Privacy Policy

Last updated: 2026-07-10

This Privacy Policy explains how iSell (“iSell”, “we”, “us”) collects, uses and shares personal data when you use the iSell mobile app and this website. Please read it together with our Terms of Use.

1. Information we collect

Account and contact data

Your mobile phone number, which is your login and where we send one-time passcodes (OTP) to sign you in.

Identity verification (MyID)

To buy on installments you verify your identity through MyID, Uzbekistan’s national identification service. During verification MyID processes your passport/ID details and a live face image (biometric data) to confirm it is really you. We receive and store the identity data returned to us, which includes your full name, date of birth, PINFL, gender, place of birth, nationality, citizenship, passport/ID series and type, issuing authority and dates, registered and temporary address, region and district, the phone number and email registered with MyID, and the captured face photo. The face image is stored privately, used only to confirm your identity and attach it to your customer record, and is never shown publicly.

Purchases and contracts

Products you view and add to your cart, orders and installment applications you create, your fulfilment choice (branch pickup or courier delivery) and, for courier delivery, the delivery address and the map location you select, together with your installment payment schedule and payment history.

Credit information we receive from others

When you submit an installment application, we ask KATM, a licensed credit bureau in Uzbekistan, for your credit history. To make that request we disclose the identity data you verified with MyID — your full name, date of birth and PINFL. The bureau returns information about your existing credit obligations and your record of repaying them. We do not collect this information from you, and it is not stored in the app or on the app’s servers: it is held only in our customer-relationship system (CRM) and is used solely to assess your application. The app never shows it to you — it receives only the outcome, that is, whether your application is approved, your credit limit and the minimum advance payment.

Device and notification data

A push-notification token for your device and basic app/device context (app version and build, package identifier, language) so we can deliver notifications and measure advertising.

Usage analytics

In-app activity such as screens viewed, product views, cart and checkout steps, and non-identifying properties (your app language, whether your identity is verified, and the build type). We do not send your name, phone number, PINFL or passport data to analytics.

2. How we use your data

• Provide the service — create and secure your account, verify your identity, process installment applications and orders, arrange pickup or delivery, and let you track contracts and payments.
• Assess your installment application — including by requesting your credit history from the credit bureau KATM — and decide whether to approve it, your credit and the minimum advance payment.
• Send one-time passcodes and service notifications (for example scoring results, order status and payment reminders).
• Prevent fraud and abuse and enforce our rules (for example allowing only one active application or order at a time).
• Understand how the app is used to fix problems and improve it.
• Measure and improve our advertising.

3. Consent and your choices

Usage analytics and advertising measurement are enabled by default and you can turn them off at any time in the app under Profile → usage analytics. Some data — your phone number, identity verification, the credit-history enquiry described above, and order and contract information — is necessary to provide the service, so it cannot be switched off while you use those features. If you do not want us to request your credit history, do not submit an installment application; you can still buy at the full price.

4. Who we share data with

We disclose personal data in two different ways, and the difference matters for your rights.

Service providers acting on our behalf

These companies process your data only on our instructions and for the purposes we set; they may not use it for their own purposes:

• Google / Firebase — usage analytics (Google Analytics for Firebase) and push-notification delivery (Firebase Cloud Messaging).
• Eskiz — delivery of OTP SMS messages.
• Yandex — maps for the delivery-location picker, used only if you choose courier delivery.
• Sentry — error diagnostics, configured to exclude personal data such as phone, PINFL and passport.

We also record your order and identity data in our own operational systems (catalog and CRM) to fulfil your order and manage your contract.

Independent recipients

These organisations decide for themselves how they use the data we disclose to them. They keep their own records under their own rules, so we cannot delete or correct the copies they hold — for those you would need to contact them directly:

• MyID — Uzbekistan’s national identification service. It verifies your identity and keeps its own record of that verification.
• KATM — the licensed credit bureau. When you apply for installments we disclose your full name, date of birth and PINFL so that it can provide us with your credit history, and it retains a record of the enquiry.
• Meta (Facebook) — advertising measurement. Identifiers we send are hashed (SHA-256) before they leave our servers — your phone number and an account identifier and, once you are identity-verified, your PINFL, date of birth and country — together with an anonymous SDK identifier and the value of your purchase. With your consent (and, on iOS, if you allow tracking in the system prompt) we also collect your device advertising identifier (Google Advertising ID / Apple IDFA) to measure advertising; you can turn this off in Profile. Meta uses this data in its own advertising systems.

We do not sell your personal data.

5. Data retention

We keep your data for as long as you use the service and for as long as we are required to keep records of sales and installment contracts under the applicable law of the Republic of Uzbekistan (including accounting and tax obligations). Identity and contract records are retained for the periods required by law.

6. Security

Data is transmitted over encrypted connections (HTTPS). Face images are stored outside the public web area and are never served on the web. Access to personal data is limited to staff and providers who need it to run the service.

7. Eligibility

The service is intended for adults (18 years or older) who are able to enter sale and installment contracts. It is not directed to children.

8. Your rights

Subject to the applicable law, you may request access to the personal data we hold about you, ask us to correct it, and ask us to delete it (where we are not required to keep it). You can withdraw your consent to analytics and advertising at any time in the app. To make a request, contact us using the details below.

What a deletion request removes — and what it does not

Deletion is handled by our support team; there is no delete button in the app. How to ask, and what happens next, is set out on our Account deletion request page.

We remove your data from the app’s own database: your account, your identity record, and the face image held there. If you have no orders, no installment applications and no contracts — including contracts already paid off — we also remove your customer records from our operational systems (our catalog system and our CRM).

If you do have an order, an application or a contract, the records of that purchase are retained in those systems for the periods described in section 5 above, because we are required to keep records of sales and installment contracts. They are not removed by a deletion request.

Data held by the independent recipients named in section 4 — MyID, KATM and Meta — is outside our control. To have their copies removed or corrected, you must contact them directly.

9. International processing

Some of our providers (for example Google, Meta and Sentry) may process data on servers located outside Uzbekistan. Where that happens, we rely on those providers’ safeguards for such processing.

10. Changes to this policy

We may update this policy from time to time. When we do, we will change the “Last updated” date above. Significant changes may also be announced in the app.

11. Contact us

If you have questions about this policy or your personal data, contact us:

• Email: info@isell.uz
• Phone: +998 55 555 555 57
• Telegram: @isell_store_support_bot
• Address: Tashkent, Uzbekistan