Official Privacy Policy
1. Overview & Data Controller
We are dedicated to safeguarding your personal information and your right to privacy. This policy covers all users of our mobile application, web services, and APIs.
2. Categories of Data Collected
We collect essential information required to provide business listings, customer discovery, and platform security: account credentials (name, email, phone number), user-generated media (photos, reels, reviews), approximate and precise location coordinates for nearby discovery, and diagnostic device information.
3. Mobile Permissions
The app requests location access to find nearby businesses, camera and storage permissions to upload business and review media, and notification permissions for important account alerts.
4. Data Sharing & Security
We strictly do not sell, rent, or trade your personal information to third parties. All data in transit is protected via TLS/HTTPS encryption, passwords are salted and hashed, and databases are strictly access-controlled.
5. Account and Data Deletion
Users possess the unconditional right to permanently delete their account and personal data at any time either via the in-app settings or through our online web deletion portal.
1. Overview & Data Controller Identity
Welcome to 3alwajha ("we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. This policy applies to all users of our mobile application, web platform, and related APIs.
This Privacy Policy is designed to satisfy the highest international standards for data safety, transparency, and personal security. We never sell your personal data to third parties under any circumstances.
2. Categories of Personal Data We Collect
We collect only the minimum personal information required to deliver our business discovery, listing verification, and community networking services:
| Data Category | Specific Examples | Purpose & Basis |
|---|---|---|
| Account & Identity | Full Name, Email address, Phone number, Hashed password | Account registration, secure authentication, password resets |
| Location Data | Precise & Approximate GPS coordinates (Latitude & Longitude) | Displaying nearby businesses, calculating distances, interactive map view (only with explicit consent) |
| User Generated Content & Media | Photos, Videos, Stories, Reels, Reviews, Ratings, Comments, Direct messages | Publishing business listings, social engagement, customer-business communication |
| Device & Technical Logs | IP address, device model, OS version, unique app instance ID, crash reports | Fraud prevention, technical reliability, diagnostics, and security |
3. How We Use Your Personal Data
We process your personal information strictly for the following legitimate purposes:
- To provide, maintain, and enhance local business directory and discovery features.
- To allow verified business owners to manage listings, hours, amenities, and media.
- To facilitate verified user reviews, prevent spam, and maintain community integrity.
- To deliver customer support and resolve user troubleshooting requests.
- To ensure platform security, enforce terms of service, and comply with legal requirements.
4. Mobile App Permissions Disclosed
The mobile application requests the following device permissions only when explicitly needed for app functionality:
- Location Permission: Used to display nearby businesses, calculate distance, and render map views. Requested only when opening map or nearby discovery. Can be revoked at any time via device settings.
- Camera Permission: Allows taking photos and videos directly to post as business photos, stories, reels, or review attachments.
- Media Storage Permission: Enables selecting photos and videos from your gallery to upload to your profile, review, or business showcase.
- Notification Permission: Sends important transaction updates, account confirmations, review replies, and support notifications.
5. Data Sharing & Third-Party Service Providers
We do not sell, rent, monetize, or trade your personal information, contact records, or activity logs with any third-party advertisers or brokers.
We only share data with essential, audited infrastructure service providers necessary to operate the application:
- Secure cloud hosting and encrypted database infrastructure.
- Map tile and geolocation service providers to render maps and route distances.
- Transactional email delivery systems for account verifications and security notices.
6. Account & Data Deletion Policy & Instructions
Full User RightYour Absolute Right to Permanent Deletion
The 3alwajha platform provides an easy, transparent path for users to delete their account and all associated personal data directly within the app, via dedicated API, or via our public web deletion portal.
Method 1: In-App Account Deletion Steps
- Open the 3alwajha app on your mobile device.
- Navigate to your "Profile" tab from the bottom navigation bar.
- Tap the "Settings & Security" gear icon.
- Select "Delete Account & Data".
- Confirm deletion with your password. You will be logged out and your data purged.
Method 2: Web Deletion Request Portal (Without Reinstalling App)
If you have uninstalled the app or lost device access, you can submit an official deletion request via our dedicated web portal:
What Data is Deleted vs Retained?
- Permanently Purged: Account credentials, name, email, phone number, avatar, auth tokens, saved bookmarks, and direct messages.
- Anonymized Data: Public business reviews may be detached from your personal identity and attributed to an "Anonymized Former User" to preserve directory integrity.
- Retention Window: Deletion requests are processed and finalized within a maximum of 30 days.
7. Data Security & Technical Safeguards
We implement industry-grade technical and organizational safeguards to protect your personal data:
- All data in transit is encrypted using modern HTTPS / TLS 1.3 cryptographic protocols.
- Passwords are salted and hashed using Bcrypt (12 rounds) and never stored in plaintext.
- Mobile API authentication via secure scoped Laravel Sanctum tokens with revocation support.
- Strict database access controls, rate limiting, and automated vulnerability monitoring.
8. Children's Privacy
Our application and services are not directed to individuals under the age of 13. We do not knowingly collect personal data from children. If we discover that a minor under 13 has provided personal information without verified parental consent, we will promptly delete such data from our records. Parents may contact us at [email protected] for immediate assistance.
9. Your Legal Rights & Data Control
Under applicable data protection laws, you possess the following rights regarding your information:
- Right to Access: Request confirmation of whether we hold your personal data and obtain a readable copy.
- Right to Rectification: Update or correct incomplete or inaccurate profile information directly in the app.
- Right to Erasure (Deletion): Request full erasure of your user profile, media, and records.
- Right to Withdraw Consent: Revoke location, camera, or notification permissions through your device settings at any time.
10. Contact Us & Data Protection Inquiries
If you have questions, feedback, or concerns regarding this Privacy Policy or our data protection practices, please contact us: