Privacy Policy
Last updated: 1 July 2026
This Privacy Policy explains how SourceFlow ("SourceFlow", "we", "us") collects, uses, and protects your information when you use the SourceFlow mobile application and related services (the "Service"). By using SourceFlow, you agree to this policy.
1. Who we are
SourceFlow is a cross-border shopping service that lets you source and purchase products from China's 1688 and Taobao marketplaces, with prices shown and paid in your local currency — Nigerian Naira (NGN), US Dollars (USD), British Pounds (GBP), or Canadian Dollars (CAD) — and orders delivered to you. If you have any questions about this policy or your data, contact us at [email protected].
2. Information we collect
We collect the following information so we can provide the Service:
| Data | Why we collect it |
|---|---|
| Name | Create and manage your account; label your orders |
| Email address | Account login, password resets, order and receipt emails |
| Phone number | Delivery coordination and order notifications (including WhatsApp) |
| Delivery address | Fulfil and deliver your orders |
| Wallet balance & transaction history | Operate your in-app wallet (NGN, USD, GBP, or CAD) and show your credits and debits |
| Order & purchase history | Process orders and let you track them |
| Search & cart activity | Provide product search and cart functionality |
| Photos / camera images | Only when you use image-based product search, and only the image you choose |
| Push notification token | Send you order and shipping notifications |
3. Payments
Wallet top-ups and payments are processed by Flutterwave, a third-party payment provider. When you top up your wallet, your card or bank details are entered directly into Flutterwave's secure checkout. SourceFlow does not store your card numbers or full bank details. We only store your resulting wallet balance and a record of the transaction. Flutterwave's handling of your payment data is governed by its own privacy policy.
4. How we use your information
- To create and secure your account and log you in.
- To process your orders, payments, and wallet transactions.
- To translate and display product information in English and calculate prices in your chosen currency (NGN, USD, GBP, or CAD) using live exchange rates.
- To deliver your orders and keep you updated on their status.
- To send you notifications by push, email, and WhatsApp about your orders.
- To provide customer support and respond to your requests.
- To detect, prevent, and address fraud, abuse, or technical issues.
5. How we share information
We do not sell your personal data. We share information only with service providers that help us run SourceFlow, and only as needed:
- Flutterwave — payment processing.
- Product data providers (1688/Taobao data via our catalog provider) — to fetch and translate product listings.
- Cloudinary — hosting product images.
- Resend — sending transactional emails.
- Twilio / WhatsApp — sending order notifications.
- Expo / Google (FCM) — delivering push notifications.
- Hosting and error-monitoring providers — operating and maintaining the Service.
We may also disclose information if required by law or to protect our rights, users, or the public.
6. Data security
All data transmitted between the app and our servers is encrypted in transit using HTTPS/TLS. We use industry-standard measures to protect your information. No method of transmission or storage is completely secure, but we work to protect your data and limit access to it.
7. Data retention
We keep your information for as long as your account is active or as needed to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymise your personal data, except where we must retain certain records (for example, transaction records) to meet legal or financial obligations.
8. Your rights & account deletion
You can access, correct, or delete your personal data. You may delete your account and associated data at any time — see our Account Deletion page, or email [email protected]. We will action verified requests within a reasonable time.
9. Children
SourceFlow is not directed to children under 13 (or the minimum age required in your jurisdiction), and we do not knowingly collect data from them. If you believe a child has provided us data, contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Continued use of the Service after changes take effect means you accept the updated policy.
11. Contact us
Questions about this policy or your data? Email [email protected].