Privacy Policy

Last updated: 26 October 2026

Akarestate (“we”, “us”) operates a map-based real estate marketplace for Egypt. This policy explains what personal data we collect, why, and your rights under Egypt’s Personal Data Protection Law (Law No. 151 of 2020, “PDPL”).

Data we collect

  • Account details: your name and email address, whether you sign up with email, Google, or Facebook.
  • WhatsApp number: collected and verified during onboarding via a one-time code so agents can reach you about listings.
  • Identity documents (listers only): National ID or passport and a selfie, checked by our identity-verification provider before you can publish. Your National ID number is stored only as a one-way SHA-256 hash — never in plain text.
  • Payment data(paid plans only): the pack you bought, the amount and date, your account’s renewal code, the receipt or transfer screenshot you upload, the status of our review, and a history of your payments and boost credits. Receipts may show your name and the last digits of your account. If you pay by card or wallet, the payment is processed by our payment service provider on its own secure page — we never receive or store your full card number; we receive only a confirmation, the amount and a masked reference.
  • Listings & activity: properties you post, favorites, inquiries you send, and general usage of the map and search.
  • Technical data: device, browser, and approximate location used to render the map and keep your session secure.
  • Listing views: when you open a listing page we record that the listing was viewed that day, so the person who posted it can see how many people looked at it. If you are not signed in, a first-party cookie named ak_vid(a random identifier, kept for one year) lets us count you once per listing per day rather than on every visit. It is not used for advertising and is not shared with anyone. Lister analytics show counts only — never who viewed a listing.
  • Phone numbers on listings:if you post a listing, you can choose to show your verified WhatsApp number on it. Anyone can press to see it, and we record that they did so the lister can count it as a lead — by account if signed in, otherwise by the ak_vidcookie above, together with a one-way hash of the IP address used only to limit how many numbers one connection can view. Listers see counts only — never who looked at their number.
  • Searches:we keep what you search for on the map (the words, the place and the filters you choose) — tied to your account if you are signed in, otherwise to the ak_vidcookie and to your account once you sign in — and use it only to improve your experience.
  • Where you arrive from:when you open Akarestate from another site, a search engine, an ad, one of our social posts or our app, we record which of those it was (from the referring site, campaign tags and ad click ids in the link) — tied to the ak_vidcookie and to your account if you are signed in — to measure which of our marketing brings buyers. We don’t record the page you came from, and it’s never shown to listers.

How we use your data

  • To create and secure your account and verify your identity.
  • To connect buyers and renters with agents and developers.
  • To process payments, activate and manage paid plans, issue refunds where this policy and our refund policy allow, and keep the accounting records the law requires.
  • To send transactional messages (verification, inquiries, service notices).
  • To operate, improve, and protect the platform against fraud and abuse.

Service providers

We share the minimum data necessary with processors that help us run the service:

  • Supabase — authentication, database, and file storage.
  • Didit — phone-number verification (one-time codes) and identity verification (ID document and selfie checks).
  • Paymob — card and mobile-wallet payment processing, when you choose to pay that way. Paymob receives the data needed to take the payment (amount, a reference for your order, and the details you enter on its page) under its own privacy policy.
  • Google and Meta (Facebook) — optional social sign-in.
  • Meta Pixel — measures how well our ads on Facebook and Instagram work. It tells Meta which pages you visit on Akarestate, along with your IP address, browser information, and any Meta cookies already in your browser, so Meta can attribute visits to our ads and show us aggregate results. Meta processes this under its own privacy policy. You can limit it in your Meta ad settings or with a browser tracking blocker.
  • TikTok Pixel — measures how well our ads on TikTok work, in the same way: it tells TikTok which pages you visit on Akarestate, along with your IP address, browser information, and any TikTok cookies already in your browser, so TikTok can attribute visits to our ads and show us aggregate results. TikTok processes this under its own privacy policy. You can limit it in your TikTok ad settings or with a browser tracking blocker.
  • Google Tag Manager— loads Google's advertising and analytics tags (Google Ads, including YouTube, and Google Analytics). These tell Google which pages you visit on Akarestate, along with your IP address, browser information, and any Google cookies already in your browser, so Google can attribute visits to our ads and show us aggregate usage statistics. Google processes this under its own privacy policy. You can limit it in your Google ad settings or with a browser tracking blocker.
  • PostHog (hosted in the EU) — shows us where people get stuck while creating a listing. Only on the listing form and the sign-in, phone and identity steps in front of it, it records which steps you open, how long you spend on each, which required fields were missing and whether you published, linked to your account ID, plus a recording of the page. On the listing form the recording shows what you enter, the photos you add and the map where you place the pin, which is the listing content you are publishing; on the sign-in, phone and identity steps it hides everything you type. Videos are never recorded, and PostHog never receives your name, phone number or email. Our admins may watch these recordings to improve the listing form. Recordings are kept for at most 90 days.
  • Mapbox — map rendering; Google Places — address search.
  • Resend — transactional email delivery.

Your rights

Under the PDPL you may access, correct, or delete your personal data, withdraw consent, and object to certain processing. You can edit your profile in the app or request deletion (see our data deletion instructions). We retain data only as long as needed to provide the service or as required by law. Payment and invoicing records are kept for the period required by Egyptian tax and commercial record-keeping law even after an account is deleted; uploaded receipts are deleted once that period ends. Individual listing-view records are deleted after 90 days; only the daily count per listing is kept after that.

Security

We use industry-standard measures including encrypted transport, row-level access controls, private storage for identity documents, and hashing of sensitive identifiers. No system is perfectly secure, but we work to protect your data.

Contact

For any privacy question or to exercise your rights, contact Akarestate at support@akarestate.com. We aim to respond within 30 days.

← Back to Akarestate