Privacy Policy

01Information We Collect

1.1 Information you provide directly

• Account information: email address, password hash for email/password accounts, sign-in provider identifiers, age and terms confirmations, and verification status.
• Profile information: name or nickname, photographs, biography, profession, education, skills, experience, industry, business type, equipment, investment budget, preferred partnership duration, and information you choose to add about yourself.
• Optional profile details can include demographic information, languages, interests, income, family or lifestyle information, and religion. Some of these details may be sensitive under local law. Only provide information you are comfortable sharing for the feature concerned.
• Identity and supporting documents: front and back identity-document images, verification decisions and rejection reasons, certificates, experience documents, and business-related files you submit.
• Communications: messages, attachments, support enquiries, and information you supply when reporting a concern or exercising a privacy right.

1.2 Information collected through use

• Activity records: likes and passes, matches, favourites, profile views, conversation participation, message timestamps and read status, and advertisement interactions.
• Location: coordinates, the location you enter, and your selected search radius, used for nearby discovery and distance calculations. Device-based location access depends on the permission you grant.
• Subscription and purchase records: plan, billing provider, product and transaction identifiers, purchase verification data, payment amount and currency, payment status, coupon usage, renewal and expiry information. Payment providers handle payment credentials; we do not require your full card number in a profile or chat.
• Operational information: request paths, response status, timestamps, performance totals, error messages, and diagnostic traces. Servers and infrastructure may process IP addresses and connection information for networking and abuse prevention. Dashboard traffic reports use aggregate request counts rather than a unique-visitor identifier.

1.3 Information from other services

If you choose Google or Apple sign-in, we receive information needed to validate that sign-in, such as a provider identifier and email address. Apple may supply a private relay email address. Apple, Google, and Stripe also provide purchase verification and subscription updates where you use their billing services.

02How We Use Your Information

We use information to operate the Service and support safe, relevant business connections. Where EU or UK data protection law applies, the applicable basis depends on the purpose and circumstances; permission is requested separately where required.

Optional information that is legally classed as sensitive requires an additional lawful condition, such as explicit consent where applicable. You can contact us about the basis for a particular use or object to processing based on legitimate interests.

03How We Share Your Information

3.1 With other users

Profile information is used to present you to potential business partners. What another user can access may depend on the feature, subscription, and access rules. Location and uploaded profile material can reveal where you live or work; do not include confidential addresses or documents in material intended for your profile. We do not promise that every profile field or location value is hidden from other users.

Messages and attachments are delivered to conversation participants. A recipient can copy or share material outside the Service. Our messaging is not described as end-to-end encrypted, and authorised access may be necessary to operate the Service, respond to a support request, or investigate abuse. Profile-view features may reveal a viewer's identity where the recipient's plan permits.

3.2 With service providers and authorised personnel

Hosting, file storage, authentication, email, and payment providers process information needed for their functions. Authorised administrators can access relevant account, profile, verification, billing, and diagnostic records for service operations. Access is restricted according to the task.

3.3 Legal obligations, business transfers, and consent

Information may be disclosed to comply with a valid legal requirement, protect rights and safety, investigate fraud, or support a business restructuring or transfer subject to applicable protections. We may also share information at your request or with consent where appropriate. We do not sell your personal information as part of our business model.

04Third-Party Services

4.1 Diagnostics and service traffic

We collect service errors and aggregate request traffic to diagnose problems and understand service demand. Error reports can contain technical context and are not guaranteed to be anonymous. We aim to omit passwords, authentication tokens, form contents, and URL query strings from monitoring records.

4.2 Advertising

Free features may display advertisements, including reward-ad flows used to unlock content. We record the related interaction or unlock activity. Premium features can include ad-free access. This policy does not claim that Equity Ally is an advertisement-free service.

4.3 Cookies and tracking choices

The web administration portal uses an essential session cookie to authenticate authorised staff. Device permissions and platform privacy controls apply to mobile features. If a feature involves tracking requiring separate permission, the relevant disclosure and consent must be presented before that tracking takes place. Third-party websites opened from the Service have their own privacy practices.

05Data Retention

Retention depends on the purpose, your account status, legal requirements, and whether information is needed to address a security incident or dispute. A code or session becoming invalid does not necessarily mean its database record is immediately deleted.

We do not promise automatic deletion of all identity images after 90 days, messages after 12 months, or every account record within a fixed period. Where data must be retained after a deletion request, we will explain the relevant reason. Backup copies may remain until their normal expiry and should not be restored to active use except where necessary.

06Data Security

We use safeguards including password hashing, authenticated access, administrator access controls, input validation, rate limiting, and restrictions on session credentials. Production access should use secure HTTPS connections. We take reasonable steps to limit unnecessary sensitive information in diagnostics.

Keep your password confidential, protect your device, and avoid sending passwords, payment credentials, or unnecessary identity documents in messages. Do not assume an uploaded file link cannot be copied or forwarded. No system can guarantee complete security or uninterrupted availability; contact us promptly if you suspect unauthorised access.

07Your Rights and Choices

7.1 Access, correction, and deletion

You can update information through the profile features available to you. To request access, correction, a copy of your information, or account/data deletion, email mrfahim31@gmail.com from your registered address. Use the subject “Equity Ally privacy request” or “Equity Ally data deletion request” and identify the request. Do not send your password or a full identity document in your initial email. We may request proportionate identity verification before acting.

7.2 EU/EEA and UK rights

Where applicable, you may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent. These rights have conditions and exceptions. We respond within the timeframe required by applicable law, normally one month for an applicable GDPR request, with notice if a lawful extension is necessary. You may complain to your local data protection authority.

7.3 California and other regional rights

Where the relevant law applies, you may request information about collection and disclosure, access or correction, deletion, and exercise applicable choices concerning sale, sharing, or sensitive information. We will not unlawfully discriminate against you for exercising a privacy right. An authorised agent may contact us, subject to verification of their authority.

7.4 Permissions and notifications

You can manage location, camera, photo access, and notification permissions in device settings. Turning off a permission can limit the associated feature. Withdrawal of consent does not affect earlier lawful processing. Essential account, security, and billing messages may still be needed to provide the Service.

7.5 Purchases and deletion

Removing the app or requesting account deletion does not necessarily cancel a store subscription. Manage renewal separately through the provider that billed you, and contact us if you need help identifying it.

08Children's Privacy

Equity Ally is intended for adults aged 18 or over. We do not knowingly offer accounts to children under 18. If you believe a child has provided personal information, contact us so we can investigate and take appropriate steps, including deleting information where required.

09International Data Transfers

We operate from Bangladesh and use service providers whose infrastructure or support teams may be in other countries. Your information may be processed outside your country of residence. We do not represent that all service data is stored in Bangladesh.

Where transfer restrictions apply, appropriate safeguards or a legally permitted transfer mechanism are required, such as an applicable adequacy decision or contractual safeguards. Contact us for details relevant to your information. Simply using the Service is not a substitute for consent where a specific transfer requires it.

10Changes to This Privacy Policy

We may update this policy as features, providers, or legal requirements change. The revised version and last-updated date will appear here. Where required, we will give additional notice or obtain fresh consent before a materially different use of your information. Please review this page periodically.

11Contact Us

For questions about privacy, data handling, or exercising your rights, contact the operator of Equity Ally:

12Apple App Store Compliance

12.1 Sign-in and device privacy

Sign in with Apple can supply a private relay address. Keep access to that address when contacting us about an Apple-linked account. Manage device permissions in iOS settings. Apple's tracking permission applies if an app performs tracking within the scope of its App Tracking Transparency rules.

12.2 Privacy information and deletion requests

The privacy information displayed in the App Store should be read alongside this policy and the disclosures for the app version you use. You can send an account or data deletion request using the contact route in section 7. Managing an Apple subscription is separate from requesting account deletion.

Apple's account-deletion guidance is available at developer.apple.com/support/offering-account-deletion-in-your-app .

13Google Play Store Compliance

13.1 Data safety and permissions

Review the Data safety information for the app version available through Google Play. Android settings let you manage permissions such as location, camera, photos, and notifications. The permissions needed depend on the feature and Android version; granting a permission does not require you to upload every accessible file.

13.2 Data deletion requests

You can request deletion without reinstalling the app by emailing mrfahim31@gmail.com with the subject “Equity Ally data deletion request” and your registered account address. We verify the request and explain any information that must be retained and why. Manage Google Play subscription renewal separately in your Google Play account.

Google Play's account-deletion guidance is available at support.google.com/googleplay/android-developer/answer/13327111 .