Privacy Policy
Last updated: 20 October 2026
DukanIQ is a marketplace that connects customers in Iraq with independent local stores, through the DukanIQ mobile app, the website at dukaniq.app and the merchant dashboard. This policy explains what we collect, why, who we share it with and the choices you have. "DukanIQ", "we" and "us" mean the operator of the platform.
1. What we collect
Account details: your name, username, phone number and password (stored only as a one-way hash). Optionally an email address, profile photo, gender, date of birth and preferred language.
Sign-in with Google or Apple: if you choose it, the provider shares your name, email address and an account identifier with us through Google Firebase.
Shopping activity: your baskets, wishlist, followed stores, orders, delivery addresses including the map pin you place, reviews and the photos you attach, product reports, return requests and support tickets.
Interests: the categories you choose when you sign up, and categories added from your orders.
For merchants: store details, staff invitations, products and their photos, delivery zones, promotions and subscription records.
Device and technical data: a push notification token, your device platform and app language, and standard server logs such as IP address, request time and app version.
2. How we use it
To run the service: create and secure your account, verify your phone number, take orders and pass them to the store, quote delivery, and send notifications about your orders.
To personalise browsing, by putting categories you are interested in first. It never hides what you searched for.
To show merchants aggregate statistics about their own store, such as views, sales and follower counts. A merchant never learns who follows their store or saves their products.
To keep the platform safe: preventing fraud and abuse, enforcing our Terms of Service and handling reports.
We do not sell your personal data and we do not show third-party advertising.
3. What stores see
When you place an order, the store that fulfils it receives what it needs to deliver: your name, phone numbers, the delivery address and pin, the items and your order note.
Reviews and their photos are public and appear with your name and profile photo.
4. Service providers
DigitalOcean hosts our servers and databases in Frankfurt, Germany.
Cloudflare serves our website and stores uploaded images.
Google Firebase provides Google sign-in and push notifications; Apple provides Sign in with Apple.
A WhatsApp messaging provider delivers the one-time codes that verify your phone number.
OpenStreetMap supplies the map shown when you place an address pin.
These providers process data only to provide their service to us.
5. Device permissions
Location is used only while you add an address, to place the pin; you can refuse and place it by hand.
Notifications tell you about your orders and offers. You can mute categories in the app's settings, except updates about your own orders.
Photos and camera are used only when you choose a picture to upload.
6. How long we keep data
We keep your account data while your account exists. Phone verification records are deleted after 30 days.
Orders are kept after an account is closed, because the store and the platform need them for accounting and to resolve disputes. They keep the details that were recorded at checkout.
7. Your choices and rights
You can view and edit your profile, addresses and notification preferences in the app at any time.
"Delete account" in the app deactivates your account immediately. To have your account and personal data permanently deleted, email support@dukaniq.app with the phone number on your account, or ask through Customer Support in the app. We complete deletion within 30 days, except for the records described above.
You can also ask us at support@dukaniq.app for a copy of your data or to correct it.
8. Security
Data travels encrypted over HTTPS, passwords are stored as one-way hashes, and access to our systems is restricted. No system is perfectly secure, so please use a password you do not use anywhere else.
9. Children
DukanIQ is not directed at children under 13, and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.
10. Where data is stored
Your data is stored on servers in Germany and may be processed by the providers above in other countries, under their own security commitments.
11. Changes to this policy
We may update this policy. We will change the date above and, for significant changes, tell you in the app before they take effect.
12. Contact
Questions and requests: support@dukaniq.app