Privacy Policy

flppit is a peer-to-peer rental marketplace operated in Abu Dhabi, United Arab Emirates. We connect people who want to lend items with people who want to rent them.

Contact: support@flppit.ae

• Account data: name, email, phone number, and profile photo.
• Identity verification: Emirates ID (front and back photos) — collected for rental safety and fraud prevention.
• Listing data: item photos, descriptions, pricing, and item value estimates.
• Location data: GPS coordinates extracted from photos (used to set listing location and verify item handovers). Raw coordinates are never shown publicly — only the area name is displayed.
• Booking data: rental dates, amounts, and booking status.
• Communication data: messages between users on the platform.
• Payment data: processed by our payment provider (Tap Payments / Stripe / Ziina). flppit never stores full card numbers.
• Device and usage data: browser type, IP address, and pages visited (collected via analytics).
• Cookie preferences: your consent choice.

• Account data: to provide the service (contractual necessity).
• Emirates ID: to verify identity for rental safety, prevent fraud, and resolve disputes (legitimate interest + explicit consent).
• Location data from photos: to set listing locations and verify handovers (legitimate interest + consent).
• Payment data: to process rental payments (contractual necessity).
• Analytics: to improve the platform (legitimate interest).

• All data is stored on encrypted servers (Supabase with row-level security).
• Emirates ID photos are stored in a private encrypted storage bucket, accessible only to you and flppit administrators.
• Payment card details are never stored by flppit — they are processed directly by our licensed payment provider.
• Access to personal data is restricted to authorized personnel only.

• Payment processors (Tap Payments / Stripe / Ziina) — to process payments.
• Insurance providers (when applicable) — to process damage or theft claims.
• Other users: only your display name, profile photo, rating, and verified badge are visible. Your email, phone, Emirates ID, and location coordinates are never shared with other users.
• Law enforcement: if required by UAE law or court order.
• We never sell your personal data to third parties.

• Right to access: request a copy of all personal data we hold about you.
• Right to rectification: correct any inaccurate data.
• Right to erasure: request deletion of your account and all associated data, including Emirates ID photos.
• Right to withdraw consent: you can withdraw consent for Emirates ID storage at any time (this will disable your ability to book or list items).
• Right to data portability: request your data in a portable format.

To exercise any right, email support@flppit.ae. We respond within 30 days.

• We collect photos of your Emirates ID (front and back) to verify your identity before you can book or list items.
• This is required for the safety of all users on the platform.
• Your Emirates ID images are stored in encrypted private storage and are only accessed by flppit administrators for verification purposes.
• Emirates ID images are never shared with other users, lenders, renters, or any third party (except law enforcement if legally required).
• You can request deletion of your Emirates ID at any time through your account settings. Deleting your ID will revoke your ability to book or list items.
• We retain Emirates ID data for the duration of your account plus 12 months after account deletion (for dispute resolution), then permanently delete it.

• When you upload photos to create a listing or during handover/return, we may extract GPS coordinates embedded in the photo metadata (EXIF data).
• This is used to automatically detect your listing location and to verify that items are returned to the correct location.
• GPS coordinates are stored in our database but are never displayed publicly. Only the area name (e.g., "Al Reem Island") is shown on listings.
• You can disable location services on your device camera to prevent GPS data from being embedded in photos.

• We use a single cookie to remember your cookie consent preference (flppit_cookie_consent, expires after 1 year).
• We use Supabase authentication tokens stored in localStorage to keep you logged in.
• We may use analytics tools (Vercel Analytics) to understand how people use the platform. These collect anonymous usage data only.
• We do not use advertising cookies or trackers.
• We do not sell data to advertisers.

• Account data: retained while your account is active, deleted within 30 days of account deletion.
• Emirates ID: retained while your account is active, plus 12 months after deletion.
• Booking and transaction records: retained for 5 years (UAE commercial record-keeping requirement).
• Messages: retained while your account is active, deleted with your account.
• Analytics data: anonymized, retained indefinitely.

Your data is stored on servers operated by Supabase (cloud infrastructure). Data may be processed in regions outside the UAE. We ensure appropriate safeguards are in place for any international data transfers in compliance with UAE PDPL.

We may update this policy from time to time. We will notify you of material changes via email or in-app notification. Continued use of flppit after changes constitutes acceptance.

For any privacy-related questions or requests: support@flppit.ae

flppit, Abu Dhabi, United Arab Emirates

See also our Terms of Service.