Listings, messages, and user-generated content stored in Firestore
d) Device Information
Device model, OS version, language, and region
2. What Data We Collect
We collect the following types of data:
a) Account & Profile Information
Email address
User ID (UID)
Location (city-level, with user permission)
Categories and interests selected by the user
Date of Birth – We collect your date of birth solely to verify that you meet the minimum age requirement to use this app (18 years or older). This information is not used for any other purpose.
3. How We Collect Data
When you register or log in via Firebase Auth
When you interact with the app (if you consented to analytics)
When you post, bid, or message through the platform
When you receive push notifications (Firebase Messaging)
4. How We Use Your Data
We use your data to:
Provide app features (listings, bids, messages, profile, etc.)
Ensure security and prevent fraud
Improve app functionality (if you consent to analytics)
Show relevant ads (if you consent to personalized ads)
5. Cookies and Tracking Technologies
We use technologies similar to cookies:
Firebase Analytics (only with your explicit consent)
Google AdMob (you can choose between personalized and non-personalized ads)
SharedPreferences (to store your settings locally)
We ask for your consent on first use and allow you to change your choice at any time in Settings.
6. Legal Basis (GDPR Article 6)
We process your personal data in accordance with Article 6 of the GDPR. Depending on the purpose, our lawful basis is one of the following:
Consent (Art. 6(1)(a))
We ask for your explicit permission before:
Enabling analytics via Firebase Analytics
Showing personalized ads via Google AdMob
Accessing your device location
Sending you push notifications
Accessing your media files (e.g., for uploading photos or videos)
Contractual Necessity (Art. 6(1)(b))
We process your data when it is required to fulfill our agreement with you, including:
Creating and managing your account
Enabling bidding, listing, and messaging features
Delivering core app functionality and services
Legitimate Interest (Art. 6(1)(f))
We may process certain non-sensitive data to:
Improve the app’s performance and usability
Ensure platform security and prevent misuse
Collect aggregated usage trends (if not tied to identifiers)
Legal Obligation (Art. 6(1)(c))
In limited cases, we are legally required to process data to:
Prevent fraud or unlawful behavior
Respond to official legal or regulatory requests
7. Who Has Access to Your Data
Your data is never sold. It may be shared with:
Google Firebase (data processors for storage and authentication)
Google AdMob (if you accept ad tracking)
Cloud service providers used to host the database (EU region)
Only authorized personnel have access to your data.
8. Data Storage and Security
Your data is stored in Google Firebase (EU-based servers, region eur3)
All communication is encrypted using HTTPS
Access is restricted to necessary team members only
We implement security rules in Firestore to prevent unauthorized access
9. Data Retention
Your account data is stored until you delete your account
Listings and messages may be deleted after a defined period
You may delete your account at any time through the app. This will permanently erase:
Your profile
Listings and bids
Messages
Stored preferences
12. Third-Party Services
We use the following third-party tools:
Service
Purpose
Firebase Auth
Login and authentication
Firestore
Storing user data
Firebase Messaging
Push notifications
Firebase Analytics
(Optional) App usage insights
Google AdMob
Monetization (with consent for personalization)
13. Children
BidOn is not intended for users under the age of 18. We do not knowingly collect data from minors.
14. Changes to this Privacy Policy
We may update this policy. You will be notified of major changes in the app or by email.
15. Dispute Resolution
If you have concerns, contact us first. You also have the right to lodge a complaint with your local data protection authority in the EU.
Additional Data & Permissions
Location Access
With your consent, we use your device's location to show nearby content or tailor app features. We only access your approximate city-level location and do not track your real-time movement. This data is processed via Geolocator and Geocoding plugins.
Media and File Access
You may choose to upload files (e.g., profile pictures, listings). If you do, we use tools like File Picker, Image Picker, Image Cropper, and Flutter Image Compress to allow media selection, editing, and optimization before upload. This content stays local unless you actively upload it.
Crash and Performance Reporting
With your consent, we use Firebase Crashlytics to collect anonymized crash logs and device data to identify and fix issues. This helps improve the stability of BidOn.
App Verification
We use Firebase App Check to protect the platform from unauthorized or harmful activity. It ensures that data requests originate from the legitimate app. No personal data is collected through this process.
Multimedia Content
Our app may display photos, videos, or GIFs uploaded by users or from external sources. No additional data is collected when viewing media.
External Links
Some parts of the app may open third-party websites or email clients. We are not responsible for the privacy practices of external websites. Please review their policies separately.