Privacy Policy

We collect information in three main ways: information you provide directly, information collected automatically, and information from third parties.

Information You Provide

• Account details: Name, username, email address, phone number, password, and profile photo when you register.
• Profile information: Bio, location, social media handles, and any other details you add to your profile.
• User Content: Posts, stories, photos, videos, comments, messages, and marketplace listings you create or send.
• Financial information: Payment method details (processed securely by our payment partners), wallet transaction history, and identity verification documents where required by law.
• Communications: Messages you send to us through support channels.

Information Collected Automatically

• Device information: Device type, operating system, unique device identifiers, and mobile network information.
• Usage data: Features used, pages viewed, search queries, interactions with content, and the time and duration of your sessions.
• Location data: Approximate location derived from your IP address, and (with your permission) precise GPS-based location to enable location-aware features such as local content and nearby business discovery.
• Log data: IP addresses, access times, browser or app type, and referring URLs.
• Cookies and similar technologies: We use cookies, local storage, and similar technologies to maintain session state, remember preferences, and analyse usage patterns. You can control cookies through your browser settings; disabling them may limit certain features.
• Push notification tokens: If you opt in to push notifications, we collect a device token to deliver notifications to your device.

Information from Third Parties

• Social sign-in: If you create an account using a third-party identity provider, we receive profile information (such as name and email) as permitted by that provider and your account settings.
• Payment processors: We receive transaction confirmation details from our payment partners but do not store full card or bank account numbers.

We use the information we collect to operate, improve, and personalise the Service, including to:

• Create and manage your account.
• Display your posts, stories, and other content to the communities you choose.
• Facilitate marketplace transactions and wallet operations.
• Personalise content, recommendations, and search results based on your location and activity.
• Send transactional notifications (e.g., payment confirmations, new messages) and, with your consent, promotional communications and push notifications.
• Detect, investigate, and prevent fraud, abuse, and other harmful activity.
• Comply with legal obligations, including anti-money laundering (AML) and know-your-customer (KYC) requirements applicable to our financial features.
• Measure and analyse how the Service is used so we can improve it.
• Respond to your support requests and feedback.

We do not sell your personal information. We may share your information in the following circumstances:

• With other users: Content you post publicly (including your username and profile photo) is visible to other users within your community as determined by your privacy settings.
• With service providers: We share information with trusted third-party vendors who assist us in operating the Service (e.g., cloud hosting, payment processing, push notifications, analytics, customer support). These providers are contractually bound to process your data only as directed by us and in accordance with this Policy.
• For legal compliance: We may disclose information where required by law, regulation, legal process, or a government request, or where we believe disclosure is necessary to protect the rights, property, or safety of Cities, our users, or the public.
• Business transfers: In connection with a merger, acquisition, financing, or sale of assets, your information may be transferred as part of that transaction. We will notify you (via email or prominent notice on the Service) of any change in ownership or use of your personal information.
• With your consent: We may share information for other purposes when you have given us explicit consent to do so.

Cities uses location information to power features such as nearby community feeds, local business discovery, and location-tagged content. We collect location data as follows:

• Approximate location is inferred from your IP address at all times to show you regionally relevant content.
• Precise location (GPS) is only accessed when you grant the app location permission on your device. You can withdraw this permission at any time through your device settings; doing so will limit location-dependent features.

We do not sell or share your precise location data with advertisers. Location data may be stored to improve personalisation and may be shared with service providers solely for the purpose of operating the Service.

With your consent, we send push notifications to inform you about new messages, community activity, marketplace updates, and other relevant events. You can manage notification preferences at any time from within the app's settings or through your device's notification settings. Opting out will stop push notifications but may not affect in-app notifications or transactional emails necessary for your account.

We retain your personal information for as long as your account is active or as needed to provide the Service. When you delete your account, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain it by law (for example, financial transaction records required for regulatory compliance), to resolve disputes, or to enforce our agreements.

User Content you post may persist in cached or archived form for a period after deletion. Aggregated, non-identifiable data derived from your use of the Service may be retained indefinitely.

We implement industry-standard technical and organisational measures to protect your information against unauthorised access, loss, misuse, alteration, or destruction. These measures include encryption in transit (TLS) and at rest, access controls restricted to authorised personnel, and regular security assessments.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you as required by applicable law.

The Service is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have inadvertently collected personal information from a child under 13, we will take steps to delete it promptly. If you believe we may have collected information from a child under 13, please contact us at support@cittis.cc.

Depending on your location, you may have the following rights with respect to your personal information:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal data, subject to certain legal exceptions.
• Portability: Request a structured, machine-readable copy of your data.
• Objection / Restriction: Object to or request restriction of certain processing activities.
• Withdraw consent: Where processing is based on consent, withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at support@cittis.cc. We will respond within the timeframe required by applicable law. We may need to verify your identity before fulfilling certain requests.

Cities operates globally, and your information may be transferred to and processed in countries other than your country of residence. When we transfer personal data across borders, we ensure appropriate safeguards are in place, such as standard contractual clauses, to protect your information in accordance with applicable data protection laws.

The Service may contain links to third-party websites or integrate with third-party services (such as social platforms or payment gateways). This Privacy Policy does not apply to those third parties. We encourage you to review their privacy policies before sharing any personal information with them.

We may update this Privacy Policy from time to time. When we make material changes, we will notify you through the Service (e.g., an in-app banner or email) and update the “Last updated” date at the top of this page. Your continued use of the Service after any such changes constitutes your acceptance of the revised Policy.

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out:

• Email: support@cittis.cc
• Website: cittis.cc

If you are located in a jurisdiction with a data protection authority and you believe we have not adequately addressed your concern, you have the right to lodge a complaint with that authority.