relli
Privacy policy
This policy explains what data Relli collects, why, who it is shared with, how long it is kept, and how you can delete it.
1. Who is responsible
Relli is a mobile marketplace app for goods and services, published by Benjamin Kashamuka, sole trader, in Kinshasa, Democratic Republic of the Congo. He is the controller of your data, reachable at [email protected] and on +243 999 520 389.
2. The data we collect
What you give us
| Data | Detail |
|---|---|
| Phone number or email address | At least one is required — it is how you sign in. A phone number is stored in international format (for example +254742362996). You may add the other later. |
| Password | Never stored in the clear: only a cryptographic hash (Argon2) is kept. We cannot read it. |
| Profile | Username, display name, bio and profile photo, if you add one. |
| Posts | Videos, photos, text added over the video, hashtags, and any attached listing (title, description, price, category, city). |
| Private messages | Text, photos and voice notes exchanged in messaging. |
| Reports and blocks | The content or account reported, the reason chosen, the date. |
What your use creates
- Your interactions: comments, likes, saves, follows, shares, post views.
- Technical data: device type and operating system, IP address in our server logs, and your device's notification token if you allow notifications.
- Your sign-in sessions, to keep you signed in and let you sign out.
Location
We never store your precise location. If you allow location access, it is used only to pre-fill the city of a listing. Only the city name and its approximate centre are stored with the post — never your phone's coordinates. You can refuse the permission and choose the city by hand.
What we do not do
- We process no payments: the app has no checkout, no wallet, no mobile money and no card payments. We therefore collect no banking or financial data, no account numbers and no transaction history. Buyers and sellers agree and settle directly between themselves, outside the app.
- We do not sell your data.
- We use no ad network and no third-party tracker in the app.
- We do not read your address book.
3. What it is used for
- Creating and securing your account — sending the verification code by SMS or email, signing you in, resetting your password, detecting abuse.
- Running the service — showing the feed, hosting and delivering your videos and photos, passing on your messages, managing your listings.
- Showing you relevant content — surfacing listings from your city and the categories you browse.
- Notifying you — notifications for messages, comments and follows, if you have accepted them. You can turn them off at any time in your phone's settings.
- Protecting the community — handling reports, applying blocks, suspending accounts that breach the terms of use.
- Complying with the law — responding to lawful requests from the competent authorities.
4. Who it is shared with
What is public is public by nature: your username, display name, photo, bio, posts and comments are visible to anyone using Relli, including without an account. Your phone number and email address are never public and are never shown to other users.
To run the service we use technical providers who process data on our behalf, and only on our instructions:
| Provider | Role | Data involved |
|---|---|---|
| ClickSend | Sending verification SMS | Phone number, one-time code |
| Resend | Sending verification email | Email address, one-time code |
| Cloudflare | Hosting and delivery of videos, images and this website | Videos, photos, IP address |
| Supabase | Database | Account, posts, messages, interactions |
| Fly.io | Application servers | All requests to the service |
| City suggestions when publishing a listing | The city search text only | |
| Expo, Apple, Google | Delivering notifications | Device notification token, message title |
We may also pass data to the competent authorities where the law requires it, or where it is necessary to report a serious offence.
5. Where it is hosted
Our servers and our database are hosted in the European Union (Frankfurt and Paris). Using Relli therefore involves a transfer of your data outside your own country, to providers subject to the European data protection framework. Videos and images are delivered by a global network so that they load quickly across Africa.
6. How long we keep it
- Your account and your content — for as long as your account exists.
- Deleted account — deletion from the app immediately deactivates and hides your account, then permanently erases your data after 30 days. Sign back in before the end of that period to restore everything.
- Verification codes — valid for 5 minutes, erased within 48 hours.
- Reports and moderation decisions — kept after the content concerned is removed, for as long as needed to prevent a banned account from re-registering and to respond to the authorities.
- Technical logs — kept for a few weeks for diagnostics and security.
7. Your rights
At any time you can:
- View and correct your information — Profile → Settings (username, display name, bio, photo).
- Delete your posts, comments and messages individually, or your whole account — Profile → Settings → Delete my account.
- Obtain a copy of your data, or object to a processing, by writing to [email protected].
- Withdraw a permission (location, camera, microphone, photos, notifications) in your phone's settings.
We answer requests within 30 days. To verify your identity, we may ask you to write from the number or email address associated with the account.
8. Security
All traffic between the app and our servers is encrypted (HTTPS). Passwords are hashed with Argon2 and never stored in the clear. The app never connects directly to the database: it goes through our server, which checks every access. No system is infallible; if a data breach were to affect your information, we would tell you.
9. Moderation and illegal content
Moderation is responsive: content is not screened or analysed before it is posted. We use no system that automatically judges nudity, violence or the appearance of the people in a video.
Instead, every post, comment, message and profile can be reported from the app, and our moderation team acts on those reports — removing content, suspending accounts, and passing files to the competent authorities where warranted. Reports involving a minor are handled before all others. Fraud, counterfeits and prohibited content are handled the same way.
10. Minors
Relli is for people aged 18 and over. We do not knowingly collect data concerning a minor. If you believe a minor has created an account, write to us: we will delete it along with their data. See also our child safety standards.
11. Cookies
This website (relli.app) sets no cookies and uses no analytics. The mobile app uses no advertising cookies: it stores only your sign-in session and your display preferences, on your phone.
12. Changes
This policy may change along with the service. The date of the last update is shown at the top of the page. Where a change is significant, we will tell you in the app before it takes effect.