Политика конфиденциальностиHome / Privacy policy

Privacy Policy

Last updated: 2026-10-10

This Privacy Policy explains what personal data Zinfurn (the website zinfurn.uz and the Zinfurn mobile apps for Android and iOS, together the "Service") collects, why, and what choices you have. The Service is operated by Asadbek Khusanov ("we", "us").

1. Data we collect

We only collect what is needed to run the store, deliver orders and keep your account secure:

Account data: username, password (stored only as a one-way hash), and — if you choose to provide them — phone number, email, full name, address and profile photo.
Sign-in data: if you sign in with Google or Telegram, we receive your Google or Telegram account ID and basic public profile (name, photo). We never receive your Google or Telegram password.
Order data: ordered items, delivery address, phone number, order status and payment status.
Content you create: listings, articles, comments, reviews, likes, follows and chat messages.
Technical data: device and browser type, app version, pages viewed, and error reports needed to fix crashes.
Push notification token: if you allow notifications in the app, we store a device token to send you order updates and price-drop alerts for items you liked. You can turn notifications off in your device settings at any time.

2. How we use your data

to create and secure your account and keep you signed in;
to process, deliver and support your orders and repair requests;
to show your public profile, listings and community posts to other users;
to answer your questions in customer support and the AI assistant;
to understand how the Service is used and to fix errors.

3. Third-party services

We share data only with the services needed to operate the Service:

Payme and Toss Payments — process payments. Card details are entered on the payment provider's pages and are never stored by us.
Firebase Cloud Messaging (Google) — delivers push notifications to the Android app.
Google and Telegram — only when you choose to sign in with them.
Groq (AI chat) — messages you type into the AI assistant are sent for processing to generate an answer.
Google Analytics and Yandex Metrica — anonymous usage statistics on the website.
Sentry — error reports that help us fix crashes.
Oracle Cloud — hosting of our servers and database.

4. What we do not do

We do not sell your personal data. We do not use your data for third-party advertising and we do not track you across other companies' apps or websites.

5. Storage and security

Data is transmitted over encrypted connections (HTTPS). Passwords are stored as hashes. Sign-in sessions use short-lived tokens and can be ended by logging out. Access to the database is restricted to the operator.

6. Data retention

We keep your account data while your account exists. When you delete your account, your personal data is removed immediately (see below). Order records may be kept in anonymised form for as long as required for accounting and legal obligations.

7. Deleting your account

You can delete your account at any time, directly in the app or on the website:

Sign in → open Profile (My Page) → My Profile.
Tap "Delete account" at the bottom of the page and confirm.
Your username, phone, email, name, address, photo, password, Google/Telegram links and active sessions are deleted, and your listings are removed. This cannot be undone.

If you cannot sign in, email [email protected] from the email linked to your account (or tell us your username) and we will delete the account within 30 days.

8. Your rights

You can view and edit your profile data at any time in My Profile. You may also ask us for a copy of your data or for its correction or deletion by emailing [email protected].