Who we are

Shakomako is operated by Hazem Fahad, 4 Elmwood, Sale, Manchester, M33 5RN, United Kingdom. For anything in this policy, write to [email protected].

Hazem Fahad is the data controller for the personal data described here.

What we collect

Your account. Your phone number, which is how you sign in and how we identify your account. Optionally an email address. Your password is stored only as a cryptographic hash — we never hold the password itself. If you turn on two-factor authentication we store the secret your authenticator app needs. We also keep your language and currency preferences.

• If you list property: your agency's details, your contact phone, WhatsApp number and email, and everything you enter on a listing — photos, video, price, address, description and the map location of the property.
• How you use the service: the listings you save, the searches you save, and records of listings viewed and contact details revealed. When you are signed out these records are tied to a random session identifier rather than to you.
• The text you type into place search, including searches that return nothing. We use this to find gaps in our map data.
• Your device location, but only at the moment you ask for it — when you tap to search near you, or when you place a property pin. We use it to answer that request and do not store it, unless you save a search that was based on it.

What we do not collect

This is unusual enough to state plainly.

• We do not record your IP address, your browser or device identifiers, or any advertising ID.
• We do not use any third-party analytics, advertising or attribution service. There are no trackers in the app.
• We do not sell your personal data, and we do not share it for advertising.

Why we use it

• To run the service — showing listings, running searches, saving what you save.
• To sign you in and keep your account secure, which includes sending one-time codes by SMS.
• To let a buyer or tenant reach the agent for a property, when you choose to reveal those details.
• To understand which places people search for that we do not yet cover, so we can improve the map.

Our legal grounds

• Performing our contract with you — running your account and the service you asked for.
• Our legitimate interests — keeping the service secure, preventing fraud and abuse, and improving our place data. We only rely on this where it does not override your rights.
• Your consent — for device location, which your phone asks you for separately and which you can withdraw at any time in your device settings.

Who we share it with

We share personal data only with the suppliers who help us run the service, and only what each one needs.

• SMS providers, to deliver your one-time sign-in codes. They receive your phone number and the code.
• Our hosting and database providers, who store the service's data.
• Cloudflare, which stores and serves listing photos and video.
• Our error-monitoring provider, configured so that request contents, headers and IP addresses are not sent to it.
• Google Maps, when you view a map. Google receives that request directly from your device under its own privacy policy.
• Anyone we are legally required to disclose to.

What other people can see

A published listing is public. Its photos, price, description, approximate location and the contact details entered for it can be seen by anyone using Shakomako, and may appear in search engines. Do not put anything in a listing that you would not want published.

Your saved listings, saved searches and your phone number are not visible to other users.

How long we keep it

• Your account data, for as long as your account exists. Ask us to close it and we will delete or anonymise your personal data, except where we must keep records by law.
• Listings, for as long as they are on the platform. An archived listing is retained rather than erased, so that a record of what was advertised survives.
• One-time codes, for a few minutes.
• Place-search text, which is not linked to your account, for as long as it is useful for improving the map.

Your rights

Under UK data protection law you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. Write to [email protected] and we will respond within one month.

If you think we have handled your data badly you can complain to the UK Information Commissioner's Office at ico.org.uk. We would rather you told us first so we can put it right.

For a full walkthrough — what gets deleted, what we keep, and how long it takes — see shakomako.io/delete-account.

Keeping it safe

Passwords are stored only as hashes. Two-factor authentication is available, and required for our own staff accounts. Traffic between your device and our servers is encrypted. No service can promise perfect security, but we take this seriously.

Where your data goes

Shakomako serves Iraq and is operated from the United Kingdom, so your data is transferred and stored outside Iraq. Where a supplier is outside the UK, we rely on the safeguards recognised by UK data protection law.

Children

Shakomako is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, write to [email protected] and we will remove it.

Changes to this policy

If we change this policy we will update the date below, and tell you in the app if the change is significant.

Contact

Hazem Fahad, 4 Elmwood, Sale, Manchester, M33 5RN, United Kingdom. Email [email protected].