**Last updated: May 2026**

---

## 1. Introduction

PokéSouq ("we", "us", "our") operates the FairDrop mobile application ("FairDrop", "the App"). This Privacy Policy explains how we collect, use, and protect your personal information when you use FairDrop.

By using FairDrop, you agree to the collection and use of information in accordance with this policy.

---

## 2. Who Can Use FairDrop

FairDrop is available exclusively to:

- Existing PokéSouq customers with at least one completed purchase

- UAE residents aged 18 and above

- Individuals with a valid Emirates ID

---

## 3. Information We Collect

### 3.1 Account Information

When you log in to FairDrop, we access your existing PokéSouq account information including:

- Full name

- Email address

- Phone number

- Shopify customer ID

- Order history with PokéSouq

### 3.2 Identity Verification

To participate in FairDrop drops, we require:

- A photograph of your Emirates ID (front only)

- The information extracted from your Emirates ID including: full name, ID number (stored as a one-way hash), date of birth, nationality, and expiry date

Your Emirates ID image is stored securely in an encrypted private storage bucket. The raw ID number is never stored in plain text — only a one-way cryptographic hash is retained to detect duplicate registrations.

### 3.3 Device Information

To protect the integrity of the drop system, we collect:

- Device fingerprint (a non-reversible identifier derived from your device)

- Device model and operating system

- Whether the device is an emulator or virtual device

### 3.4 Usage Data

We collect information about how you interact with FairDrop including:

- Drop registration and withdrawal events

- Queue position and turn activity

- Selection and checkout activity

- App session information

### 3.5 Location

We do not collect your precise location. Your UAE residency is verified through your Emirates ID.

---

## 4. How We Use Your Information

We use your information to:

- Verify your eligibility to participate in FairDrop drops

- Calculate your loyalty tier and score based on purchase history

- Manage your position in the drop queue

- Send notifications when it is your turn (via push notification and WhatsApp)

- Create draft orders for your selections

- Detect and prevent fraud, duplicate accounts, and bot activity

- Improve the FairDrop system

---

## 5. Information Sharing

We do not sell your personal information to third parties.

We share your information with the following service providers who help us operate FairDrop:

| Provider | Purpose | Location |

| Shopify | Order management and customer accounts | Global |

| Supabase | Database and secure file storage | EU / Global |

| Vercel | Backend API hosting | Global |

| Firebase (Google) | Push notifications | Global |

| Wati | WhatsApp notifications | Global |

| Upstash | Queue management (Redis) | Global |

Each provider is bound by their own privacy policies and data processing agreements.

---

## 6. Data Retention

- **Emirates ID image:** Retained for the duration of your FairDrop account. You may request deletion at any time.

- **Emirates ID hash:** Retained indefinitely to prevent re-registration with the same ID under a different account.

- **Order and queue history:** Retained for 3 years for audit and loyalty scoring purposes.

- **Device fingerprint:** Retained for 2 years.

- **Audit logs:** Retained for 2 years.

---

## 7. Data Security

We implement appropriate technical and organisational measures to protect your personal information including:

- Encrypted storage for Emirates ID images (AES-256)

- One-way hashing of Emirates ID numbers

- JWT-based authentication with short-lived tokens

- HTTPS encryption for all data in transit

---

## 8. Your Rights

As a UAE resident, you have the right to:

- **Access** the personal information we hold about you

- **Correct** inaccurate personal information

- **Delete** your personal information (subject to legal and operational requirements)

- **Object** to the processing of your personal information

To exercise these rights, contact us at: **hello@pokesouq.com**

---

## 9. Children's Privacy

FairDrop is not intended for individuals under the age of 18. We do not knowingly collect personal information from anyone under 18. If you believe we have inadvertently collected information from a minor, please contact us immediately.

---

## 10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app. Your continued use of FairDrop after changes are posted constitutes your acceptance of the updated policy.

---

## 11. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

**PokéSouq**

Email: hello@pokesouq.com

Website: pokesouq.com

---

*This Privacy Policy was prepared in accordance with the UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).*