Privacy Policy

Effective Date: 1st August, 2026

1. Introduction

This Privacy Policy explains how the Aalo Retailer App ("Aalo", "we", "us") collects, uses, shares and protects your information when you create an account or use the app. Aalo is operated by Mokam Limited (ShopUp), [registered office address], Dhaka, Bangladesh. This policy should be read together with the Aalo Retailer App Terms and Conditions. By using Aalo, you agree to the practices described here.

2. Who Can Use Aalo

Aalo is a business application for retail shop owners and their authorized representatives. It is not intended for children, and we do not knowingly collect information from anyone under 18 years of age. If you believe a minor has provided us information, contact us and we will delete it.

3. Information We Collect

3.1 Information you provide

  • Mobile number
  • Name of the shop owner or authorized representative
  • Shop name
  • Shop location (district, zone or area)
  • Your security PIN, stored only in encrypted form
  • Messages, queries and feedback you send through in-app support or quick replies

3.2 Information collected automatically

  • Device information such as device model, operating system version and app version
  • A device or installation identifier used to keep your session secure
  • App activity such as screens opened, offers viewed and messages opened
  • Crash reports and diagnostic logs
  • Notification token, used only to deliver push notifications

3.3 Information from your sales representative

When a brand's sales representative onboards you through Aalo Connect, they may submit your shop name, mobile number and shop location so your account can be created.

3.4 What we do not collect

Aalo does not collect payment or financial information, bank or card details, national identity numbers, contacts, SMS, call logs, precise GPS location or health information.

4. How We Use Your Information

  • Creating your account and verifying it is you, using your mobile number, OTP, PIN and device identifier
  • Showing you the offers, product updates and announcements from your brands
  • Sending service notifications and campaign messages
  • Answering your support queries
  • Keeping the app secure and preventing misuse
  • Fixing problems and improving the app
  • Reporting engagement to the brand that onboarded you, as described in section 5

5. How We Share Your Information

5.1 With the brand that onboarded you

Aalo connects you directly with the brands you stock. The brand that onboarded you can see your shop name, shop location, registered mobile number, and your activity on that brand's content, such as which offers you viewed and which messages you responded to. This is how brands send you relevant offers and respond to your queries. Each brand can only see the data connected to its own relationship with you. One brand cannot see another brand's data.

5.2 With service providers

We use trusted providers to run the app, including cloud hosting and database services, SMS gateways for OTP delivery, push notification services, and analytics and crash reporting tools. They may process your data only on our instructions and only to provide these services.

5.3 For legal reasons

We may disclose information where required by applicable law, a court order or a lawful request from a government authority, or to protect our rights, safety, or the security of the platform.

5.4 Business transfers

If our business is merged, acquired or reorganized, your information may be transferred as part of that transaction, subject to this policy.

5.5 What we never do

We do not sell your personal information to any third party, and we do not share it with advertising networks.

6. Notifications and Marketing

By using Aalo you agree to receive service notifications, platform updates, and promotional offers and campaigns from the brands you are connected to. You can turn off promotional notifications in your device settings or by contacting us. Essential service messages, such as security and account notices, will continue.

7. App Permissions

  • Notifications: to deliver offers, announcements and support replies
  • Camera: requested only if you scan a QR code or attach a photo to a support query
  • Photos and media: requested only when you choose to attach a file
  • Internet and network state: to connect to our servers and to work correctly on a weak network

You can withdraw any permission at any time in your device settings. Some features may not work if you do.

8. How We Protect Your Information

  • Data is encrypted in transit and at rest
  • Sign in is limited to registered mobile numbers and protected by OTP and PIN. Your PIN is stored in encrypted form and is never visible to us
  • Access is role based, and each brand's data is logically isolated from every other brand
  • Key actions are logged and access is monitored
  • Aalo will never ask for your OTP or PIN outside the app. Do not share them with anyone, including anyone claiming to be from Aalo, ShopUp or a brand.

No system is completely secure. While we work to protect your information, we cannot guarantee absolute security.

9. How Long We Keep Your Information

  • Account information is kept while your account is active
  • After you request deletion, personal information is removed within [30] days, unless we are required to keep it longer by law
  • Support conversations are kept for [12] months
  • Aggregated or anonymized data, which cannot identify you, may be kept indefinitely for analysis and service improvement

10. Deleting Your Account and Data

You can request deletion of your account and personal data at any time.

  • In the app: Profile, then Account Settings, then Delete Account
  • By email: send an email to aalo@shopup.org

When your account is deleted, we remove your mobile number, name, shop details and support history. Records we are legally required to retain, and anonymized data that cannot identify you, may be kept.

11. Your Choices

  • Ask for a copy of the personal information we hold about you
  • Ask us to correct information that is wrong or out of date
  • Ask us to delete your account and data
  • Turn off promotional notifications
  • Withdraw app permissions in your device settings

To make any of these requests, contact us using the details in section 14. We will respond within [30] days.

12. Where Your Data Is Stored

Your information is stored on secure cloud servers that may be located outside Bangladesh. Wherever it is stored, it is protected by the safeguards described in this policy.

13. Changes to This Policy

We may update this policy from time to time. The effective date at the top of the page will change, and material updates will be notified in the app. Continuing to use Aalo after an update means you accept the revised policy.

14. Governing Law

This Privacy Policy is governed by the applicable laws of Bangladesh.