Privacy Policy for the Top Market Mobile App
Effective Date: 5 October 2026
Top Market provides the Top Market mobile application, previously referred to as Top Market CRM, for its loyalty customers in the Democratic Republic of the Congo.
This Privacy Policy explains what personal information we process, why we use it, how we protect it, and how you can contact us about your information. It applies to the mobile app and the services supporting it.
1. Information We Process
We process information from your existing Top Market loyalty account, information you provide, and technical information generated when you use the app.
This may include:
Customer information: name, phone number, loyalty customer identifier, loyalty card number and type, and other profile details held in your loyalty record, such as email address or date of birth.
Loyalty activity: points balance, shopping transactions, points earned or redeemed, transaction dates, and related store information.
Gift Points activity: sender and recipient identifiers, points transferred, transfer references, dates, status, and related balance and security records.
Authentication information: OTP verification records, session tokens, trusted-device records, and a protected representation of your account PIN.
Device and notification information: an app installation identifier, device name, operating-system platform, and push notification token.
Technical and security information: IP address, request metadata, timestamps, error logs, and records of unsuccessful verification or PIN attempts.
Support information: information you choose to provide when contacting us.
The app does not collect payment card numbers, card security codes, or bank account credentials.
2. How We Use Your Information
We use this information to:
Verify your identity and provide access to your loyalty account.
Display your digital loyalty card, QR code, points balance, and transaction history.
Process and record Gift Points transfers.
Maintain login sessions and recognize trusted devices.
Protect your account through PIN verification, verification-attempt limits, and other security controls.
Send loyalty, points, birthday, reward, and account notifications.
Respond to support enquiries and privacy requests.
Diagnose technical problems, prevent misuse, and maintain the app.
Meet applicable legal obligations.
Birthday messages use the date of birth held in your loyalty record, where available.
3. Phone Verification, Sessions, and PIN Security
The app uses your phone number to identify your loyalty account. SMS one-time password verification is used when required, including initial access from an untrusted installation.
After successful verification, the app may retain secure session credentials and trusted-device information on your device and our servers. This allows continued access without requiring an SMS code for every visit.
Your account PIN is used for app unlocking and Gift Points security. PINs are stored on our servers as protected hashes, rather than as readable PIN values.
Signing out ends the current app session. Trusted-device information may remain to support later sign-in. Uninstalling the app does not itself delete your account or server records.
4. Gift Points and Information Visible to Other Customers
When you check a recipient or send points, the app may show a limited or masked name and phone number to help identify the account.
We record the transfer details and update the relevant loyalty balances. Each party can view information about transfers they sent or received.
A transfer does not give the other customer access to your complete profile, shopping history, account PIN, or total points balance.
5. Push Notifications
We use Firebase Cloud Messaging to support push notifications. This involves processing a device notification token and relevant technical information.
You can disable notifications through your device settings. Disabling them does not delete your account or prevent you from viewing your loyalty information in the app.
Notification previews may be visible on your device’s lock screen depending on your settings.
6. Sharing Information
Top Market does not sell your personal information.
We disclose relevant information to service providers when needed to operate the app, including:
Infobip: your phone number and verification-message information for SMS OTP delivery.
Google/Firebase: notification tokens, notification content, and technical information needed to deliver push notifications.
Hosting and infrastructure providers: information needed to store data, operate the API, and maintain security.
Authorized Top Market personnel may access information when necessary for customer support, loyalty administration, security, or privacy requests.
We may also disclose information when required by law or necessary to investigate fraud or protect customer accounts.
Service providers may process information outside the Democratic Republic of the Congo.
7. Data Security
We use technical and organizational measures to protect personal information, including HTTPS communication, authentication controls, protected PIN storage, and access restrictions.
No electronic service can guarantee complete security. Keep your OTP and PIN confidential and protect access to your device.
8. Data Retention
We retain account and loyalty information while needed to provide the loyalty service. Authentication, device, notification, and technical records are retained according to their operational and security purposes.
After a verified deletion request, information that is no longer needed will be deleted or anonymized. Certain transaction or security records may be retained where necessary to meet legal obligations, resolve disputes, or prevent fraud.
Any retained information remains protected and its use is limited to the reason for retention. Backup copies may remain until they are removed through the normal backup lifecycle.
9. Your Choices and Deletion Requests
You can contact Top Market to request access to your information, corrections, or deletion of your app account and associated personal information, subject to applicable requirements.
To request deletion, contact Ets.Topmarket@gmail.com with the subject “Top Market App — Account Deletion Request.” Provide the phone number associated with your loyalty account so we can identify it.
We may need to verify your identity before processing the request. Do not send your OTP or PIN.
We will explain any information that must be retained and the reason for retaining it. Where relevant, we will also explain how the request affects your underlying loyalty membership and points.
Deleting the app from your phone, signing out, or disabling notifications does not submit an account deletion request.
10. Children’s Privacy
The app is not directed to children under 13. We do not knowingly collect personal information through the app from children under 13.
If you believe a child has provided personal information through the app, contact us so we can investigate and take appropriate action.
11. External Services
Support links, calls, WhatsApp links, website links, and map links may open external applications or websites.
Information you provide to those services is governed by their own privacy policies. This policy does not cover their independent handling of your information.
12. Changes to This Policy
We may update this policy as the app or our information practices change. The revised policy will appear on this page with an updated effective date.
Where required, we will provide additional notice of significant changes.
13. Contact Us
Top Market
App: Top Market
Email: Ets.Topmarket@gmail.com
Phone: +243 823 333 243
Address: Sq. G. A. Forrest, Lubumbashi, Democratic Republic of the Congo
Website: https://www.topmarketrdc.com
Contact page: https://www.topmarketrdc.com/contact-us