Privacy policy

Accounts and scan allowances

Google and Lovable’s sign-in service handle Google sign-in. Lovable Cloud stores account and authentication information, including your email and account identifier. Your browser stores the sign-in session so the app can recognise your signed-in account. The app records daily scan usage and administrator access permissions to enforce allowances and restrict private pages.

For guests, a necessary browser cookie supplies a random browser identifier linked to daily scan counts. It is used for scan allowance enforcement, not for advertising.

Photos and product searches

The photo you choose is sent for Gemini image recognition through Lovable’s AI service, or Google when the owner configures a direct Gemini connection. The resulting product name is used to look up marketplace listings. Avoid including faces, documents or other personal information that is not needed to identify the product.

Product queries and listing requests may be processed by Firecrawl, the marketplaces, and AliExpress Open Platform when configured. Marketplace lookup responses are stored in Lovable Cloud for 24-hour reuse. This cache is separate from your daily photo allowance.

Information on your device

Recent searches and scans, photo thumbnails, saved deals and device preferences are stored in your browser. You can remove history and saved deals in the app or clear your browser’s site data. Temporary photo handoff and installation-prompt dismissal may be stored for a browser session. Cookie preferences are also stored in the browser. Clearing site data can sign you out and remove saved items.

Subscriptions and shopping links

When paid scans are enabled, Paystack receives your email and handles subscription checkout and payment details. MyMallBP stores transaction references, payment amounts and currency, payment dates, Paystack customer identifiers and paid-access expiry to verify access. MyMallBP does not receive your full payment-card details through this checkout.

Opening a shopping link takes you to the marketplace, which receives the search or referral details in the link and handles your visit under its own privacy policy. MyMallBP does not collect payments for marketplace orders.

Visitor analytics

On the published site, Lovable analytics measures pages visited, where visitors came from, country, browser, operating system, device type, time spent, page-load speed and errors. It also measures button and link clicks, product-search actions and marketplace-shopping actions sent by the app.

Clicks and app actions are held back until analytics is accepted for visitors in the EU/EEA, the UK, Switzerland and Canada, and where the visitor’s region cannot be determined. Elsewhere they are recorded unless the visitor rejects analytics. They are never recorded when the browser sends Global Privacy Control, even if analytics was accepted. Your choice is saved in your browser for up to 12 months.

Page visits, time on page, page speed and errors are recorded for every visitor without cookies and without identifying anyone. Lovable analytics stores nothing on your device, does not keep IP addresses and does not recognise returning visitors. Detailed data is kept for 90 days and daily summaries for a year.

Lovable collects this data for us. Lovable’s privacy policy explains how it handles it. Private app reports show aggregate search and shopping activity, not individual visitor identities.

Other service providers

The app loads fonts from Google Fonts and product images from the listing’s image host. Those requests expose normal connection information to the provider. Google, Lovable, Firecrawl, Paystack and each marketplace handle the information they receive under their own policies. Service-provider processing may occur outside Nigeria.

Your choices and questions

Use Cookie settings to accept or reject optional analytics actions. You can sign out, delete browser history and saved deals, and stop uploading photos. To ask about access, correction or deletion of account-related information, or to raise a privacy concern, contact info@mymallbp.com. DEO360 Digital Solutions can explain which records are needed for account operation, payment verification or legal obligations; this notice does not promise an unconfirmed deletion or retention deadline.