1. Overview
Ma Fripe Chic is a fashion marketplace that connects customers with curated second-hand and affordable clothing. Our platform enables you to browse products, place orders, track deliveries in real time, manage your profile, and communicate with our support team.
We are committed to transparency, accountability, and the responsible handling of your personal data. We only collect information that is necessary to operate our services and we never sell your data to third parties.
2. Information We Collect
Account Information
When you create an account, we collect your full name, email address, phone number, and password (stored as a secure hash). If you register via a social login provider (Google, Apple, or TikTok), we receive only the basic profile information that provider shares with us.
Order & Transaction Data
We record the products you purchase, the quantities and sizes selected, delivery addresses, order statuses, and refund requests. This history is stored so you can track past purchases and we can resolve disputes.
Delivery Addresses
You may save one or more delivery addresses to your profile. These are used solely to pre-fill the checkout form and to assign a delivery driver to your order.
Device & Usage Information
We collect standard technical data including device type, operating system version, app version, and anonymised usage logs (screens viewed, features used). This data is used for performance monitoring and to identify and fix bugs.
Push Notification Tokens
With your permission, we store a device push token to send you order status updates (e.g. 'Your order has been picked up', 'Out for delivery'). You can revoke this permission at any time in your device settings.
Communications
When you contact us via email or submit a support request, we store the content of that communication so we can respond and track open issues.
3. How We Use Your Information
We use the information we collect exclusively to operate, maintain, and improve our services:
- Process and fulfil your orders, assign delivery drivers, and update you at each stage
- Authenticate you securely and maintain your session
- Send transactional emails (order confirmation, password reset, account notifications)
- Send push notifications about your active orders (with your permission)
- Display your order history and allow you to request refunds
- Respond to support requests and resolve disputes
- Detect and prevent fraud and unauthorised account access
- Analyse usage patterns to improve the app experience
- Comply with legal obligations
We do not use your data for targeted advertising or profiling.
5. Payment Data
Ma Fripe Chic does not store your full card number, CVV, or bank account details on our servers. All payment transactions are handled directly by our payment processors, PayPal and Flutterwave, both of which maintain PCI-DSS Level 1 compliance.
We record only the outcome of a transaction (success or failure), the amount charged, the currency, and the payment method type (e.g. “Visa card” or “MTN Mobile Money”) for your order history and refund processing.
6. Location Data
The app may request access to your device's location to help you auto-fill a delivery address at checkout. We do not continuously track your location in the background. Location access is entirely optional — you can type your address manually.
Delivery drivers use a separate driver application that does share real-time location with our servers while a delivery is active. This data is used only for order tracking and is not associated with customer profiles.
8. Data Storage & Retention
Your data is stored on servers located in secure data centres. We retain your personal information for as long as your account is active or as needed to provide our services.
| Data type | Retention period |
|---|---|
| Account profile | Until account deletion request is processed (up to 7 business days after request) |
| Order history | Up to 5 years after the order date for legal and dispute-resolution purposes |
| Payment records | Up to 5 years as required by financial regulations |
| Support communications | 2 years after the last interaction |
| Device & usage logs | 90 days, then anonymised |
| Push notification tokens | Until you log out, uninstall the app, or revoke notification permission |
Some data may be cached locally on your device (e.g. authentication tokens) to improve performance. You can clear this at any time by logging out.
9. Security Measures
We implement industry-standard security practices to protect your data:
- All data in transit is encrypted using TLS 1.2 or higher
- Passwords are hashed using a one-way cryptographic algorithm — they are never stored in plain text
- Authentication uses short-lived JSON Web Tokens (JWT) with refresh token rotation
- Access to production systems is restricted to authorised personnel only
- Our infrastructure is regularly updated to patch known security vulnerabilities
- Payment processing is fully delegated to PCI-DSS certified processors
No method of electronic transmission or storage is 100% secure. If you believe your account has been compromised, please contact us immediately at support@mafripechic.com.
10. Your Rights
You have the following rights regarding your personal data. To exercise any of them, contact us at support@mafripechic.com or use the options available in the app.
Access
Request a copy of the personal data we hold about you.
Rectification
Update incorrect or incomplete information directly in your profile.
Deletion
Request permanent deletion of your account and personal data via the link below.
Objection
Object to any processing of your data that you believe is not justified.
Portability
Request an export of your personal data in a machine-readable format.
Notifications
Disable push notifications at any time in your device's app settings.
Request Account Deletion
You can submit an account deletion request at any time. All your personal data, order history, and profile information will be permanently removed within 7 business days.
Submit deletion request →11. Children's Privacy
Ma Fripe Chic is not intended for use by children under the age of 13. We do not knowingly collect personal information from children. If we become aware that a child under 13 has provided us with personal information, we will delete it promptly. If you believe a child has registered, please contact us at support@mafripechic.com.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. When we make significant changes, we will notify you via a push notification or an in-app banner, and update the “Last Updated” date at the top of this page. We encourage you to review this policy periodically.
Continued use of the app after a policy update constitutes acceptance of the revised terms.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please reach out to us:
We aim to respond to all privacy-related enquiries within 5 business days.
7. Social Login Providers
You can sign in with Google, Apple, or TikTok. When you choose social login, the provider shares a limited set of profile data with us (typically name and email address). We do not receive your password from these providers and we do not post anything to your social accounts.
Your use of those providers is also governed by their respective privacy policies. We encourage you to review them.