Privacy policy

Version 2026-10-29 · effective 29 October 2026

Cofilo only collects the data needed to run the service: your identity (first and last name; date of birth and gender only if you provide them), your phone number, your location (region, city), your saved Mobile Money numbers, the history of your orders and transactions, and your in-app activity (product links you paste, searches, cart, favourites). Date of birth and gender are optional: they are shared with neither our analytics provider nor our messaging and support provider.

This data is used to buy your items, track your orders, secure your payments and contact you about your orders. It is never sold or shared with third parties, except the providers described below, and the seller and their courier, who receive your forwarder’s details (address in China, recipient, phone, shipping mark) to ship your items. We also use this data to run and improve the service and to produce internal statistics, which only the Cofilo team can see. If you use a sponsor’s code, we record that referral link; your sponsor sees only anonymous figures, the number of their referrals, of their orders and their earnings, never your name, your number or your orders.

Your data is hosted securely and encrypted in transit. At any time, you can ask support for a copy of your data, and request the deletion of your account from Settings.

We use providers for hosting and authentication, error monitoring, analytics (to understand app usage), and messaging and support. Our error monitoring and analytics providers receive a pseudonymous account identifier, device information and usage events; our analytics provider may derive an approximate location from your IP address. Our messaging and support provider receives your name, your phone number, the messages you send to support and the details of the order or payment concerned. If you open the chat on cofilo.com without an account, it receives what you type, your IP address, browser details and the page address, and sets its own cookies to keep the conversation. When you visit cofilo.com, Cofilo measures visits without cookies, as it does in the app at app.cofilo.com: our measurement provider receives the page address, the referring site, browser details, load timings and your IP address, none of it tied to an account. Our 1688 product data provider supplies the 1688 items: it receives your search words, the 1688 links or item references read and your search photos, sent to find similar items and never kept by Cofilo, but not your name, your number or your account identifier. Your search words may be sent to our translation provider, without your name, your number or your account identifier. Payment information is processed by our Mobile Money payment provider and Mobile Money operators, and our text messages are sent by our SMS provider. The list of our providers is available from support on request.

Upon deletion of your account, we also ask our messaging and support provider and our analytics provider to erase what they hold about you. Accounting records (invoices, receipts, orders, payments, refunds and wallet movements) are kept for 10 years, as OHADA accounting law requires, without your phone number; the rest of your data is erased within 30 days of deletion. Error reports, which carry no name or number, expire on their own at our error monitoring provider within 90 days. An unpaid refund request is retained until it is processed. Profile photos are private and deletion is retried after technical failures. Photos you attach to a report on an order are private, seen only by you and the Cofilo team, and erased with your account.

Any question about your data: contact Cofilo support.