• Account: first and last name, username, email address and password (stored only as a one-way hash).
• Profile (optional): photo, cover, bio, gender, date of birth, country, mobile number, social media links and contact details you choose to show.
• Identity verification: the document type and the images you upload (national ID, passport or driving licence, a selfie holding the document and a photo of the document next to a screen showing POWER Family). See the Verification Policy.
• Marketplace: listings, photos, ownership-proof screenshots, offers, bids, buyer requests, comments, likes and saved listings.
• Deals: deal-room messages, signed declarations, handover records, payout details (method and account) and transfer screenshots.
• Payments to POWER Family: the wallet number or InstaPay account you paid from, sender name, transaction ID and the receipt screenshot.
• Community features: Academy posts and answers, Fraud Registry reports and evidence, appeals, registration appeals, content reports, POWER of Good donations (amount, sender number and screenshot), Ideas & Issues posts and Support tickets.

Location and camera data (EXIF) are removed from profile photos, covers, listing, service, giving and community images. Private proofs are stored as uploaded.

• Session and security cookies (see the Cookie Policy).
• Your IP address on sign-in and registration attempts (rate limiting), when you sign a deal declaration and when you start a payment. We also record the browser you registered with.
• Activity needed to run the site: notifications, profile visits, listing views, likes and votes (each counted once per member), and audit records of team actions.
• Your activity log (which settings you changed, never the values) and when you last changed your name (once every 30 days).
• Attempts blocked by the offensive-language filter (the first 200 characters and the IP address).
• A fingerprint of your profile photo, to stop impersonation.
• Advertising and personalisation: which sponsored listings were shown to you, whether you saw or clicked them (with a one-way hash of your IP address and browser, never the raw values), your interest profile built from your views, reactions, comments, saves, offers, purchases and searches, and the listings you marked "Not interested".

If someone tries to sign up with your email, we email you instead of telling them the account exists.

• To run your account, the marketplace, deal rooms and payments.
• To keep members safe: identity checks, fraud prevention, duplicate-receipt detection, moderation and dispute decisions.
• To calculate the Trust Score, rankings, badges and the price index.
• To personalise the marketplace and choose which sponsored listings to show you, and to measure them for advertisers (see the Advertising Policy).
• To send you notifications inside the site and account emails such as password resets.
• To comply with the law and answer lawful requests from Egyptian authorities.

Optional emails: the weekly digest from people you follow (Fridays; it includes one sponsored listing) and POWER of Good reminders. Both are on by default, and you can turn them off in Settings or with the unsubscribe link. Security and account emails cannot be turned off.

We do not sell your personal data, and we do not run third-party advertising trackers.

• Public profile information is visible to other members. Your email, phone number and date of birth are hidden from other members unless you choose to show them; gender and country are shown unless you hide them.
• Deal rooms are visible only to the buyer, the seller, the middleman who owns the deal and the team. Login details handed over in a deal are encrypted and shown only to the person receiving them.
• Identity documents, payment receipts, donation screenshots, private Fraud Registry documents and listing ownership proofs are stored on private storage that is not reachable from the web. Only you and authorised team members can open them.
• The identity of a member who files a content report or a Fraud Registry report is not shown to the reported person.
• VIP members can see other members' followers and following lists. Profile visits are recorded only on VIP members' profiles. A VIP may choose to hide their own profile visits.
• Service providers: the site is hosted on servers we control. Live currency rates are fetched by our server from a public rate service; no personal data is sent. Google Fonts provides the Inter, Roboto and IBM Plex Sans Arabic fonts and emoji images, and cdnjs.cloudflare.com provides icons on some pages; your browser connects to them, which shares your IP address with them as part of a normal web request.

We keep personal data only as long as we need it, then delete or anonymise it automatically every night:

• Sign-in records (time, IP address, browser, approximate location): successful sign-ins for 12 months, failed attempts for 90 days. A device that is still signed in is kept until it signs out.
• Sessions end after 120 minutes of inactivity unless you ticked "Remember me"; expired sessions are deleted daily.
• IP addresses and browser details recorded at registration, on payments and in team records: kept 12 months, then removed (we keep only the country). The IP address on a signed deal declaration is kept with the deal as dispute evidence.
• Browsing traces: the listings and topics you opened and profile visits for 90 days (we keep only the totals used for badges); your recent member searches for 12 months or until you clear them; the words you search for in the marketplace for 90 days (not recorded at all if personalisation is off); your activity log for 12 months.
• Notifications: 90 days after you read them; unread ones for 12 months.
• Follow alerts and digest events: 90 days. Blocked offensive-language attempts: 12 months.
• Ad delivery records: 180 days (anonymous daily totals are kept).
• Email codes: deleted 24 hours after they are used or expire. Sign-ups whose email code was never confirmed are not accounts: their details are deleted automatically after 24 hours.
• Identity documents: once the team approves or rejects the verification, the images are moved to an encrypted archive that only POWER Family administrators can open (every opening is logged), and kept to prevent fraud and to answer legal requests — also after your account is deleted. The verified full name, ID number, address and date of birth that the team transcribed are kept encrypted until your account is deleted.
• Login details shared in a deal handover: erased 14 days after the deal is completed, cancelled or refunded.
• Community membership proofs: deleted when the request is decided or replaced.
• Support tickets: 2 years after they close. Team moderation records: 5 years.
• Deals, deal chats, declarations, receipts, payments, penalties, reviews, reports, moderation and Fraud Registry records: kept for the life of your account and for up to 5 years after the record is closed, as financial, dispute and safety records (Egyptian commercial and tax rules require financial records to be kept for 5 years).
• Unpaid payments expire after 24 hours.
• Server logs are kept for 14 days and database backups for 30 days.
• Other account data (profile, listings, posts and comments) is kept while your account exists. If you delete your account, it is deactivated at once and anonymised after 30 days (see section 7).

Passwords are hashed, sensitive deal secrets are encrypted, private files are kept off the public web, and the site uses rate limits, security headers and team-only access controls. No method is perfect, so please use a strong, unique password.

• You can view and edit your profile and choose which details (email, phone, date of birth, gender, country) other members can see in Settings at any time.
• You can turn off personalisation in Settings › Privacy.
• You can ask the team for a copy of your data or a correction, and you can delete your account yourself in Settings › Delete account. The account is deactivated at once and deleted after 30 days (sign in before then to cancel): your name, email, phone number, photo, contacts and the transcribed identity details are removed. The identity document images stay in the encrypted administrators-only archive to prevent fraud. Some records (completed deals, payments, penalties, reviews, comments, moderation and Fraud Registry decisions) are kept under "Deleted member" where needed for safety, disputes or the law.
• You can't delete your account while you have an open deal, payment, auction, penalty or commission. Sign-in records are kept until they expire under the normal rules.
• Requests are handled under the Egyptian Personal Data Protection Law (Law No. 151 of 2020).

• Each time you sign in (and each failed attempt on your account or password reset) we record the time, the IP address, the browser and device type (from your browser's user agent), an approximate location worked out from the IP address (country and city), and whether it succeeded. A random cookie recognises your browser so we can tell you about sign-ins from a new device.
• While you are signed in, your session (IP address, browser and last activity time) is stored on our servers.
• To estimate the location, our server sends the IP address (and nothing else) to the ipwho.is IP-location service; results are cached for 7 days.
• You can see where you are signed in and your sign-in history in Settings › Security & Logins, where part of each IP address is hidden. You can sign out any device from there. We alert you inside the site and by email about sign-ins from a new device or location and about repeated failed attempts.
• After 30 wrong passwords in an hour, sign-in to your account is paused for up to 1 hour, but only from browsers that have not signed in to it before. Resetting your password lifts the pause and signs out every device.
• The team can see full IP addresses and sign-in history, and which other accounts used the same IP address or browser, including warnings shown to the team and the deal's middleman when the buyer and the seller of a deal used the same device or IP address in the last 30 days. We use this only to protect accounts and to detect fraud and duplicate accounts.
• Sign-in records are deleted automatically after 12 months (failed attempts after 90 days). Session records are deleted when the session expires or you sign out.

Contact the team from inside your account through Support (/support). We will update this policy when our practices change and show the new date above.