Privacy Policy — Wslak

Data we collect

• Phone number: your identity on Wslak. Used to send your sign-in code, sign you in and contact you about your orders.
• Name (optional) and preferred language.
• Delivery addresses: the map pin, governorate and area, building, floor and landmark description, the recipient's name and phone number, and a voice note if you record one.
• Orders: the store, items, amounts, payment method (cash on delivery), status and timestamps, and any ratings and reviews you write.
• Support messages you send us.
• Device and session data: a random install identifier generated by the app, a notification token if you enable notifications, and your IP address and browser/app type when you sign in — to protect your account from unauthorised use.
• Drivers only: location while on shift and only while the app is open (we never track location in the background or off shift), battery level with each location update, vehicle type, delivery history, cash collected, settlements and earnings, and the documents submitted with a driver application.

What we do not collect

• No payment card data — payment is cash on delivery.
• The apps contain no third-party advertising, tracking or analytics SDKs, and we do not track you across other apps or websites.
• We do not sell or rent your personal data.
• The customer app does not access your contacts, photos, camera or GPS location; you place the address on the map yourself.

Why we use it

• To fulfil and deliver orders: sending the order to the store, assigning the nearest driver and guiding them to you.
• To sign you in, secure your account and prevent fraud and cash-on-delivery abuse.
• Accounting: recording cash collected by drivers and settling it with stores, in an append-only financial ledger.
• Support, resolving complaints, and improving address quality and delivery times.
• Order-status notifications, if you allow them.

Who we share it with

• The store you order from: the order details and your name if you entered one.
• The driver assigned to your order: the delivery address, its description and the contact number needed to deliver.
• Customers see the driver's name and a contact number during delivery.
• Service providers acting only on our behalf: server hosting (DigitalOcean), file storage, sign-in codes by SMS, WhatsApp (Meta) or Telegram, email (Resend), notifications (Firebase Cloud Messaging) and server error monitoring (Sentry). Each receives only what its service needs.
• OpenStreetMap maps: showing a map makes the app request map images from the tile server, which sees your device's IP address like any website.
• Authorities: only where the law requires it.

Retention

We keep your account data while your account exists. When you delete your account we immediately delete your name, phone number, email, saved addresses, favourites, devices and any driver location history.

Order records and financial ledger entries (amounts and timestamps) are append-only accounting records. After deletion they are kept, separated from anything that identifies you, for as long as the law and financial audit require.

Your rights

• See and correct your data: from the account screen in the app, or by writing to us.
• Delete your account: in the app (Account → Delete account) or via wslak.com/en/delete-account.
• Turn notifications off at any time in the app or device settings.

Security

All traffic is encrypted with HTTPS. Sign-in codes and session tokens are stored hashed, never in plain text, expire automatically, and attempts are rate-limited. No system is perfectly secure, but we work to protect your data and will tell you if an incident affects it.

Children

Wslak is not directed at children under 13 and we do not knowingly collect their data. Driver accounts are for adults only.

Changes and contact

We may update this policy; we will change the "Last updated" date below and tell you in the app if the change is significant.

Questions about your privacy: support@wslak.com