Privacy Policy
This policy explains how Mashwar handles data when you use the website and, once launched, the Mashwar mobile app and related services.
1. Who we are and how to contact us
Mashwar is an Iraq-focused mobility project and platform for Routine Rides and Shared Trips. Our current official contact and privacy email is mashwar.iq@gmail.com. The finalized legal operator name and registered address will be added to this page before general commercial operation begins once legal registration is completed.
2. Scope
This policy applies to the Mashwar website, the Mashwar mobile app when it becomes publicly available, and support, safety and privacy communications related to the service.
3. Data we may process
- Account and identity data: such as name, phone number, profile photo, verification status and account settings.
- Trip and booking data: such as origin, destination, route, timing, seats, booking requests, confirmations, cancellations and trip status.
- Location data: where needed for location selection, trip matching, navigation or ride-related functions, subject to device permissions.
- Device and security data: such as session and device information, push-notification tokens, technical logs, and login or verification attempts needed to protect accounts and prevent misuse.
- Support and safety records: such as reports, communications, disputes, cancellation reasons and support or safety actions.
- Financial and operational records: when fees or payments are enabled, such as amount, settlement method, fee status or refund status. Mentioning this category does not mean digital payments are currently enabled.
4. How we use data
We use data as reasonably necessary to create and verify accounts, show and match trips, manage seat requests and subscriptions, operate notifications, provide support, improve security, prevent fraud or misuse, manage disputes, and meet applicable legal or regulatory obligations. We do not sell personal data to advertisers.
5. Location and permissions
Some Mashwar functions may require location permission. You control device permissions through your device settings. Refusing permission may prevent functions that inherently depend on location from working fully.
6. Service providers
Depending on the enabled feature, Mashwar may use technical service providers including Supabase for backend, authentication and database services; Google Firebase for notifications and related technical services; and Twilio plus Meta/WhatsApp for phone verification when those channels are enabled. We may also use email-hosting or other support providers. Providers receive only the data reasonably necessary to perform their services under their own security and contractual arrangements.
7. International processing
Some service providers may process data in countries different from the user's country. Where we use such providers, we seek appropriate contractual and technical safeguards in light of the service and applicable law.
8. Retention
We keep data while it is needed for an active account or service purpose, then delete or de-identify it when it is no longer required, unless specific records need to be retained longer for safety, fraud prevention, disputes, accounting, backups or legal obligations. Retention therefore varies by record type and purpose.
9. Your rights and choices
You may request access, correction or deletion of your data, or ask questions about its use, to the extent provided by applicable law. Contact mashwar.iq@gmail.com. We may need to verify the requester's identity before acting on a sensitive request.
10. Account deletion
You may request account and associated-data deletion through our Account Deletion page. Before public store release, the app must also provide an in-app path to initiate account deletion. We may retain only records that must remain for legal, security, fraud-prevention, dispute or accounting reasons, minimizing or separating them from the account where reasonably possible.
11. Security
We use technical and organizational controls appropriate to the data, including access controls, account verification, encrypted transport where supported by providers, and security logging. No technical system can be guaranteed to be completely risk-free.
12. Users under 18
Mashwar's general public mobility service is intended for adults aged 18 or older unless a separate service for minors is later introduced with appropriate rules, safeguards and permissions.
13. Changes to this policy
We may update this policy when the service, providers or legal requirements change. We will show the latest update date at the top of this page and may provide additional notice on the website or in the app for material changes.
14. Contact
Privacy and support questions: mashwar.iq@gmail.com.