1. Data we collect
- From your sign-in account: your name and email address from Google, Apple or Facebook, depending on which you choose. We never receive your password.
- Sign-in sessions: when you sign in, the session's time, your device type and your IP address are recorded to protect your account from unauthorised access.
- Your addresses: the address label (such as "Home"), the address, a phone number for the courier, and your notes for them.
- Your orders: the products, prices, store, order status and when it changed. When you place an order we save a copy of your name, phone number, address and notes with it, so the order does not change if you edit your address later.
- Your cart: stored only on your phone until you place the order.
- Notifications: a notification token for each device you sign in on, so we can tell you about your orders. We ask for permission after your first order.
- Crash data: when something goes wrong we record technical details of the error, your device model and operating system, the app version and your account ID — not your name, email or IP address.
We do not collect your location, contacts, photos or payment details.
2. How we use your data
- To fulfil your orders and send them to stores.
- To tell you the status of your orders.
- To sign you in and protect your account.
- To fix errors and improve the app.
- To enforce the terms and prevent fake orders.
We do not sell your data or use it for advertising.
3. Who we share your data with
The store you order from: your name, phone number, address, notes and the order contents, so it or its courier can prepare and deliver it. Our terms require stores to use these details for your order only, with no marketing messages and no sharing beyond their courier.
Technical service providers: we use companies that provide technical services to run the app, such as server hosting, the database, sign-in, serving photos, notifications and crash reporting. They process your data on our behalf and only as much as their service needs, may not use it for their own purposes, and are chosen to protect it at least as well as this policy describes.
Your sign-in provider: Google, Apple or Facebook, whichever you choose, under its own privacy policy.
Your phone's notification service: from Google or Apple. Notification text passes through it, such as the order number and store name.
These companies' servers are outside Iraq, mostly in the European Union and the United States, so your data is processed outside Iraq. We may also disclose your data if Iraqi law or an order from a competent authority requires it, or to protect someone's safety.
4. Retention and deletion
We keep your data while your account exists. When you delete it:
- Immediately: we erase your name and email, delete your saved addresses and your devices' notification tokens, and your sign-in account is deleted. Your current orders are cancelled and the store is told, and we erase your name, phone number, address and notes from all your past orders.
- What we keep: the record of your past orders without your personal details (products, amounts and dates), because it is part of the stores' records. Stores see it as «زبون» ("customer").
- Backups: deleted data disappears from our backups within 30 days.
- Crash reports: deleted automatically within 90 days.
5. Your rights
- Edit or delete your addresses at any time from "My account" → "Addresses".
- Ask us for a copy of your data, to correct it, or to delete what can be deleted, using the contacts below. We reply within 30 days and explain if we must keep anything and why.
- Delete your account from "My account" → "Delete account", or follow the steps on our account deletion page.
- Turn off notifications in your phone's settings.
6. Protecting your data
Your data travels between the app and our servers over an encrypted connection, we store no passwords, and your sign-in session is kept in your phone's secure storage. Access to data is limited to what running the service requires. No system is completely secure, so tell us immediately if you suspect someone else has accessed your account.
7. Children
The app is meant for adults; anyone under 18 uses it with the permission of a parent or guardian. If you learn that a child has given us their data without permission, contact us and we will delete it.
8. Changes to this policy
We may change this policy. We will update the "Last updated" date and announce important changes in the app before they take effect.
9. Contact us
- Email: ma6640788@gmail.com
- WhatsApp: +964 783 026 7250