Privacy Policy

This policy covers Chereta everywhere you use it: the website at chereta.com and the Chereta Android app. Both talk to the same account and the same data described below.

1. Information We Collect

When you use Chereta, we collect the following:

• Email address and username: collected at registration, to identify your account
• Password: stored only as an irreversible cryptographic hash — we cannot see or recover your actual password
• Saved tenders and alert preferences: the tenders you save, and the categories, regions, and keywords you choose for alerts — tied to your account
• Session cookies: a session identifier and, if you choose "remember me", a longer-lived login token — used only to keep you signed in, never for tracking or advertising
• Email digest opt-in: whether you've asked to receive tender alerts by email, and the address we send them to
• Subscription records: if you take a paid plan, the plan, amount, and payment method you tell us you used (bank transfer or Telebirr) — we do not process card payments and never see or store card numbers

2. What We Don't Collect

Chereta contains:

• No advertising and no ad networks
• No third-party analytics or tracking SDKs
• No location data
• No device identifiers (advertising ID, IMEI, etc.)

3. How We Use Your Information

We use your information to:

• Sign you in and keep your session secure
• Show your saved tenders and match new tenders against your alert preferences
• Send you the email digest, if you've opted in
• Keep basic accounting records for paid subscriptions

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:

• With service providers who assist in operating our platform, such as our email delivery provider for sending the alert digest (under strict confidentiality)
• When required by law or to protect our rights

5. Data Security

All traffic between the website, the Android app, and our servers is encrypted in transit (HTTPS/TLS). Passwords are never stored in plain text — only as salted cryptographic hashes. However, no method of transmission over the Internet is 100% secure.

6. Your Rights

You have the right to:

• Access and update your personal information
• Delete your account and data at any time — see how to delete your account
• Opt out of the email digest at any time

7. Contact Us

If you have questions about this Privacy Policy or your data, please contact us at: