Privacy Policy

Service and responsible team

This policy applies to the MMobi.kz app and related service pages at mmobi.kz. The MMobi.kz team is responsible for processing data. Contact mmobi.uae@gmail.com or the official Instagram account @mmobi.kz for privacy, correction or deletion requests. Last updated: 23 October 2026.

Use without an account

The catalogue, product photographs and specifications, favorites, cart and mini-games can be used without registration. At launch, enquiries and delivery are fulfilled in Kazakhstan. Browsing from another country does not imply that delivery is available there.

Account information

Registration collects your first name, surname, Kazakhstan mobile number, password and optional email address. The number is a login identifier and contact detail; phone-and-password registration does not verify ownership by SMS. Passwords are stored as salted, slow password hashes, never as plain text. Random session tokens are issued for sign-in; only their hashes are kept on the server.

Enquiry information

When you submit an enquiry, we receive your name, surname, phone, optional email, selected product and variant, quantity, selected city, submission time, consent and enquiry identifier. Enquiries submitted while signed in are linked to that account. Earlier guest enquiries are not attached solely because their phone number matches.

Technical information

Connections necessarily disclose network information such as IP address and request time for response delivery, abuse prevention and security. This information is not used for advertising tracking. Website referrals and UTM tags may be stored with a website enquiry when available. The app does not collect browsing history from other apps or websites.

Purposes

We use data to create and protect accounts, respond to enquiries, confirm availability, final price and delivery, show enquiry history and status, check warranty codes, handle correction and deletion requests, and operate and secure the service. An enquiry is not a payment, loan or instalment agreement. This app version does not collect card numbers or bank payment credentials.

Information on your device

Favorites, cart, game scores and guest enquiry history are stored locally. On iOS, the session token is stored in this device’s protected Keychain; the app does not retain your password on the device. Catalogue and games do not require contacts, photo library or microphone access. In the city picker you may tap Detect city and allow location access while using the app. Coordinates are processed only on your device to find the nearest supported delivery city. Only the selected city is sent with an enquiry; precise coordinates are neither retained nor uploaded. Permission is optional and you can choose your city manually.

Camera and external links

Camera access is optional and requested only to scan a warranty QR code. Camera photographs and video are not uploaded. You can type the code instead. Kaspi, Instagram, MMobi and other external links open only when you choose them and are subject to their respective policies. Browsing product cards does not send your contact details to Kaspi.

Access and service providers

Authorized MMobi staff access enquiries to respond to customers. Hosting and infrastructure providers may process information on our instructions for service operation, with an obligation to apply equivalent protection. Processing may occur outside your country. We use HTTPS and access restrictions; no internet transmission can be guaranteed absolutely secure. Sending an enquiry does not automatically share contacts with banks or delivery companies. Any transfer needed for an agreed order is discussed separately. We do not sell personal data or use it for cross-service advertising tracking.

Retention

We retain an account until you delete it or it is otherwise no longer needed. Sessions expire within 30 days; sign-out revokes the current session. Enquiries are retained during handling, support and related obligations or until deletion, unless specific records must be retained by law. Minimal security information is retained only as needed for service operation and protection. Protected backups are replaced through normal rotation; deleted data is not restored to active service from them.

Control, consent and deletion

Open Profile → MMobi account → Delete account and data, confirm and enter your current password. This removes the account, sessions, account contact data and its linked enquiries. Delete guest enquiries separately in Profile → My enquiries → Delete enquiry and contacts. Local device data can also be cleared in Profile. For enquiries made as a guest or from a different device, contact support so we can locate them. If you cannot access the app, email mmobi.uae@gmail.com; we will verify ownership and confirm the outcome. Never send passwords, SMS codes or bank card details.

Demo profile and children

Demo sign-in creates an isolated ordinary customer environment. It grants no administrator access and exposes no other customer data. Demo enquiries do not reach managers and do not require real contact information. The service is not designed specifically for children. Purchases and order confirmation should be made by an adult or with a legal representative. Contact support if a child’s data was submitted by mistake.

Policy changes

Updates are published here with a new date. If purposes or categories of processing change, we update the disclosure and request separate consent before processing when required.

Warranty registration on the website

At mmobi.kz/warranty/activate we collect a first and last name, a mandatory Kazakhstan mobile number, optional email, device model, IMEI and/or serial number, activation date, registration reference and consent. We use this information to register the warranty, later reconcile device records, provide support and send one notification when the MMobi app becomes available. A pre-existing sales inventory entry is not currently required. Website registration does not create an app account or verify phone ownership by SMS. Only authorized staff can access the protected records. We do not send these details to Apple, advertising services or banks. Records are retained for warranty service and related obligations. To correct or delete data, or withdraw notification consent, email mmobi.uae@gmail.com with the registration reference. We verify ownership before deleting records.