Privacy Policy

1. Who We Are

Strictly Moris is a Mauritius-focused mobile directory that connects users with local businesses, service providers, and activity hosts. We are based in Mauritius and operate the app under the laws of the Republic of Mauritius.

2. Information You Provide Directly

When you create an account, build a listing, or use the app, we collect information you give us directly:

• Account details: email address, full name, password (stored as a secure hash, never in plain text), and optional phone number
• Profile details: avatar photo and preferred region
• Listing content (for providers): business or service name, description, category, address, GPS coordinates, city, contact details (phone, email, website), social media handles (Instagram, Facebook), opening hours or working hours, search tags, qualifications, certifications, years of experience, hourly rate, availability, event dates and prices, and any PDF documents you upload (menus, price lists, certifications)
• Photos you upload for your profile or listing (up to five per listing)
• Messages you send to other users through our in-app messaging system
• Reports and blocks you submit about other users or listings

3. Information We Collect Automatically

When you use the app, we automatically collect:

• Location data: your approximate GPS location, only while the app is in use, used to sort nearby businesses and calculate distances. You can deny location permission; the app will still work but will default to the center of Mauritius
• Session and authentication data, managed by Supabase Auth
• Usage signals tied to your listings (if you are a provider): views, shares, call taps, email taps, and website taps — used to show you metrics about your own listing, not shared with third parties
• Recently viewed items, stored locally on your device only (maximum ten entries)
• Your theme preference (light/dark/system), stored locally on your device
• Your push notification token, if you grant permission, used to deliver alerts about your account and listings

4. Information We Do Not Collect

We do not collect:

• Advertising identifiers or cross-app tracking data
• Contacts, calendar, SMS, call logs, or browsing history
• Biometric data
• Payment card details — Strictly Moris does not process payments inside the app

5. How We Use Your Information

We use the information described above to:

• Create and manage your account and authenticate your sessions
• Publish your listing to other users once our team approves it
• Show relevant businesses, services, and activities near you
• Enable in-app messaging and real-time message delivery
• Send transactional notifications (listing approved or rejected, new message, new save milestones)
• Show providers basic analytics about how their listing is performing
• Enforce our Terms of Service and prevent abuse, including rate limiting and admin review of reported content
• Maintain the security of our systems and diagnose technical issues

6. What Is Public vs Private

Content you submit as part of a published listing — including photos, descriptions, addresses, contact details, opening hours, documents, and social handles — is visible to anyone using the app. Treat a published listing as public information.

Your account email, password, push notification token, private messages, saved items, recently viewed history, and listing analytics are private. Other users cannot see them.

7. How We Share Your Information

We do not sell or rent your personal information. We share information only in these limited cases:

• With other app users, via the public parts of your listing described above
• With the recipient of a message you choose to send
• With our infrastructure providers (listed in Section 9), strictly to operate the app
• With law enforcement or regulators, if legally required and after verifying the request
• In the event of a merger, acquisition, or restructuring, in which case we will notify you before your data is transferred

8. Location Data

We request location permission to rank nearby listings and compute distances. Location is accessed only while the app is in use; we do not track your location in the background. You can revoke location permission at any time in your device settings. Without location permission, the app defaults to searching around the center of Mauritius and distance filters may be less accurate.

9. Third-Party Services

Strictly Moris relies on a small number of trusted third-party services to operate:

• Supabase — our backend provider. Hosts our database, authentication, file storage, and real-time messaging in the ap-south-1 (Mumbai) region, the closest region to Mauritius. All data is encrypted in transit
• Google Maps Platform — provides address autocomplete, place details, and map display. When you search for an address, your query is sent to Google
• Expo and React Native infrastructure — delivers app updates and push notifications

Each of these services has its own privacy policy governing data they process on our behalf.

10. Data Storage and Security

All data is encrypted in transit between your device and our servers. Passwords are hashed using industry-standard algorithms and are never stored or transmitted in plain text. Photos and documents are stored in secure Supabase storage buckets with row-level security policies that limit access to the owning user. Our database uses row-level security to isolate user data at query time.

No system is perfectly secure. While we take reasonable steps to protect your information, we cannot guarantee absolute security and ask you to use a strong, unique password for your account.

11. Data Retention

We keep your information for as long as your account is active. When you delete your account:

• Your profile, listings, events, photos, documents, saved items, messages, and notifications are permanently removed from our database
• Your avatar is removed from our storage bucket
• Your authentication record is deleted
• Locally cached data is cleared from your device

Deletion is immediate and irreversible. We retain only anonymized, aggregated records (if any) that cannot be linked back to you, plus anything required for legal compliance.

12. Your Rights

You have the right to:

• Access the personal data we hold about you — most of it is visible directly in the app
• Correct inaccurate information via your profile and listing screens
• Delete your account and all associated data at any time, from Account → Delete Account
• Withdraw consent for location or notifications by revoking permission in your device settings
• Object to specific uses or lodge a complaint with the Data Protection Office of Mauritius

13. In-App Messaging and Blocking

Messages you send are visible only to you and the person you messaged. Only participants of a thread can read or delete it. We enforce a rate limit of thirty messages per minute per thread to prevent spam. You can block any user at any time; blocked users cannot start new threads with you. We do not scan or read your private messages unless compelled by law or to investigate a specific abuse report.

14. Children's Privacy

Strictly Moris is not directed at children under the age of thirteen. We do not knowingly collect personal information from children under thirteen. If you believe a child has created an account, contact us and we will delete it.

15. Data Location and International Users

Our backend is hosted in the ap-south-1 region (Mumbai, India), chosen for its proximity to Mauritius. If you access the app from outside Mauritius, your information is transferred to and processed in that region.

16. Cookies and Tracking Technologies

The mobile app does not use browser cookies. It stores a limited set of values locally using AsyncStorage — your session token, theme preference, recently viewed list, and cached data for offline use. These values live only on your device and are cleared when you delete the app or sign out.

17. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you inside the app and update the "Last Updated" date above. Your continued use of the app after changes take effect means you accept the updated policy.

18. Contact Us

If you have questions about this Privacy Policy, want to exercise your rights, or believe your data has been handled improperly, contact us at: strictlymoris@gmail.com