Privacy

Effective November 7, 2026. Bohra Store is operated independently by Muhammad Zoaib. Contact support@bohra.store about privacy.

What we collect

An account stores your name, email address, securely hashed password, hashed recovery code, country and city. Optional business profiles include your business name, description and Instagram link. We store the listings, photos, delivery offers, messages and reports you choose to submit. Seller declarations are used only to operate the community directory and are not public verification badges.

What other people see

Your published name, business profile, country/city, listings and delivery offers are public on the website and app. Email addresses and private messages are not public. Conversation participants can read messages; invited members must accept before receiving future messages. Do not put private addresses, identity documents or private travel details in a public post.

Photos and Instagram

Uploaded photos are resized and converted to JPEG, with original metadata removed. Instagram links open Instagram under its own terms and privacy policy. We do not import your Instagram catalogue or ask for your Instagram password.

Service providers and advertising

The application and its database are hosted using Railway. The mobile apps may display Google AdMob ads after applicable consent checks. Advertising can involve device information, approximate location, ad interactions and diagnostic information as described by Google. We do not send your community declaration, email, messages, name or Instagram account to the ad network as targeting parameters. Privacy choices are accessible in the app. Non-personalized ads can still involve storage and personal data processing.

Website cookies and ads

The public website works without an advertising cookie. If web advertising is enabled, Google AdSense may use cookies or similar storage, device and browser information, approximate location and ad interactions. Consent choices appear before supported web ads load; refusal or an unknown consent state prevents our ad loader from starting. Use “Ad privacy choices” in the footer of an ad-supported directory page to change a recorded choice. See how Google uses information from partner sites. Private messages, account recovery and administration pages do not display ads.

Storage and control

Authentication sessions expire after 30 days. You can close posts, edit your profile, block members and delete your account in the app. Account deletion removes profile data, listings, photos and sessions; your authored chat messages are replaced with a removal notice, while other participants’ messages remain. Reports and minimal moderation records may remain to investigate abuse. Encrypted backups in separate private storage are retained for up to 7 days.

Security and support

Private conversations require authentication. They are not end-to-end encrypted; an authorized operator may review reported conversations to address abuse. The platform is intended for adults aged 18 or older. Contact us to request access, correction or deletion, or to raise a concern. Data may be processed outside your country by the providers used to operate the service.