1. Information We Collect

We collect three categories of information so we can deliver, secure and improve the Service:

• Information you provide. Account name, email, phone number, profile photo, government-issued identifiers (for couriers), banking / mobile-wallet details, parcel descriptions, pickup and drop-off addresses, recipient contact information, ratings and support messages.
• Information collected automatically. Approximate and precise device location, device identifiers, IP address, OS version, language preferences, in-app events, crash logs and Maps / Firebase analytics events.
• Information from third parties. KYC checks, fraud-prevention signals from payment processors, and details from social sign-in providers when you choose them.

2. How We Use Your Information

• Creating and authenticating your account.
• Matching senders with available couriers and producing ETA / fare estimates.
• Calculating fares, processing payments and issuing payouts.
• Sharing live order status with the parties to a delivery while it is active.
• Sending transactional notifications and, only with consent, marketing communications.
• Detecting fraud, abuse and safety incidents.
• Improving the Service through aggregated analytics.
• Meeting legal and regulatory obligations.

3. Location Data

With your permission we collect precise GPS location while you use the app, and in the background only when a rider is actively assigned to a delivery. You may revoke location permission at any time from your device settings.

4. Legal Bases

Where GDPR or equivalent laws apply, we rely on performance of a contract, legitimate interests, consent (for marketing / optional features), and compliance with legal obligations.

5. Sharing Your Information

We do not sell your personal data. We share it only with the other party to a delivery (limited details while active), service providers under contract (Firebase, Maps, payments, SMS, KYC), authorities when legally compelled, or in a corporate transaction subject to this Policy.

6. Data Retention

Account data is retained while active. Delivery and payment records are retained for at least seven years for tax compliance. Background location traces are retained for 90 days. Account deletion soft-deletes for 90 days, then permanently deletes or anonymises data except where law requires retention.

7. Your Rights

Subject to local law you may request access, rectification, erasure, restriction, portability, or withdraw consent. Contact privacy@tawseel.app. We respond within 30 days.

8. Security

We use TLS in transit, encryption at rest, scoped security rules, App Check, and least-privilege access. Report suspected compromises to security@tawseel.app.

9. Children

The Service is not intended for users under 18. We do not knowingly collect personal data from minors.

10. International Transfers

Data may be processed on Google Firebase / Maps infrastructure outside your country. Where required we rely on Standard Contractual Clauses and equivalent safeguards.

11. Changes to this Policy

Material changes will be communicated in-app and, where appropriate, by email at least 14 days before they take effect.

12. Contact Us