This Privacy Policy explains how Mizwaj ("we", "our", "us") collects, uses and protects information when you use our mobile application and related services (the "Service"). By using Mizwaj, you agree to the practices described below.
1. Information We Collect
We collect information you provide directly and information generated through your use of the Service:
Account Information
- Customers: Full name, phone number (with country code), email address, password, and profile photo.
- Vendors: Business name, owner name, phone number, email address, business address, working hours, and business registration documents.
- Drivers: Full name, phone number, date of birth, national ID (front and back), driver's license, and vehicle registration documents.
Order & Transaction Data
- Products and services you book or purchase.
- Vendor selections, order details, and delivery information.
- Rental dates and times for rented products.
- Payment confirmations and transaction history.
- For "Send to Friend" orders: recipient name and phone number.
Location Data
- Delivery addresses (text and GPS coordinates).
- Device location for suggesting nearby vendors.
- Real-time location for order tracking and driver assignment.
- Vendor business locations for distance calculations.
Device & Technical Data
- Device identifiers and push notification tokens.
- Operating system version and app version.
- Crash logs and error reports.
- Analytics events and usage patterns.
Financial Data
- Payment method details (tokenized; we do not store full card numbers).
- Transaction IDs and payment status.
- Wallet balances and withdrawal request details (for vendors and drivers).
- Bank account information for payout requests (IBAN, bank name).
2. How We Use Your Information
We use your information for the following purposes:
- Account Management: To create, maintain, and authenticate your account.
- Order Processing: To process orders, payments, rentals, and deliveries.
- Matching Services: To connect you with relevant vendors and available drivers.
- Real-Time Tracking: To enable order tracking, driver assignment, and delivery updates.
- Communications: To send service notifications, order updates, and important account messages via push notifications, SMS, or email.
- Delivery Fee Calculation: To calculate distance-based delivery fees using routing services.
- Financial Operations: To process vendor/driver earnings, wallet transactions, and withdrawal requests.
- Platform Improvement: To improve the Service, analyze usage patterns, and fix technical issues.
- Fraud Prevention: To detect and prevent fraudulent activity and ensure platform security.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
3. Sharing Your Information
We share information only as needed to deliver the Service:
- Vendors: Receive order details, customer name, phone number, and delivery address to fulfill orders.
- Drivers: Receive delivery address, customer contact information, and order details for delivery purposes.
- Payment Providers: Moyasar, Tabby, and Tamara process payments securely. We do not store full card details.
- SMS Provider (Taqnyat): Receives phone numbers to deliver OTP codes and order notifications.
- Cloud Services (Firebase): Receives device tokens for push notifications and technical data for analytics.
- Mapping Services (OSRM/OpenStreetMap): Receive coordinates (no personal information) to calculate delivery distances.
- Authorities: When required by law or to protect rights, safety, or property.
We do not sell your personal information.
4. "Send to a Friend" Orders
When you place an order to be delivered to someone else:
- We collect the recipient's name and phone number solely to complete the delivery.
- The recipient may be contacted by phone to arrange delivery details.
- Recipient data is not used for marketing purposes.
- Recipients can request removal of their data after delivery by contacting us.
By placing a "Send to Friend" order, you confirm that you have the recipient's consent to share their contact information with us.
5. Payment Information Security
We take payment security seriously:
- Payment card details are tokenized and processed by certified payment providers (Moyasar, Tabby, Tamara).
- We do not store full card numbers, CVV codes, or PINs on our servers.
- All payment transactions use encrypted connections (HTTPS/TLS).
- Buy Now Pay Later (BNPL) services are provided by authorized third-party providers.
6. Data Retention
We retain your information as follows:
- Active Accounts: Data is retained while your account is active.
- Order History: Transaction records are retained for accounting and legal compliance purposes.
- Financial Records: Payment and wallet transaction data is retained as required by financial regulations.
- Driver Documents: Identity and license documents are retained for compliance verification.
- Deleted Accounts: Upon account deletion, personal data is anonymized or deleted, except where retention is required by law.
7. Security Measures
We implement industry-standard security measures:
- Encrypted connections (HTTPS) for all data transmission.
- Secure password hashing (bcrypt).
- Access controls and authentication requirements.
- Regular security monitoring and updates.
- Tokenization of sensitive payment data.
While no system is 100% secure, we continuously work to protect your data.
8. Your Rights
You have the following rights regarding your data:
- Access: View and download your personal information from within the app.
- Correction: Update or correct your personal information at any time.
- Deletion: Request deletion of your account and associated data.
- Withdrawal of Consent: Opt out of marketing communications and optional data uses.
- Location Permissions: Disable location access from your device settings (some features may be limited).
- Notification Preferences: Manage push notification settings in the app or your device.
To exercise these rights, use the in-app settings or contact us at support@mizwaj.com.
9. Children's Privacy
Mizwaj is not intended for children under 13 years of age. We do not knowingly collect personal information from children. Driver accounts require users to be at least 18 years old.
If you believe a child has provided us with personal information, please contact us immediately so we can remove it.
10. International Data Transfers
Your information may be processed in Saudi Arabia and other countries where our service providers operate. We ensure appropriate safeguards are in place for any international data transfers.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes:
- We will notify you in-app or by email.
- The "Last updated" date will be revised.
- Continued use of the Service after changes take effect constitutes acceptance.
12. Contact Us
For questions, concerns, or requests regarding this Privacy Policy, contact us:
- Email: support@mizwaj.com