Privacy Policy

1. Who we are and what this policy covers

Akarat (عقارات) is a digital property marketplace for discovering and publishing property listings in Syria. This policy applies to the Akarat mobile app, akarat.app, and the support services connected to them.

Akarat is operated and its data is controlled by Leafer Development, registered with the Netherlands Chamber of Commerce under KVK number 87773988. Its website is leaferdevelopment.com. In this policy, “Akarat”, “we”, and “us” refer to Leafer Development.

2. Data we collect

• Account data: your verified email address, verification-code requests, session records, and an optional display name.
• Optional contact data: an unverified phone number you may add to your profile and choose to show on a listing. We never use the phone number for sign-in, verification, or account recovery.
• Marketplace content: listing details, property location, price, specifications, description, photos, videos, amenities, and listing status.
• Activity and communications: favourites, conversations and messages, sent and read timestamps, notification preferences, and listing counters such as views and saves.
• Operations and security data: IP address, request times, rate-limit and abuse-prevention records, and basic error and diagnostic logs.
• Data kept on your device: language, session token, recent searches, one listing draft, and a limited image cache. Recent searches and the draft stay on the device unless parts are uploaded when you publish.

3. Why we use data

• To create accounts and sign users in with a six-digit code sent by email, and to manage sessions securely.
• To provide search, browsing, publishing, listing management, favourites, and communication between seekers and advertisers.
• To show contact details that a listing owner chooses to make available.
• To secure the service, limit abusive traffic, prevent fraud and misuse, and diagnose failures.
• To answer support requests, comply with legal obligations, and enforce the Terms of Use.

Where laws such as the GDPR apply, our legal basis depends on the activity and may include performing our contract with you, our legitimate interests in operating and securing the service, your consent or choice, and legal obligations.

4. When we share data

We do not sell personal data. The app currently contains no third-party advertising, analytics, or crash-reporting SDKs.

We share only what is needed with processors that help operate the service: Brevo for email verification delivery, Hostinger infrastructure for the API and database, and Cloudflare R2 and Cloudflare Stream for listing media storage and delivery when the cloud media path is used. We may use an equivalent replacement and will update this policy if providers change.

We may disclose data when law requires it, to protect users and the service, or as part of a transfer of the Akarat business to another operator subject to appropriate continuing safeguards.

5. What other users can see

Active listings are public and include listing content, media, and public advertiser information. A phone number appears only when it has been added to the profile and the owner chooses to show it for that listing.

Messages are available to the two conversation participants. Do not send passwords, verification codes, financial details, or anything you do not want the other participant to receive.

6. Retention and deletion

• A verification code normally expires after five minutes. A session lasts for a rolling 90 days and can be ended by signing out.
• We keep account, listing, favourite, and conversation data while the account exists or for as long as it is needed to provide the service.
• When an account is deleted, we delete the account record, sessions, favourites, owned listings and media, and incomplete uploads. We remove the owner’s identity and contact details from unavailable snapshots kept for other users.
• A conversation attached to a listing you owned may remain in the other participant’s history in an unavailable state after your identity is removed from the listing. Conversations you started as a buyer are deleted with the account.
• Security logs and backups are kept only for operational, security, and legal needs, then deleted or overwritten through the normal rotation cycle.

7. Your choices and rights

• You can edit your display name, email, optional contact number, and notification preferences in account settings.
• You can remove favourites, delete your listings and media, sign out, and permanently delete your account in the app.
• You can also request deletion outside the app from our Delete Account page. Use the email registered to the account so we can verify ownership.
• Depending on applicable law, you may have rights to access, correct, erase, restrict, object, port data, or complain to the relevant data-protection authority.

8. Security and international transfers

We use HTTPS outside local development, store hashes of session tokens instead of raw tokens on the server, and restrict access to systems and credentials. No transmission or storage method is completely secure, so absolute security cannot be guaranteed.

Our providers may process data in different countries. Where the law requires additional safeguards for international transfers, we use the appropriate available mechanisms.

9. Children, changes, and contact

The service is intended for property seekers and advertisers and is not designed for children. If you believe a child submitted personal data without appropriate supervision, contact us so we can remove it.

We may update this policy when the service, providers, or legal requirements change. We will publish the new version here and revise the date above.

This website currently uses no optional cookies, advertising tools, or analytics, so it does not display a cookie-consent banner. We will ask for the appropriate choice before adding any technology that requires consent.