Privacy Policy

vidy.mg ("the app") is a mobile marketplace published by Flit Soft. It lets you browse classified ads, save the ones you like, contact the people who posted them, and post ads of your own.

This policy explains exactly what the app collects, where it is stored, who it is sent to, and how to get rid of it. Questions go to flitsoft.dev@gmail.com.

Account details. When you sign in, we receive your email address, your name and your profile picture from the sign-in provider, and store them with the account identifier that provider issues. You may add a phone number, a location and a short bio to your profile. We never see or store your password.

Ads. The title, description, price, currency, condition, category details and location you enter, the photographs you attach, and whether the ad is active. We count how many times an ad is viewed.

Contact details. The phone numbers, email addresses and messenger ids you add, with an optional label, carrier and whether the number takes WhatsApp. You choose, ad by ad, which of them are shown on that ad.

Favourites and messages. The ads you save, and the messages you exchange with another member about a particular ad.

When the app analyses an ad to suggest its details, the text of that ad is sent to OpenAI and processed by the model gpt-5-mini. The model suggests a title, a price and currency, a category and a location, and picks out any phone numbers or email addresses written in the text. The suggestions are stored with the ad.

Photographs are not sent to the AI model.

Some ads in the app are gathered from posts published in public Facebook groups dedicated to buying and selling. For those ads we store the text, photographs, price, contact details written in the post, a link to the original post and the poster's public Facebook identifier.

If one of those ads is yours and you want it removed, write to flitsoft.dev@gmail.com with a link to the ad and we will remove it.

The app contains no advertising SDK and no third-party tracking. It requests no location permission: a location on an ad is what you type. It does not use your microphone. The camera and the system photo picker hand us only the specific images you choose.

Image files are stored in Google Firebase Storage. The database only ever holds the address of an image, never the image bytes.

Everything else — your account record, ads, contact details, favourites and messages — is stored in a PostgreSQL database hosted by Supabase, in the United States (US East, N. Virginia). Our server runs on Google Cloud in the United States.

Authentication is handled by Google Firebase Authentication.

Traffic between the app and our servers is encrypted in transit with HTTPS.

Google Firebase Authentication — signs you in and issues the token that identifies you to our backend.

Google Firebase Storage — stores your image files.

Supabase — hosts the PostgreSQL database.

Google Cloud Run — runs our server.

OpenAI — processes ad text for the ad helper, as described in section 3.

Each of these providers operates under its own privacy policy and processes your data on our instructions in order to run the app.

An ad you publish is public inside the app: its photos, text, price, location and the contact details you chose to show on it can be seen by every member.

Your favourites are private. A message is seen by you and the member you sent it to. We do not sell your data and we do not use it for advertising.

We keep your data for as long as your account exists. Delete an ad, a photo or a contact detail and it is removed from every screen. Delete your account and we remove your account record and everything attached to it — ads, photos, contact details, favourites and messages.

Account deletion is permanent and is not reversible.

You can see, edit or delete your ads, photos and contact details from inside the app, and ask us to delete your whole account at any time.

Depending on where you live you may also have the right to request a copy of your data, to have it corrected, or to object to its processing. Write to flitsoft.dev@gmail.com and we will respond within 30 days.

The app is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, contact us and we will delete it.

If we change how the app handles your data — in particular if we add a service that receives your data — we will update this page and change the date at the top. Material changes will also be announced inside the app.

Email flitsoft.dev@gmail.com for anything at all: a privacy question, a data request, or a mistake you spotted on this page.