Privacy Policy — CarLynk

Last updated: July 11, 2026

CarLynk ("the App", "we", "our", "us") is a marketplace platform operated by Owenito Innovations that allows users in Zambia to buy and sell vehicles. We respect your privacy and are committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, and share information when you use our mobile application, in accordance with the Data Protection Act No. 3 of 2021 of Zambia and applicable Google Play policies.

By creating an account or otherwise using CarLynk, you consent to the collection and processing of your data as described in this policy. If you do not agree, please do not use the App.

1. Information We Collect

1.1 Account Information

When you create an account or sign in using:

• Google Sign-In

• Email authentication (if enabled)

we may collect:

• Name

• Email address

• Google profile image (optional)

• Account ID / Firebase UID

We do not collect or store your Google password.

1.2 Listing & Marketplace Information

If you post a car listing, we may collect:

• Vehicle details (make, model, price, photos)

• Location (city / town — not precise GPS)

• Contact information you choose to display

1.3 Usage & Log Data

We may collect analytics such as:

• App usage statistics

• Device type, operating system, and device identifiers

• Crash reports

• General interaction data

This helps us improve performance and user experience. Where this data is collected via third-party SDKs (e.g. Firebase Analytics, Crashlytics), it is disclosed in our Google Play Data Safety section, consistent with this policy.

1.4 Photos & Media

If you upload car images, they are stored securely in Firebase Storage. We do not access your device gallery without your permission.

2. How We Use Your Information

We use your information to:

• Create and manage your account

• Display marketplace listings

• Enable communication between buyers & sellers

• Improve app performance and features

• Prevent fraud and suspicious activity

• Show relevant ads (see Section 5)

We do not sell your personal data.

3. Data Storage, Security & International Transfer

Your data is stored securely using:

• Firebase Authentication

• Firebase Realtime Database / Firestore

• Firebase Storage

These services are operated by Google and may store or process data on servers located outside Zambia. By using CarLynk, you consent to this transfer. We take reasonable steps to ensure any such transfer is protected to a standard consistent with the Data Protection Act, 2021.

We apply reasonable security measures to protect your data. However, no system is 100% secure — users should avoid sharing sensitive personal information publicly in listings.

4. Third-Party Services

The app may use the following services:

• Google Firebase (Authentication, Database, Storage, Analytics, Crashlytics)

• Google Sign-In

• Google AdMob (advertising — see Section 5)

These services may collect data in accordance with their own privacy policies. Any data collection or sharing carried out by third-party SDKs in the App is reflected in our Google Play Data Safety declaration.

5. Ads & Advertising Identifiers

[State clearly whether this applies: e.g., "Ads are not currently active in the App" or "The App displays ads via Google AdMob."]

If ads are enabled, AdMob may collect device identifiers (such as the advertising ID) and general usage activity to deliver relevant ads. This collection is disclosed in our Play Console Data Safety form. We will update this section and our Data Safety form whenever the App's ad status changes.

6. Your Rights

You may:

• Update your profile information within the App

• Request deletion of your account

• Request removal of your listings

• Withdraw consent to processing at any time (this does not affect the lawfulness of processing carried out before withdrawal)

• Lodge a complaint with the Office of the Data Protection Commissioner if you believe your data has been processed in a way that contravenes the Data Protection Act, 2021

Account deletion: When you request account deletion, we permanently delete the associated personal data from our active systems — this is a full deletion, not a temporary deactivation. We may retain limited data where necessary for fraud prevention, dispute resolution, or legal compliance, as described in Section 8.

To request account or data deletion, contact us at: 📧 owennotech@gmail.com

7. Children's Privacy

CarLynk is not intended for children under 13. We do not knowingly collect data from minors. If you believe a minor has used the app, please contact us so we can remove their account.

8. Data Retention

We retain personal data only for as long as it is used for the purpose for which it was collected, and for at least one year after that purpose ends, in line with the Data Protection Act, 2021 — unless a longer period is required to resolve disputes or meet legal obligations. Deleted accounts and listings are removed from active systems within a reasonable timeframe, subject to this minimum.

9. Sharing of Information

We may share information only when:

• Required by law or legal request

• Necessary to investigate fraud or abuse

• Necessary to protect user safety

• You have given explicit consent

We do not sell or trade personal data.

10. Data Controller Registration

Owenito Innovations, as the operator of CarLynk, processes personal data of individuals in Zambia and is registered (or is in the process of registering) as a data controller with the Office of the Data Protection Commissioner, in accordance with Part V of the Data Protection Act, 2021.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted here with an updated "Last Updated" date.

12. Contact Us

If you have questions about this Privacy Policy, or wish to exercise any of your rights above, please contact:

Owenito Innovations 📧 owennotech@gmail.com 📍 Zambia