Last updated: 23 October 2026

Privacy Policy

Flexy Pro operates the Flexy Pro website at https://flexy-pro.com and the Flexy Pro Android app. Shops in Algeria use Flexy Pro to sell mobile credit, pay bills, sell cards, and move wallet balance. This policy explains what personal data we collect, why we use it, who we share it with, and how you can ask us to delete your account. You can read this page without creating an account or signing in.

Flexy Pro is a business service for shop owners and their staff. It is not directed at children.

Information we collect

Account data. First name, last name, username, phone number, and email address if you choose to provide one. Your password and optional 4-digit security PIN are stored only as cryptographic hashes. We use this data to create your account, sign you in, and reset your password.
Store and address. Store name, street address, wilaya, daira, and baladya. You type this address yourself. We do not collect GPS location or precise device location.
Customers and transactions. Phone numbers you recharge, phone numbers attached to cards, bill account details, amounts, the operator, and the result of each operation. Also wallet balances and transfers, CCP account number and key, and payment receipt images you upload. We use this data to carry out the operation you request and to show you your history.
Security and support. Last sign-in time, failed sign-in attempts, and support messages you send us, including files you attach.
Push notifications. When you use the Android app, we store a Firebase Cloud Messaging token and the platform name (Android). We use that token only to send service notifications, such as a sign-in greeting or an operation update. We do not collect a hardware device identifier or an advertising ID.
Password-reset codes. Your phone number and a one-time code, so we can text the code and let you set a new password.
Cookies on the website. A sign-in session cookie, an optional remember-me cookie, a language cookie, and a security cookie that protects forms. These cookies are required to run the site. We do not use advertising cookies.

Why we use your data

Create, secure, and manage your account.
Process mobile credit, bills, cards, and wallet transfers, and keep your transaction history.
Send service notifications and password-reset codes.
Detect fraud, abuse, and unauthorized access.
Comply with Algerian law.

We do not sell your personal data, and we do not use it for third-party advertising.

Who we share data with

We share personal data only to run the service:

Mobile operators and top-up or bill providers, including Mobilis, Djezzy, Ooredoo, Idoom, and OneClickDz. They receive the destination phone number or bill account, the amount, and the operation result so they can complete the request.
Our SMS provider, SMSSAK, receives your phone number to deliver one-time codes. SMSSAK sends those messages through Google infrastructure.
Google Firebase Cloud Messaging receives the push token and the text of the notification.
When database backups to Google Drive are turned on, those backups can include account and transaction records.
Payment receipt images you upload are stored on servers we operate for Flexy Pro. They are not sold or published.
Public authorities, when Algerian law requires us to disclose information.

How we protect data

We protect the service with HTTPS, hashed passwords and security PINs, access controls, and a temporary lockout after repeated failed sign-in attempts.

How long we keep data

We keep account data while the account is open. After we confirm a deletion request, we close the account within 30 days, delete its Firebase Cloud Messaging token, and stop using the account. Recharge, payment, invoice, and wallet records, including CCP details and receipt images, are business records. We keep them for the period Algerian accounting and telecommunications rules require, and we do not use them to operate a closed account.

Your rights under Algerian Law No. 18-07

Under Articles 34 to 40 of Law No. 18-07, you may ask to access your personal data, correct it, object to a processing operation, or request deletion. Use the contact details on this page. You may also file a complaint with the National Authority for the Protection of Personal Data (ANPDP).

Delete your account

You can request deletion of your account and personal data without signing in and without installing the app. The steps, what we delete, and what we are required to keep are on the deletion page: Delete account

Changes to this policy

When we change this policy, we update the date at the top of this page.