KoinoOS Market Privacy Policy

The data controller is Empoorio (https://empoorio.org). This policy covers the KoinoOS Market Android app published on Google Play as com.gnoosis.empoorioeats. It does not cover the other apps in the ecosystem, each of which has its own. For any privacy matter: legal@empoorio.org.

This app has its own account: you can sign in with an email and password or with your Google account. Signing up stores the form's data — name, email, phone and whatever your profile asks for — and a photo if you add one.

In Firebase, Google's service: the account in Firebase Authentication and everything else in Cloud Firestore. Google acts as a hosting provider processing that data on our behalf.

The app reads your location at that moment, with the app open, for what the service needs: showing what is near you or working out a delivery. There is no continuous or background tracking, and if you deny the permission the app keeps working, less conveniently.

The app asks for the camera and your photos for what you start: setting a profile photo, uploading a product image or attaching an image to a message. It takes no photos on its own and does not read your gallery in the background.

To tell you what changes in your orders or messages, the app registers a device identifier with Firebase Cloud Messaging. You can turn them off in Android settings.

You can protect the app with the phone's fingerprint or face. Android does the check and the app only receives whether it passed: it never sees or stores your biometrics.

• No third-party analytics measuring what you do inside. • It does not sell or share your data for advertising. • It does not track you across other apps or the web. • It does not use your location while the app is closed.

The Google Play listing shows the permissions the app declares. The ones actually used are explained above. The listing also shows access to all files on the device and the permission to install applications. They are declared in the app without its code using them: they collect nothing, and we are removing them release by release. We say so here because we would rather you knew than found it in the permission list.

You can request access to your data, its correction or its deletion by writing to legal@empoorio.org from your account's email. Deleting the account deletes your profile data; what is needed to resolve a claim — an order record, for instance — may be kept as long as necessary.