Privacy policy
Last updated: 14 October 2026 · Version 1
Information you provide
When you create an account with email, we send your name, email address, and password to Supabase Auth. Phone sign-in sends your phone number to Supabase and its configured SMS provider for verification. Google sign-in shares the profile information you authorize, such as your name and email address, with Supabase Auth. Passwords are handled by the authentication provider and are not displayed in your profile. We also record the version of the terms you accepted and the acceptance time in account metadata.
How information is used
Account information supports registration, email confirmation, sign-in, and account access. Cookie preferences are used to remember your choices. We do not currently install optional analytics or advertising tools.
Shopping preferences
Your saved delivery address is used to choose categories, available products, and promotions. Signed-in users can save it to their account; we also store it in an HTTP-only cookie for 180 days. Without a saved address, our server uses your IP address with ipwho.is to estimate your area. If the lookup fails, Nigeria is used. We do not request GPS access. Wishlist product IDs and cart product IDs and quantities are stored in your browser until you remove them or clear browser storage; prices and stock are checked on the server.
Service providers
Supabase provides database and authentication services. The hosting provider processes requests needed to deliver the website. These services may process technical information such as IP addresses, browser details, and request logs to operate and protect their services.
Storage and retention
Account data remains with the authentication provider until it is removed through account administration. Session cookies expire or are cleared when you sign out. Phone verification and Google registration use temporary HTTP-only cookies lasting up to ten minutes. Your cookie preference expires after 180 days. Provider logs and backups follow the provider’s configured retention settings.
Your choices
You can change optional cookie preferences on the cookie policy page and sign out from your account. For account access, correction, or deletion requests, use the support contact supplied by the Klocal operator. A public support contact must be added before the service launches.
Before public launch
This initial policy describes the features currently implemented. The operator must add its business identity, support contact, hosting details, and applicable retention arrangements before accepting public registrations.