This policy explains how Tawseelat collects, uses, shares and protects your personal data. We have kept it plain on purpose: the app works by sharing your number with the driver who accepts your delivery, and you should know that before you sign up.

1. Who we are

Tawseelat is a platform in Muscat, Sultanate of Oman, that connects people who need something delivered with independent drivers. Privacy contact: tawseelat@alm3mri.com.

2. What we collect

Account

• The email address you sign in with. If you sign in with Apple, it is the address Apple gives us — your own, or a private relay address that Apple forwards to you — along with your name if you choose to share it.
• Your name, WhatsApp number and, optionally, a profile photo.
• Your current mode (customer or driver) and app language.

Orders

• Pickup and drop-off areas, and the address details you type.
• A description of the item, any photos you upload, and the price you set.
• The order's status and times, and which drivers accepted it.
• Addresses you choose to save for later.

Drivers

• Online status, and a daily count of accepted deliveries used to limit abuse.
• Ratings from customers (stars and an optional comment).

Safety and notifications

• Reports you make or that are made about you (reason and details), and the people you block.
• Your device's push notification token, its platform (iOS or Android) and notification language.

What we don't collect

• We don't access your device's GPS location; addresses are set by choosing an area and typing the details.
• We don't process payments or store card details; payment happens directly between customer and driver.
• We don't access your contacts, and we don't use advertising identifiers or ad tracking.

3. How we use it

• To run the service: showing deliveries to drivers, handling acceptances, and connecting the two sides on WhatsApp.
• To sign you in: emailing you a verification code, or confirming who you are through Sign in with Apple if you choose it.
• To notify you: telling online drivers about new deliveries, telling customers when a driver accepts, and occasional reminders or service announcements. You can turn notifications off in your device settings.
• For safety: ratings, reports, blocking, and daily acceptance limits.
• To operate and improve the service: aggregate statistics that don't identify individuals.

4. Who sees your data

Before a delivery is accepted

Online drivers see the pickup and drop-off areas, an approximate pickup point (to about 500 metres), the item description and photos, and the price. They don't see your name, number or address details.

After a driver accepts

A small number of drivers (currently up to three) can accept the same delivery. Each driver who accepts sees your name, photo, WhatsApp number and address details, because the delivery can't be arranged without them. You see each accepting driver's name, photo, rating and WhatsApp number. Coordination then happens on WhatsApp, under WhatsApp's own privacy policy; we can't see those chats.

Photos

Profile and order photos are stored at unlisted links, but anyone who has a link can open it. Don't upload photos that contain sensitive information.

No selling, no ads

We don't sell or rent your data, and we don't share it with advertisers.

5. Service providers and where data is stored

We use trusted providers that process data on our behalf and only on our instructions:

• Supabase: database, sign-in and photo storage, on servers in Mumbai, India.
• Google Firebase Cloud Messaging and Apple Push Notification service: delivering notifications.
• Brevo: sending sign-in code emails.
• Apple: Sign in with Apple, if you use it.
• Vercel: hosting this website.

This means your data may be transferred to and processed outside the Sultanate of Oman. We rely on providers that apply appropriate security safeguards.

6. Retention and deletion

• We keep your account data for as long as your account is active.
• Deliveries that nobody accepts close automatically after 48 hours and stay in your history.
• You can delete your account at any time from Settings → Delete account, or by email as described on the account deletion page. This deletes your profile, orders, saved addresses, the ratings, reports and block list tied to your account and your devices' notification registrations, and cancels any open orders.
• Photo files you uploaded are detached from your account on deletion. To have the files themselves permanently erased, email us and we will do so within 30 days.
• Backups may persist for a limited period before being overwritten.

7. Your rights

Under Oman's Personal Data Protection Law (Royal Decree 6/2022), you have the right to:

• Access your data and receive a copy.
• Correct it. You can change your name, number and photo yourself under Edit profile.
• Delete it. You can delete your account directly in the app.
• Object to processing or withdraw consent, including by turning off notifications.
• Complain to the competent authority in the Sultanate of Oman.

To exercise any of these rights, email tawseelat@alm3mri.com. We reply within 30 days.

8. Children

The app is for people aged 18 and over. We don't knowingly collect data from anyone younger.

9. Security

Data is encrypted in transit, and database access is restricted to the data's owner and to what the service strictly needs. No system is completely secure, however.

10. Changes to this policy

We may update this policy from time to time and will change the "Last updated" date above. If we make material changes, we will tell you in the app.

11. Contact

tawseelat@alm3mri.com · Muscat, Sultanate of Oman