Privacy policy

Last updated 29 October 2026

Zaleo Auth is the shared account service for Zaleo apps (Kàddu, Sajda, Suuf and those that follow). It is run by Serigne Saliou Lo in Dakar, Senegal. This page explains what we process to sign you in, and why.

What we collect

• Your name, email address and, if you use Google, your profile picture.
• A hashed password, if you set one. We never see it in plain text.
• Session details: IP address, device and browser type, sign-in times.
• Which apps you have authorized and the permissions you granted.

Why

Only to authenticate you, keep your account safe (rate limiting, abuse detection) and share with a Zaleo app the details you explicitly allowed on the consent screen.

Sharing

We do not sell your data or use it for advertising. It is shared only with apps you authorize, with Google if you choose Google sign-in, and with our infrastructure processors: hosting and email delivery (Resend, EU region).

Retention and deletion

We keep your data while your account exists. You can revoke an app or permanently delete your account at any time from the Account page. Expired sessions are removed automatically.

Your rights

Under Senegalese law no. 2008-12 and, where it applies, the GDPR, you can access, correct or delete your data. Write to hello@zaleo.dev.

Cookies

We only use necessary cookies: your sign-in session (shared across *.zaleo.dev) and your language preference. No tracking cookies.