Privacy policy

Sarréh introduces private individuals to home service providers. For that introduction to be safe, we need to know who is who — and that means collecting personal information. This document says which information, why, who sees it, how long we keep it, and how you have it erased.

We wrote it to be read.

1. Who is responsible

Sarréh is published by D.T. SARL, a limited liability company incorporated under Cameroonian law with a share capital of 2,000,000 FCFA, trade register no. RC/DLA/2015/M/4050, registered office at 285 route Deïdo-Bassa, Deïdo – Grand Moulin, Douala, Cameroon.

For any question: contact@sarreh.com

2. What we collect

To create your account

Email address	to identify you and send your code
Password	to protect your account — it is never stored in clear text
Phone number	to reach you, and to let the provider call you

To verify your identity

This is the most sensitive part, and it is the heart of Sarréh: you are letting someone into your home, or going into someone else's. Both sides have the right to know who they are dealing with.

First and last name	to appear on your profile
Date of birth	to check that you are of age
Type, number and photos of your document	to compare with the declared name
Photo of you (selfie)	to check the document is really yours
Expiry date	to know when the check must be redone
Your former names	to stop a reported account reappearing under another name

These documents are examined by our team.

If you become a provider

Trade and services offered, years of experience, description, city, neighbourhoods covered, and the supporting documents specific to your trade — diploma, licence, vehicle registration, trade register, ministerial authorisation as applicable.

When you use the platform

Your listings	title, description, price, photos, hours
Your requests and bookings	who, what, when, where, how much
Your conversations	messages, photos, voice notes
Your GPS position	only if you tap « share my location »
Your reviews and reports	rating, comment, reason, any evidence

We do not track your location in the background.

Technically

Your IP address is used to limit sign-in attempts. It stays in memory for a few minutes and is not recorded. If you accept notifications, your browser gives us a technical device address, used only to send them.

No trackers, and therefore no banner to dismiss. Your browser keeps two things, on your device and not with us: the token that keeps you signed in for thirty days, and the language you chose. Neither is used to follow you, and signing out clears the first.

3. What we do not do

• We do not sell any data.
• We do no targeted advertising.
• We do not track your browsing on other sites.
• We do not use your documents for anything other than verification.
• We take no automated decisions about you: a suspension, a refused verification or the outcome of a report is decided by our team, never by a machine.
• Only two mechanisms run on their own, and they follow a rule written in advance and stated in the offer before you accept it — not a profile, not a score: the payout to the provider twenty-four hours after the evening reminder if nobody has raised anything, and the cancellation of a booking whose balance was not paid by the deadline. You can write to us to contest either one.

4. Who sees what

Other users see your name, your city, your profile photo, your verification level, your listings and your reviews. They never see your documents, your date of birth, your email, nor your phone number as long as no booking is under way.

The person you are dealing with additionally sees your number, and the address of the booking once the offer is accepted.

Our team accesses documents in order to verify them and reports in order to handle them. Our servers send each device only the information belonging to its own account holder.

Our technical providers, acting on our behalf:

Render	hosts the site and the data
Cloudflare	relay that speeds up access
Resend	sends our emails
Twilio	sends the codes by SMS
MooniePay	collects and pays out mobile money
Google / Apple	deliver notifications

The authorities, on a proper judicial request, and only to that extent.

5. Where your data is

Our servers are located in Europe. Your data therefore leaves Cameroon to be stored there.

6. How long

Your account	as long as it is open
Six-digit verification codes	10 minutes
Sign-in session	30 days
Photos of your identity document	destroyed as soon as the check is done
Your selfie	1 year after the verification
After a deletion request	30 days, then erased
Your payments and payouts	10 years after the transaction — accounting law

What deletion really erases

After the 30 days: your email, your phone, your city, your date of birth, all your documents and photos, your former names, your notifications and the reasons for any sanction. The payout method you had saved goes as well.

One exception: money. Every payment received and every payout made is kept for ten years after the transaction, with the name, the email address and the number used. Accounting law requires it — OHADA demands that books and their supporting documents be kept for ten years — and a payment record stripped of its counterparty would prove nothing in an audit. After those ten years it is erased in turn. No other data is subject to this period.

What remains, under an anonymous identifier: past bookings and conversations, because they belong to the other person too. Your name there becomes « Deleted user ». If nobody ever dealt with you, the account is deleted entirely, without a trace.

7. Your rights

• See what we hold about you
• Correct your name, your phone, your email, from « My personal information »
• Delete your account from the app, without going through us
• Object to notifications, in your communication preferences

Most of these actions happen directly in the app — see also Deleting your account. For anything else, write to contact@sarreh.com; we reply within 30 days.

8. How we protect all this

• Passwords are never stored in clear text (PBKDF2, 120,000 iterations).
• Exchanges with the app are encrypted (HTTPS).
• Your documents are accessible only to you and to our team: knowing an address is not enough to open them.
• Each device receives only the information of its own account holder.
• Reporting someone requires a verified identity.

No system is infallible. In the event of a breach affecting your data, we will inform you and the competent authority.

9. Minors

Sarréh is for adults only. If a service concerns a child, an adult opens the account and remains responsible for it. An account belonging to a minor is closed.

10. Changes

Any significant change will be announced in the app before it takes effect.

11. Write to us

contact@sarreh.com — D.T. SARL, 285 route Deïdo-Bassa, Deïdo – Grand Moulin, Douala, Cameroon.