This page is maintained by the Connecto Africa team to answer common security and privacy questions about the app. It is app-owned editable content, not an independent certification.
Sign-in is handled by our managed authentication provider using email + password and optional social sign-in. Passwords are hashed at rest and checked against the Have I Been Pwned database to block known-compromised credentials.
Sessions are short-lived and refreshed automatically; you can sign out at any time.
User data is protected by row-level security policies in our database. You can only read, edit, or delete records that belong to you. Notifications can only be created by the user performing the action.
We store the content you create in the app: profile details, posts, comments, messages, marketplace listings, and media you upload. We don't sell your personal data to third parties.
Uploaded media is restricted to common image, audio, and video file types and is scoped to your user folder.
The app runs on Lovable Cloud, which provides managed hosting, a Postgres database with row-level security, encrypted storage, and authentication. This describes enabled platform capabilities — it is not an independent certification of Lovable.
We use first-party cookies/local storage only for keeping you signed in and remembering UI preferences. We do not run third-party advertising trackers.
To request data deletion, ask a privacy question, or report a security issue, contact the Connecto Africa team through the in-app support channel or the email listed in your account settings.
Shared responsibility: Lovable provides platform capabilities; the Connecto Africa team is responsible for how the app uses them. This page does not promise specific regulatory certifications (GDPR, HIPAA, SOC 2, etc.).