Privacy Policy
Effective date: April 13, 2026
Kopilka Market ("we", "our", or "us") provides a mobile commerce application for browsing products, managing a cart, authenticating by phone number, saving delivery details, managing payment methods, and placing orders.
This Privacy Policy explains what information we collect, how we use it, when we share it, how we store it, and the choices available to users of the Kopilka Market mobile application on iOS and Android.
If you do not agree with this Privacy Policy, please do not use the app.
1. Who We Are
App: Kopilka Market
Support email: support@kplk.uz
Support phone: +998 90 340 40 00
If you have questions about this Privacy Policy or your personal data, you can contact us using the support details above.
2. Scope
This Privacy Policy applies to the Kopilka Market mobile application, related backend APIs used by the app, and app-store distribution pages for the app.
It does not apply to third-party services, websites, or payment processors that may have their own privacy policies.
3. Information We Collect
Depending on how you use the app, we may collect and process the following categories of information.
A. Account and profile information
We may collect:
- phone number
- first name
- last name
- language preference
- account identifiers returned by our backend
This information is used to create or access your account, verify your identity, maintain your profile, and provide customer support.
B. Authentication and security information
We may process:
- one-time verification codes entered in the app
- authentication token issued by our backend after successful login
- device identifier generated by the app for guest and logged-in session continuity
- device type and app session metadata
This information is used to authenticate users, protect accounts, associate guest carts with logged-in accounts, and help prevent abuse or fraud.
C. Delivery and address information
We may collect:
- saved delivery addresses
- address titles and address text
- geographic coordinates such as latitude and longitude
- delivery-related comments or instructions
- checkout description or order instructions provided by the user for the shop, courier, or packer
This information is used to calculate delivery pricing, fulfill orders, and improve order accuracy.
D. Location information
If you grant location permission, we may access your device location to help you:
- select your current location on the map
- improve address entry accuracy
- display or refine delivery destinations
- calculate delivery availability or price
You can deny location permission or disable it later in your device settings. Some location-based features may then be limited.
E. Payment-related information
When you add a card, the app may send payment-related data such as:
- card number
- card expiry date
- verification code entered during card confirmation
This information is used only to initiate or complete payment-method verification and support checkout.
The app may also display or retrieve payment method details returned by the backend, such as masked or stored card identifiers. We do not state that all payment processing is performed by the app itself; payment handling may involve our backend and external financial or payment service providers.
F. Order and cart information
We may process:
- cart contents and quantities
- order totals, delivery price, and payment method selection
- order history and order status information
- order comments or delivery instructions submitted by you
This information is used to show your cart, calculate checkout amounts, create orders, and provide order history and support.
G. Technical and device information
We may process:
- app-generated device ID
- device platform or type
- app language
- diagnostic and request metadata needed to communicate with our backend
In development builds, request and response logging may be enabled for debugging. Production handling should be reviewed separately before release.
H. Data stored locally on your device
The app stores certain data locally to function correctly, including:
- authentication token in secure storage
- device ID in persistent local storage
- limited app state needed to maintain sessions and app behavior
4. How We Use Information
We use personal and device information to:
- register and recognize your device
- enable guest cart functionality before login
- authenticate users by phone number and verification code
- link a guest cart to your account after login
- show and edit profile information
- save, edit, and use delivery addresses
- calculate delivery price and checkout totals
- add, verify, list, and delete payment methods
- create, display, and manage orders
- provide customer support
- maintain app security, integrity, and reliability
- comply with legal obligations and enforce our terms
5. When We Share Information
We may share information in the following cases:
- With service providers and processors that help us provide app functionality, such as mapping, geolocation, infrastructure, payment-related verification, analytics, security, or customer support services.
- With delivery, operational, or fulfillment partners when needed to process and deliver an order.
- With payment or financial service providers when needed to verify or support payment methods or transactions.
- With legal authorities or regulators when required by law, court order, legal process, or to protect rights, safety, and security.
- In a business transfer such as a merger, acquisition, restructuring, or asset sale, subject to applicable law.
We do not sell personal information for money.
6. Third-Party Services
The app may rely on third-party services, SDKs, platform components, or APIs, including services related to:
- maps and geocoding
- device location services
- platform app distribution and operating-system services
- payment method verification or processing support
For example, based on the current codebase, the app integrates mapping and geolocation-related services, including Yandex map functionality and Android location services. Those third parties may process information according to their own privacy policies when you use their features.
7. Legal Bases for Processing
Where applicable under local law, we process information on one or more of the following legal bases:
- performance of a contract or provision of requested services
- legitimate interests, such as app security, fraud prevention, debugging, and service improvement
- compliance with legal obligations
- your consent, including where location access or similar permissions require consent
8. Data Retention
We retain information for as long as necessary to:
- provide the app and requested services
- maintain your account and order history
- comply with legal, tax, accounting, fraud-prevention, and dispute-resolution obligations
- enforce agreements and protect our rights
Locally stored app data may remain on your device until you log out, clear app data, uninstall the app, or remove it through device settings.
9. Security
We use reasonable technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction.
However, no internet transmission or storage system is completely secure, and we cannot guarantee absolute security.
10. Your Choices and Rights
Depending on your location, you may have rights to:
- access personal data
- correct or update personal data
- delete personal data
- object to or restrict certain processing
- withdraw consent where processing depends on consent
- request a copy of certain data
You can also:
- update profile information in the app
- manage saved addresses and payment methods in the app
- disable location access in your device settings
- contact us to request support regarding your data
We may need to verify your identity before completing certain requests.
11. Children’s Privacy
The app is not intended for children under 13 unless specifically stated otherwise in the relevant store listing and product configuration.
We do not knowingly collect personal information from children in violation of applicable law. If you believe a child has provided personal data unlawfully, please contact us and we will review the request.
If your app listing is later configured to target children or mixed audiences, this Privacy Policy and the app’s data practices should be reviewed again before publication.
12. International Transfers
Your information may be processed in countries other than the country where you live, subject to applicable law and reasonable safeguards where required.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we may update the effective date above and take other steps as required by applicable law.
Your continued use of the app after an update becomes effective means you acknowledge the updated Privacy Policy, to the extent allowed by law.
14. Contact Us
If you have questions, requests, or complaints about this Privacy Policy or our handling of personal data, contact:
Kopilka Market Support
Email: support@kplk.uz
Phone: +998 90 340 40 00