Effective from May 1, 2026Last updated: May 1, 2026

Overview

Aqarna is an online real-estate marketplace for Sudan, operated by Aqarna Limited ("we", "us", or "the company"). This policy explains how we collect, process, and protect personal data when you use our website and mobile apps ("the Service"). By using the Service, you agree to this policy.

Data we collect

We collect the following data to operate the Service and protect its users:

Account data
Name, phone number, email, profile picture, and a hashed password. When you sign in with Google, we receive your unique Google ID, name, and email from Google.
Listing data
Property details you publish (location, price, photos, description, amenities) and the edit history of your listings.
Messages and communications
Messages exchanged via the in-app chat, contact requests, and the call log produced by the in-app "Call" button.
Device and usage data
Device type, operating system, IP address, device identifier, browser model, referrer URLs, pages you visit, and session duration.
Location data
If you grant permission, we use your approximate location (city/district) to suggest nearby properties. We do not permanently store precise GPS coordinates.
Payment data
When you pay for paid services (featured listings, listing boosts), payment details are passed to our approved payment provider. We do not store full card details on our servers.

Google User Data

Google User Data

When you sign in to Aqarna using your Google account, we may receive certain information associated with your Google account, including:

* your name
* email address
* profile picture
* Google account unique identifier

This information is used only for:
* creating and securing your account;
* allowing you to sign in to Aqarna;
* linking your Google account with your Aqarna account;
* preventing unauthorized access or abuse;
* communicating important account-related notifications.
Aqarna does not sell Google user data and does not use Google user data for advertising purposes.
Google user data is not shared with third parties except when necessary to operate the service, comply with legal obligations, or protect the platform and users from fraud, abuse, or security threats.
User data is stored securely using appropriate security measures. Users may request deletion of their account and associated data by contacting us.

How we use your data

We use your data only for the following purposes:

  • Operate the Service, create your account, and manage your listings and messages.
  • Verify your identity and contact numbers to prevent fake listings and fraud.
  • Recommend properties and saved searches that match your interests, browsing, and chosen location.
  • Send operational notifications about your account (confirmations, security alerts, important updates).
  • Send marketing communications only with your explicit consent, which you can withdraw at any time.
  • Detect abuse and fraud and enforce our terms, including reviewing reported content.
  • Comply with legal obligations and respond to lawful requests from authorities.

Who we share data with

We do not sell your personal data. We only share it in the following cases:

  • Other users: when you publish a listing, your displayed name and contact number become visible to interested users.
  • Service providers: hosting, email, SMS and WhatsApp delivery, mapping services, and payment processors — acting on our behalf under confidentiality agreements.
  • Legal authorities: when required by law or necessary to protect our rights or user safety.
  • In a merger or acquisition, data transfers to the new entity, with prior notice to you.

Cookies

We use essential cookies to keep your session alive, store your CSRF token, and remember your preferences (language and dark mode). We also use first-party analytics to understand performance without sharing your identity with third parties. You can clear cookies in your browser settings, but parts of the Service may stop working.

How long we keep data

We keep your account data while your account is active. After deletion, we remove personal data within 30 days, except where we are required to retain it for legal or accounting purposes for up to 7 years.

Your rights

Subject to applicable law, you may:

  • Request a copy of the data we hold about you.
  • Correct any inaccurate data from the "My account" screen.
  • Ask us to delete your account and the personal data attached to it.
  • Object to processing for marketing and withdraw consent at any time.
  • Request a portable copy of your data in JSON format.

To exercise these rights, email [email protected] and we will reply within 14 business days.

Security

We protect your data with TLS encryption in transit and AES-256 encryption for passwords and sensitive data at rest. We review internal access regularly and only grant it to staff who need it for their role.

Children

The Service is not intended for anyone under 18. We do not knowingly collect data from minors, and we will delete it immediately if we become aware.

International transfers

Our servers are hosted in data centres in the United Arab Emirates. When data moves outside Sudan for operational purposes, we apply the necessary safeguards.

Updates to this policy

We may update this policy from time to time. We will publish the new version on this page and notify you of material changes via email or in-app notice at least 14 days before they take effect.

Contact us

If you have any questions about this policy, we are happy to hear from you: