Privacy policy

[company legal name], [address], the controller of your data under Egypt's Personal Data Protection Law No. 151 of 2020. For anything about your data: the contact page or info@aqartrust.com. Data protection officer: info@aqartrust.com.

Your mobile number (your identity with us), name, email and whether you are buying or selling. If you sell: the contract figures, photos of the contract and receipts, and where the unit is. If you buy: the cash and instalment you can carry and your preferences, if you choose to tell us. Your messages with the team, your enquiries, favourites, saved searches and the steps of any deal. If you install the app and allow notifications: your device's push token. If you choose to add them in Settings → Personal info: a profile picture (we remove the camera details first), gender, birthday and saved addresses with an optional map pin; only you see these, never other members or a public page.

If you choose to sign in with Google, Facebook or Apple, we receive three things from them and nothing else: your name, your email address and a fixed identifier for your account with them. We do not ask for your photo, friends, posts or any other permission, and we never post anything as you. With Apple the email may be a relay address that forwards to yours. If you sign in with an email and password, the password itself is never stored: we keep a one-way PBKDF2 hash of it that cannot be turned back into the password. You can disconnect any of these in Settings, and they are erased when you delete your account.

The pages you open, their language and time, linked to your account if you are signed in. When someone reports a listing we keep a salted hash of the IP address (never the address itself) to stop repeat reports. No advertising or third-party tracking.

The figures in the "Can I afford it?" calculator are worked out on your device and never sent to us. Units saved before you sign in, and the list of units you have opened (the "Seen" mark), stay on your device.

Signing you in, reviewing listings and documents, matching buyers to units, running transfers, the alerts you asked for, and preventing fraud. We do not sell your data or use it for advertising.

Our team. The other party to a deal learns only what the transfer needs. And service providers working for us: Cloudflare (hosting, database, files and the assistant), the SMS or WhatsApp provider that sends your sign-in code, Resend or Google (Gmail), which deliver notification emails if you gave us an address (every email has a link to stop them) and the links that confirm an address or reset a password, Google, Facebook and Apple if you choose to sign in with them, Google and Apple to deliver app notifications, Anthropic, which receives the text of a search when you type a sentence into the search box (we do not store the text itself), and OpenStreetMap, which receives your IP address when a page loads the map. Some of these run outside Egypt.

For as long as your account exists. When you delete your account we delete your data, except records of transfers that actually completed (a legal and accounting obligation), from which your name and number are removed. Sign-in codes expire within 10 minutes.

To know what we hold about you (download a copy of all of it with "Download my data" in your account settings), to correct it, to delete it (from your account settings), and to object to any use. If our answer does not satisfy you, you can complain to the Personal Data Protection Centre.

Connections are encrypted, sign-in codes and passwords are stored hashed, sessions are signed and backups are encrypted. If a breach affects your data, we tell you and the regulator within the period the law sets.