhatsApp code.
• Telegram — optional phone-number verification on the website and Android app. With your approval, Telegram provides the Telegram account identifier, available profile details, and verified phone number needed to link Telegram and verify your seller phone.
• Google AdSense (website only) — displaying advertisements on reviewed, eligible English guide pages when website advertising is enabled. Google and its advertising partners may use cookies, web beacons, IP addresses, and device or browser information to select, deliver, measure, and limit ads, including ads based on previous visits where consent and applicable law permit. AdSense is not used in the Android app or on marketplace listings, search results, account screens, errors, or empty-result pages. Visitors can manage or opt out of personalized advertising through Google Ads Settings (https://adssettings.google.com/) or www.aboutads.info. Where required, we ask for consent through a Google-certified consent platform before requesting personalized ads, and visitors can later change or withdraw that choice through the privacy controls it provides.
• Google AdMob (Android app only) — displaying ads on reviewed, eligible English marketplace screens. Google and participating advertising partners may process the IP address, the Android Advertising ID when available, device/app information, ad requests, and ad-view or interaction data to select ads, prevent fraud, limit ad frequency, and measure delivery. Depending on the user's region and consent choices, Google may serve personalized, non-personalized, or limited ads. Where allowed, AdMob may share the full IP address with eligible buyers as an auction-quality signal. The app does not request Privacy Sandbox ad-targeting permissions, and AdMob is not shown on Amharic or otherwise unsupported-language content, unreviewed or ineligible listings, owner/account/authentication screens, forms, errors, or empty states. Where required, Google's consent platform runs before any ad request and provides an in-app entry point to revisit privacy choices.
• Google Play — app distribution and in-app updates.

Google Play applies specific definitions to collection, sharing, service providers, and user-directed public disclosures. The Data Safety label for an ads-enabled release is completed from the current Google Mobile Ads and other SDK disclosures rather than inferred from those labels alone. We may also disclose information when legally required or necessary to protect users, rights, safety, or property.

The Android app requests only what it needs: network access, notification delivery if you allow it, and a short vibration for alerts. Choosing photos uses the Android system photo picker, which shares only the images you pick and requires no permission. You can change or withdraw the notification permission at any time in Android settings; the rest of the app keeps working if you do.

All traffic between the apps and our servers uses HTTPS. Passwords are stored only as salted hashes, sessions are server-side and revocable, the session identifier is kept in the device's encrypted secure storage, and the app attaches a Firebase App Check attestation that our servers verify to tell genuine app installs from other traffic. Uploaded images are validated, re-encoded, and stored under server-generated filenames. Access to production systems is restricted. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You can permanently delete your account from the app, on the Account screen, or from our account-deletion page, which also offers a verified support route if you cannot sign in.

Without deleting your account, you can directly delete your listings, unsave listings, unfollow or unblock sellers, and change notification preferences using the app or website. We do not currently offer a separate public request process for selective data deletion; the account-deletion page is for deleting the complete account.

Deletion removes your profile, sign-in methods, sessions, listings and their media, saved and followed data, blocked-seller records, notifications, preferences, and device tokens. Media deletion is durably queued and retried if storage is temporarily unavailable. Reports and moderation evidence may be retained for safety, fraud prevention, legal compliance, and disputes; structured account, contact, and media identifiers are removed from those retained snapshots. Server logs are kept for a limited period for security and operations. Backup copies age out through our normal backup lifecycle and are not used except for disaster recovery. Aggregate listing-view scores and popular-search counts are not maintained as per-user histories. We do not link the mobile Google Analytics app-instance ID to your Addiyon account, so account deletion does not identify and remove pseudonymous Analytics events or aggregate reports. Event-level Analytics data follows the retention setting configured for our Google Analytics property.

Job applications and privately stored resumes are scheduled for deletion after 12 months unless a shorter period is requested or a longer period is required for an active hiring process, employment, legal compliance, or a dispute. Applicants can contact us using the details below to ask about or request deletion of their application.

• View and correct your profile details in the app or on the web.
• Edit or remove any listing you have posted.
• Turn notifications on or off in the app and in Android settings.
• Block a seller to hide their listings from your view.
• Delete your account, and with it the data described in section 9.
• Contact us at the address below to ask what we hold about you or to raise a privacy concern.

Addiyon is intended for adults. Our Terms of Service require you to be at least 18 years old to create an account or post a listing. We do not knowingly collect personal information from children, and we delete such an account if we learn it exists.

We operate in Ethiopia, and some of the providers listed in section 6 process data on servers outside Ethiopia. Where that happens, the information is handled under those providers' contractual commitments to us.

We may update this Privacy Policy. If we make material changes, we will update the "Last Updated" date above and, where appropriate, notify you in the app.

For privacy questions or requests, contact us:

• Email: [email protected]
• Phone: +251 940224433
• Address: Addis Ababa, Ethiopia