Koupely Privacy Policy

Koupely's services are operated by:

DJEHI GROUP Single-member limited liability company (SARLU) Share capital: 2,000,000 F CFA RCCM: CI-ABJ-03-2026-B13-06910 Registered office: Abidjan, Bingerville, Cité Côte de Grâce, Lot 168, Îlot 1417, Côte d'Ivoire.

For any question about your personal data:

Email: support@koupely.com

In this Policy, "Koupely", "we", "our" and "us" refer to DJEHI GROUP acting as the operator of the Koupely service.

This Policy applies to anyone using Koupely, including when they create an account, sign in, browse an offer, search for a product, join an offer, make a payment, track an order, save an address, enable location, receive a delivery, use a pickup QR code, check a refund, contact support, or change their preferences.

It also applies to people using Koupely from several devices.

The data we collect depends on the features used.

Koupely does not systematically collect every category of data described below for every user.

When you create or use your Koupely account, we may process your first name, last name, phone number, email address, profile photo, user ID, account creation date, language, preferences, and certain account settings.

Your phone number may be one of your account's primary identifiers.

For security reasons, changing it may be subject to a specific verification procedure.

If you choose to add a profile photo, Koupely may process the image you select from your device or take with your camera.

Adding a photo is only necessary where this feature is offered to you.

Where the app allows it, you can take a new photo, choose an image from your gallery, replace your photo, or delete your current photo.

Koupely does not use your photo for facial recognition purposes, unless a separate, clearly explained and legally compliant feature is offered in the future.

We may process the information needed to authenticate you and keep your account secure.

This may include sign-in credentials, session tokens, OTP information, verification information, sign-in history, and data used to detect suspicious sign-ins.

Passwords must be stored in a secure form and must never be kept in plain text.

When Koupely offers sign-in through Apple or Google, the provider concerned may share with Koupely certain information the user has authorized.

This may include an account identifier, an email address, a name, or information needed for authentication.

Koupely does not receive the password to your Apple or Google account.

The data accessible depends on the permissions granted and the rules of the provider concerned.

When you place an order, we may process the order number, the product or service ordered, the quantity, the price at the time of purchase, the final price, discounts, delivery fees, the total, the order status, order-related dates, and information needed to fulfil it.

This information is needed to manage your transaction, let you track your order, and keep the required history.

Koupely relies in part on mechanisms that let an offer's price evolve based on certain conditions.

We may therefore process your participation in an offer, your entry price, the current price, the final price, the number of participants, the tiers reached, the time you joined, the offer's status, and the data needed to calculate any adjustment.

Where a price drop or another situation gives rise to a refund, Koupely may process the price paid, the final price, the difference to be returned, the amount to receive, the payment method used, the refund status, the transaction reference, and processing dates.

This data feeds the "To receive" section and your refund history.

The "To receive" section represents amounts identified as still owed to the user.

It is not necessarily an e-wallet or a bank account.

We may process the financial information needed to determine the amount identified as owed, the amount being processed, the amount already refunded, and the state of each refund.

Koupely may offer several payment methods, for example Wave, Orange Money, MTN Money, Moov Money, Visa, Mastercard, or other services made available later.

Koupely may process certain information about the transaction, such as the payment method chosen, the amount, the currency, the payment status, the date, the transaction reference, and certain masked payment-method details.

Where card payments are provided by a specialized provider, Koupely avoids, as far as possible, directly storing full card details.

Sensitive information may be processed directly by the payment provider.

Koupely may receive only certain information needed for the transaction to work, such as the card type, the last masked digits, a technical token, the transaction status, or the payment reference.

Koupely will never ask you to send your card PIN by email, phone, or chat.

For Mobile Money payments and refunds, we may process certain information needed for the operation, such as the number linked to the payment, the provider, the amount, the reference, the status, and the processing date.

We will never ask you to share your Mobile Money PIN with Koupely support.

When you save an address, we may process the name given to the address, the recipient's name, their phone number, the formatted address, the country, the city, the district or neighbourhood, the street, additional instructions, and geographic coordinates where available.

For example: Home, Work, A relative's place.

You can also set an address as your default address.

With your permission, Koupely may access your device's location.

This feature may be used to identify your current position, make it easier to create an address, move the map to your position, find a nearby address, calculate a delivery zone, show relevant relay points, or support certain delivery features.

Where technically possible, you can use Koupely without providing your precise GPS position.

For example, you can search for an address, use autocomplete, select a location on a map, or enter an address manually.

Declining location permission should not necessarily prevent you from using every feature.

To improve delivery accuracy, an address may include a latitude and a longitude.

This information may be associated with the delivery address you created.

We must not use your precise location for purposes incompatible with those announced, without an appropriate basis or further information.

When you use the map or address search, some requests may be processed by the mapping provider Koupely uses.

For example, a mapping provider may process the text searched, geographic coordinates, or certain technical parameters.

Processing carried out directly by these providers may also be subject to their own privacy policies.

When you choose a relay point, Koupely processes the relay point's identifier and the information needed to route your order.

Relay points are distinct from your personal addresses.

To organize a delivery, we may process or share the information strictly necessary with the courier or logistics partner.

This may include your name, phone number, address, delivery position, order number, delivery instructions, and information needed for the handover.

Where the feature is available, Koupely may show certain delivery-related information.

This may include the delivery status, an estimated arrival time, the courier's location, or information needed to communicate with them.

Real-time tracking should be limited to the relevant delivery context.

Koupely may generate a QR code and/or a numeric code to secure the handover of an order.

The QR code may contain a secure identifier or token linked to your delivery.

We may process the token, the associated order, the code's state, the generation date, the date of use, and the validation status.

Where a pickup code is meant for single use, Koupely may keep technical proof that it was used, to prevent it being reused and to keep the delivery secure.

Where relevant, Koupely may process information about couriers, including their professional identity, contact details, availability status, assignment information, delivery position, vehicle, delivery history, or information needed for security.

This Policy mainly concerns customers, but certain security rules also apply to other users of the platform.

When you use the app, certain technical information may be collected automatically.

This may include the operating system, the app version, the device model, a technical identifier, the language, the time zone, certain network information, and data needed for the app to work.

Koupely may keep technical logs to identify errors, prevent fraud, diagnose outages, improve performance, secure accounts, and investigate technical events.

These logs may include timestamps, system events, technical identifiers, API errors, IP addresses, or similar information needed for security.

Your IP address may be processed to keep the network running, improve security, limit abuse, detect certain fraud, or diagnose technical issues.

If you allow notifications, Koupely may use a notification token linked to your device to send you messages about offers, price drops, orders, payments, refunds, deliveries, and important alerts.

You can manage notification permissions from your phone's settings.

Where this feature exists, Koupely may record the categories of notifications you want or do not want to receive.

Some communications essential to security or to carrying out a transaction may nonetheless be necessary for the service to work.

Koupely may save certain app preferences, for example your language, light theme, dark theme, or system mode.

This information is used to personalize your interface.

If you enable personalization features, Koupely may use certain data to tailor the offers or content shown to you.

This may include categories browsed, products viewed, purchases, preferences you explicitly selected, or certain interactions with offers.

Koupely may use certain information to suggest offers you might be interested in.

Where personalization is optional, a setting may be made available to limit or turn it off.

If Koupely offers favorites or similar features, we may keep the products or offers you add so you can find them again.

We may also process certain interactions, such as viewing an offer, a click, a share, adding to favorites, or joining an offer.

When you use the Share button, Koupely may prepare a link or content to be sent through the apps installed on your device.

The recipient and the final shared content may then be processed by the third-party service the user chooses.

Koupely does not necessarily have access to all the data exchanged between you and that third-party service.

When you contact support, we may process your identity, your number, your email, your messages, your order number, your transaction references, your screenshots, and any information you choose to share with us.

This data is used to handle your request, resolve your issue, and protect the service.

Koupely support should never ask you for your password, your Mobile Money PIN, your OTP, your banking security code, or your full card number together with its security details.

If you receive such a request claiming to come from Koupely, contact support@koupely.com directly.

We may process certain data to prevent fraud, unauthorized payments, fake accounts, offer manipulation, promotion abuse, illegitimate access attempts, or attacks against our systems.

Certain signals may trigger an additional check.

Automated systems may be used to identify unusual or potentially fraudulent behaviour.

Where a significant decision affecting a user is made solely by automated means, Koupely must meet applicable requirements and, where necessary, provide ways to challenge the decision or request human intervention.

Data may be used to create and secure your account, manage your orders, provide offers, process your payments, manage refunds, organize deliveries, manage your addresses, provide location when you request it, show your transactions, send notifications, respond to support requests, prevent fraud, improve performance, meet our legal obligations, and keep Koupely secure.

Depending on the nature of the processing and applicable rules, Koupely may process data because the processing is necessary to provide a requested service, necessary to comply with a legal obligation, justified by a legitimate interest compatible with your rights, or based on your consent where consent is required.

Where consent is required, Koupely must ask for it clearly.

This may concern, for example, certain location permissions, certain marketing communications, or certain optional personalization features.

You can withdraw your consent where the relevant processing relies on it.

Koupely does not sell your personal data to advertisers.

We may, however, share certain data with providers where necessary for the service to work.

Certain information may be shared with payment providers to authorize, execute, secure, or refund a transaction.

The providers concerned may also be subject to their own obligations and policies.

Information needed for delivery may be shared with the courier, carrier, or partner handling the order.

We aim to limit this information to what is actually necessary.

Koupely may use cloud infrastructure to host databases, APIs, files, backups, logs, images, and other elements needed for the service to work.

These providers are chosen based, among other things, on their security and availability guarantees.

Koupely may use third-party services for mapping, push notifications, error analysis, communications, authentication, storage, sending emails, or security.

Where a provider processes data on Koupely's behalf, appropriate safeguards must be put in place under applicable obligations.

We may disclose certain information where a legal obligation requires it, in particular in response to a valid request from a competent authority.

Koupely must not voluntarily disclose more information than necessary in this context.

Some technical providers may host or process data from countries other than the user's own.

Where international data transfers take place, Koupely seeks to use the safeguards required by applicable data protection rules.

We do not keep all data for the same length of time.

The retention period depends on the nature of the data, the service concerned, whether there is an order, a payment, a refund, or a dispute, and any accounting, tax, regulatory, or security obligation.

While your account is active, certain essential information must be kept for Koupely to work.

For example: your account identity, your essential preferences, your orders, the addresses you still have saved, and the information needed for your ongoing operations.

When you delete your account, Koupely must delete or anonymize data that is no longer needed.

Some information may nonetheless need to be kept for an additional period where a legal, accounting, tax, anti-fraud, or rights-defence obligation of Koupely requires it.

Even after account deletion, certain information about completed transactions may need to be kept where it constitutes a document necessary for accounting, contractual proof, a refund, or a legal obligation.

In that case, access to this data must be limited to the purpose that justifies keeping it.

Koupely implements measures designed to protect personal data.

These may include encrypting communications, access control, separation of duties, logging, API protection, limiting secrets, backups, restricting access to databases, and incident-detection mechanisms.

Team members and technical systems should only access the data necessary for their role.

For example, a support agent should not have the same privileges as a technical administrator.

Passwords must never be stored in plain text.

Koupely uses, or must use, hashing methods suited to protecting credentials.

Communications between the app and our servers must be protected using secure protocols.

Particularly important data may also be encrypted at rest where appropriate.

Despite the measures in place, no IT system can guarantee an absolute absence of risk.

In the event of an incident compromising personal data, Koupely takes the steps necessary to contain the incident, assess its impact, fix the vulnerability, and carry out any required notifications.

You also play a part in keeping your account secure.

We recommend that you protect your phone, choose a strong password, never share your OTP, and never share your pickup code before your order is actually handed to you.

Depending on applicable regulations, you may have rights concerning your personal data.

These rights may include access, rectification, deletion, restriction, objection, withdrawing consent, retrieving certain data, or challenging certain processing.

You can ask for information about the personal data Koupely holds about you, under applicable conditions.

You can update certain information directly from Koupely.

For example: first name, last name, email address, or profile photo, where the feature is available.

Certain security-sensitive data, such as your account's main phone number, may require a specific procedure.

Your main phone number may be shown in your profile without being directly editable.

If a change becomes necessary, Koupely may require a verification procedure to prevent the account from being hijacked.

Koupely lets users start deleting their account directly from the app.

The intended path is: Me, then Personal information, then Sensitive zone, then Delete my account.

This action must be clearly accessible and must not be deliberately hidden.

Before permanently deleting an account, Koupely may check whether there is an order in progress, an active delivery, a refund to receive, a refund being processed, a dispute, or an obligation that temporarily requires keeping certain data.

If an important operation is still in progress, Koupely may delay certain steps of the deletion in order to complete that operation or meet applicable obligations.

The user must be clearly informed when this happens.

To prevent accidental or fraudulent deletions, Koupely may require additional confirmation, recent authentication, a password, or a verification code.

After permanent deletion, the user may lose access to their account, their preferences, their history visible in the app, and certain associated information.

Deletion may be irreversible.

The Sign out button ends your session.

It does not delete your account.

The Delete my account button is a separate operation.

You can also delete only your profile photo without deleting your account.

Where applicable regulations grant you a right to object to certain processing, you can send your request to Koupely.

Where Koupely sends commercial communications that are not strictly necessary to provide the service, the required consent or unsubscribe mechanisms must be respected.

Some notifications are directly tied to a transaction.

For example: successful payment, order confirmed, delivery in progress, refund completed, or a security alert.

These may be distinct from marketing communications.

Koupely is not intended for use by people who lack the capacity required to enter into the transactions it offers.

Where specific age restrictions apply, they must be respected.

If we learn that an account was created in violation of applicable rules concerning a minor, appropriate measures may be taken.

If you use Koupely on a shared device, remember to sign out so other people cannot access your information.

Koupely may keep information about active sessions to support security and, where available, a feature for managing connected devices.

In the account security section, Koupely may let you view or manage certain sessions or devices.

You may be able to sign out of a session you do not recognize.

Koupely may produce aggregated or anonymized statistics to analyze performance, offer usage, purchasing trends, or technical errors.

Where data is genuinely anonymized and can no longer identify a person, it is no longer personal data under applicable rules.

We may measure indicators such as load times, crashes, errors, network performance, and app stability.

These analyses are used to improve Koupely.

The Koupely website may use cookies or similar technologies to maintain a session, secure the service, remember certain preferences, measure performance, and improve the experience.

Where regulations require consent for certain categories of cookies, Koupely must provide the necessary mechanisms.

In the mobile app, technologies such as tokens, local identifiers, secure storage, SDKs, or technical identifiers may play roles similar to some web cookies.

Depending on the features used, Koupely may request permissions for location, the camera, the gallery, or notifications.

A permission is only requested where it is relevant to the feature concerned.

Camera access may be requested, in particular, when you want to take a profile photo or use a feature that needs the camera.

Access to your photos may be requested when you deliberately choose an image from your device.

Koupely must not use your gallery for other, unexplained purposes.

You can change certain permissions from your phone's settings.

Some features may become unavailable if you withdraw a permission they need.

Koupely may contain links to external services.

Once you leave Koupely, processing carried out by that third-party service is governed by its own privacy policy.

This Policy may be updated to reflect new features, changes of provider, or technical or regulatory developments, among other things.

The last-updated date is shown at the top of this document.

In the event of a significant change materially affecting how your data is used, Koupely may inform you through a notification, a message in the app, an email, or any other appropriate means.

The version available in Koupely is the current version of this Policy.

A historical copy may be kept to document previous versions.

To exercise a right or ask a question about your data:

Email: support@koupely.com

You can also use the features available directly in the app.

For security reasons, Koupely may ask for certain information to confirm your identity before acting on a sensitive request.

For any question about privacy:

KOUPELY, DJEHI GROUP Abidjan, Bingerville Côte d'Ivoire

Email: support@koupely.com

Koupely is committed to developing its service according to several principles: transparency, security, data minimization, user control, and respecting the purposes announced.

Personal data should not be collected simply because it can be.

It must serve a real function of the app or a legitimate obligation.