Privacy Policy

This Privacy Policy explains how A.S Systems for Technology Solutions ("A.S Systems", "we", "us") collects, uses, discloses, and protects information when you use any of the Alsaroukhapplications — the Customer app, the Captain (delivery driver) app, or the Merchant (shop) app — and related services (collectively, the "Service").

1. Information We Collect

1.1 Account information

When you create an account, we collect your full name, phone number, email address, and (where applicable) your role-specific details — delivery vehicle type and plate number for captains, or shop name and business category for merchants. If you register or sign in using Sign in with Google, we receive your Google account's name, email address, and profile photo (if available) from Google, and we do not receive or store your Google password.

1.2 Location data

We collect precise GPS location data to power core delivery functionality: matching customers with nearby merchants, calculating delivery distance and pricing, showing customers a live map of their order's progress, and routing delivery captains to pickup and drop-off points. Captains' location is collected continuously while the app is in active delivery mode (foreground and, where you have granted background location permission, in the background) so that live tracking works reliably. Customers and merchants share location only when setting a delivery address or shop location.

1.3 Order and transaction data

We store the contents of your orders, delivery addresses, order status history, in-app chat messages between customers and captains (retained for dispute resolution), ratings and reviews, wallet balances, and commission/settlement records for captains and merchants.

1.4 Device and push notification data

We use Firebase Cloud Messaging (FCM) to deliver push notifications — order status updates, new order alerts for merchants and captains, chat messages, and account status changes. To do this, we collect a device push token, device type, and app version. You can disable push notifications at any time from your device settings, though this will prevent you from receiving real-time order updates.

1.5 Identity documents (Captains only)

As part of the delivery captain application process, we collect a photo of your national ID/identity card and driving license to verify your identity before approving your account. These documents are stored in a restricted, access-controlled storage bucket visible only to you and our administrative team, and are used exclusively for verification.

2. How We Use Your Information

• To create and manage your account, and to authenticate you (including via Google Sign-In).
• To process and fulfill orders, calculate delivery routes and fees, and connect customers, captains, and merchants.
• To send transactional and operational push notifications via FCM.
• To verify delivery captain identity and eligibility before approving an account.
• To calculate commissions, settlements, and wallet balances.
• To provide loyalty points, referral rewards, and promotional coupons.
• To investigate disputes, fraud, and violations of our Terms of Service.
• To improve the reliability, performance, and safety of the Service.

3. How We Share Information

We share order-relevant information between the parties involved in a transaction — for example, a merchant sees the customer's delivery address and order contents, and a captain sees pickup and drop-off locations for orders assigned to them. We do not sell your personal data to third parties. We use the following categories of service providers to operate the platform:

• Supabase — our database, authentication, and file storage infrastructure provider.
• Google / Firebase — Sign in with Google authentication and Firebase Cloud Messaging for push notifications.
• Mapping providers — for geocoding addresses and rendering live maps.

We may also disclose information where required by law, or to protect the rights, safety, and property of our users and the Service.

4. Data Retention

We retain account and order data for as long as your account is active, and for a reasonable period afterward to comply with legal, tax, and accounting obligations and to resolve disputes. If you delete your account (see our Account Deletion page), your profile and associated personal data are permanently deleted. A minimal, non-identifying record of the deletion reason may be kept for internal analytics.

5. Your Rights and Choices

• You may access and update most of your profile information directly within the app.
• You may request permanent deletion of your account and associated data at any time via the Delete Account page — deletion is immediate and cannot be undone.
• You may disable location permissions or push notifications from your device settings, though this will limit core functionality.
• You may unlink or revoke Google account access at any time from your Google account's security settings.

6. Children's Privacy

The Service is not directed to children under 16, and we do not knowingly collect personal information from children under 16. If we become aware that we have inadvertently collected such information, we will delete it promptly.

7. Data Security

We apply role-based access control and row-level security policies at the database level, so that each user can only access data relevant to their own account and role. Identity documents and payment-related records are stored in restricted storage with access limited to the account owner and authorized administrators.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above, and, where appropriate, communicated via an in-app notice.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your data, contact us at legal@assysteem.com.