Privacy Policy

To operate the FancyFootWear wholesale platform, we collect several categories of information when you register, browse, communicate, or transact with us.

Account & Identity Information

• Full name
• Email address
• Mobile phone number
• Business or shop name
• City & region
• Account password (hashed)
• Profile photo (if provided)
• Referral / invite code used

Transactional & Order Information

• Products browsed & ordered
• Order quantities & totals
• Order status & history
• Cart contents
• WhatsApp inquiry records
• Payment method details you add (bank, account number, holder name)

Communication & Collaboration Data

Our platform includes real-time audio and video call features (powered by Agora RTC) and in-app messaging. When you use these features:

• →Audio and video streams are transmitted in real time. We do not persistently record or store call content unless explicitly stated.
• →Chat messages and product inquiries sent within the app are stored in our database to enable order coordination.
• →Call metadata (duration, participants, timestamps) may be retained for service quality purposes.

Invite & Referral Data

• →When you generate an invite link, we record the invitee's phone number and name you provide, the invite code, creation timestamp, and whether the code was used or expired.
• →This data is used solely to manage access and track referrals.

Device & Technical Information

• Device type & OS version
• App version
• IP address
• Browser / WebView type
• Crash & error logs
• Session timestamps

We use the information we collect for the following legitimate business purposes:

Platform Operations

• →Creating and managing your wholesale account and authentication
• →Displaying product catalogues, processing orders, and tracking order status
• →Enabling live audio/video product consultations between buyers and suppliers
• →Managing the invite-only access system and referral tracking
• →Storing and displaying your saved payment methods for order settlement instructions

Communication

• →Sending transactional notifications about your orders
• →Responding to inquiries you initiate via WhatsApp or in-app messaging
• →Sending important service announcements and policy updates

Platform Improvement & Analytics

• →Diagnosing technical problems and improving app performance
• →Understanding which product categories and features are most used
• →Personalising product recommendations and category displays

Safety & Fraud Prevention

• →Detecting and preventing unauthorised access or account abuse
• →Verifying invite codes and managing access control
• →Investigating disputes and ensuring fair trading practices

Advertising

Our mobile app may display banner advertisements served by Google AdMob. These ads help us offer a free-to-use platform for our wholesale community. Ad display is contextual (based on the page you are viewing), and ad networks may use device identifiers for frequency capping. See Section 7 for more details.

We share your information only in the limited circumstances described below:

With Other Platform Users

• →Sellers & Suppliers: When you place an order or initiate a product inquiry, the seller sees your name, phone number, city, and order details necessary to fulfil your request.
• →Invitees: When you generate an invite link, the platform displays your name (as the referrer) to the person you invited during their registration.

With Service Providers

We engage trusted third-party service providers who process data on our behalf, under strict confidentiality agreements:

Each provider is listed in detail in Section 7 (Third-Party Services).

For Legal Reasons

• →When required by Pakistani law, court order, or lawful government request
• →To protect the rights, property, or safety of FancyFootWear, our users, or the public
• →In connection with fraud investigations or to enforce our Terms of Service

Business Transfers

In the event FancyFootWear undergoes a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you via in-app notice or email before such a transfer occurs and before your data becomes subject to a different privacy policy.

Protecting your information is a core responsibility we take seriously. We implement industry-standard technical and organisational safeguards:

• →Encryption in Transit: All data transmitted between your device and our servers is encrypted using HTTPS/TLS.
• →Firebase Security Rules: Our Firestore database uses rule-based access control, ensuring users can only read and write data they are authorised to access.
• →Authentication: We use Firebase Authentication, which handles password hashing and secure session management. We support re-authentication before sensitive changes (e.g., password updates).
• →Invite-Only Access: The platform is not open to the general public. New users must be invited by an existing verified member, reducing exposure to bad actors.
• →Call Privacy: Live calls via Agora RTC use token-based channel authentication, preventing unauthorised parties from joining your sessions.

We retain your personal information only as long as necessary for the purposes described in this policy, or as required by law.

• →Active Accounts: Your profile, order history, and associated data are retained for the lifetime of your account.
• →Deleted Accounts: Upon account deletion, personal identifiers (name, phone, email) are removed within 30 days. Anonymised transactional records (order counts, product categories) may be retained for up to 2 years for business analytics.
• →Invite Records: Pending and expired invites are automatically purged 90 days after their expiry date. Used invites are retained as referral records for 2 years.
• →Call Metadata: Call logs (duration, timestamps) are retained for 90 days then deleted. Call audio/video is not stored.
• →Legal Hold: If data is subject to a legal obligation or active dispute, we may retain it beyond the periods above until the matter is resolved.

You have meaningful control over your personal information. The following rights are available to all FancyFootWear users:

To exercise any of these rights, contact us using the details in Section 11. We will respond within 30 days. We may need to verify your identity before fulfilling certain requests.

Our platform integrates several third-party services to deliver its features. Each operates under its own privacy policy:

Google Firebase (Authentication & Database)

• →Purpose: User authentication (sign-up, login, password management), real-time database storage (products, orders, chats, invites), and app configuration.
• →Data shared: Email address, hashed password, user ID, all app data you create (orders, messages, etc.).
• →Data location: Google servers (may include servers outside Pakistan). Firebase follows Google's data processing agreements.
• →Privacy policy: firebase.google.com/support/privacy

Agora RTC (Live Audio & Video Calls)

• →Purpose: Powering real-time video and audio product consultation calls between platform users.
• →Data shared: Audio/video streams during active calls, device network information, call channel tokens. Agora does not store call content by default.
• →Privacy policy: agora.io/en/privacy-policy

WhatsApp / Meta (Product Inquiries)

• →Purpose: When you tap "Inquire via WhatsApp," you are redirected to WhatsApp with a pre-filled message. This opens the WhatsApp application on your device.
• →Data shared: The interaction happens within the WhatsApp app and is subject to Meta's privacy policy. We do not receive or store WhatsApp message content.
• →Privacy policy: whatsapp.com/legal/privacy-policy

Google AdMob (In-App Advertising)

• →Purpose: Serving banner advertisements within the mobile app to support our free platform.
• →Data shared: AdMob may collect device advertising identifiers (GAID/IDFA), IP address, and app usage signals to serve and measure ads. Ads are only shown on the home page when you are logged in; they are hidden on auth, invite, and chat screens.
• →Opt-out: You can limit ad tracking in your device settings (Android: Ads → Reset Advertising ID / Opt out; iOS: Privacy → Tracking).
• →Privacy policy: policies.google.com/privacy

We are not responsible for the privacy practices of these third-party services. We encourage you to review their policies directly.

Our platform is delivered as a web app and uses browser storage mechanisms to function properly.

What We Use

• →Firebase Authentication Tokens: Secure session tokens stored in browser local storage / IndexedDB to keep you logged in across sessions. These are strictly necessary for the app to function.
• →UI Preferences: Settings like your preferred language (English/Arabic) and product layout view are saved locally on your device to improve your experience.
• →AdMob Cookies: Google AdMob may set cookies or use device identifiers for ad measurement when using the mobile app version. These are subject to Google's cookie policy.

We do not use third-party tracking cookies for our own analytics beyond what Firebase Analytics provides automatically.

Your Choices

You can clear local storage data by clearing your browser cache or app data in your device settings. Note that doing so will log you out of the platform.

FancyFootWear is a business-to-business wholesale platform intended exclusively for adults operating or working within a commercial retail or reseller capacity.

We do not knowingly collect personal information from anyone under the age of 18. Our invite-only registration process is designed to verify that new members are legitimate business operators.

If you believe a minor has registered on our platform, please contact us immediately using the details below. We will promptly investigate and, if confirmed, delete the account and all associated data.

We may update this Privacy Policy from time to time as our platform evolves or as legal requirements change. When we make material changes, we will:

• →Update the "Last Updated" date at the top of this page
• →Display a prominent in-app notification informing you of the change
• →For significant changes, we may request your re-acknowledgement before you continue using the platform

Your continued use of FancyFootWear after a policy update constitutes your acceptance of the revised terms. If you disagree with any changes, you have the right to delete your account before the new policy takes effect.