Privacy Policy

Last updated: 26 October 2026

This policy describes how the Wassla admin team handles information for wasslaapp.com, Wassla (customer), Wassla Provider (merchant) and Wassla Mandob (driver). Data depends on your role and the features you use. Privacy contact: info@wasslaapp.com.

1. Information and purposes

• All three apps: account, name, phone, email and account identifiers as applicable to registration; support requests; device and installation identifiers, notification tokens, crash reports and diagnostics. Used for authentication, account and service management, notifications, troubleshooting and security.
• Customers: addresses and permitted location, purchases, amounts, currencies, payment status and references, ratings, returns, maintenance descriptions and optional photos. Used for shopping, delivery, maintenance, payments and support. Moyasar processes payment information needed to complete transactions.
• Merchants: account and store details, contacts and location, catalogue and images, identity and business documents, banking beneficiary details, and order and maintenance actions. Used for store management, verification, payment-provider onboarding, settlements and services.
• Drivers: account and driver profile, availability, task actions and permitted location. Used for delivery coordination and operations. Location updates may continue while the home screen remains open, even when availability is off, not only during an active delivery. The current Android release requests foreground location, not background location permission.

Information may be linked to your account. Removing a name alone does not make it anonymous. Location and photo permissions are not needed to read this policy; declining permission may affect the feature requiring it.

2. Sharing and integrated services

We share information needed for the service with relevant merchants, delivery operations and service providers. We use Google/Firebase for authentication, databases, storage, notifications and crash reporting; Google Maps for maps; Moyasar for payments and merchant processes; and Google/Firebase for website hosting. Coordinates may be passed to an external mapping app when you request navigation. Information may also be disclosed when legally required or to protect rights and service security.

For the optional product-image analysis feature in Provider, an image, candidate categories and locale are sent through Wassla's service to Anthropic when the feature is enabled and you request it, to help prepare product information. Do not upload personal information or sensitive documents to this feature.

Providers process information according to their roles, terms and policies. Processing may occur in other countries, subject to applicable transfer requirements. We do not describe all third-party processing as anonymous.

3. Optional Meta advertising measurement in the customer app

With your permission, Meta tools measure how Wassla ads contribute to installation, use and purchases. Events include app activation, purchase amount, currency and reference, and app, device and advertising identifiers where device permissions allow. Meta may associate this with other data and use it for measurement and advertising under Meta's privacy policy.

Wassla does not add your name, phone, email, addresses, precise delivery location, product descriptions or payment-card credentials to these events. You can decline and continue shopping, or change the choice in Settings, Advertising measurement. On iOS, Apple's tracking permission is also required; the app does not override a device-level refusal.

The choice applies to the app installation, not each account. Signing out or requesting deletion does not switch it off. Disabling stops new events, but does not recall previously sent data or cancel requests already being sent. Queued events may be sent if you opt in again. Limited choice information and transaction references are kept to avoid duplicates. Requests concerning data already sent to Meta are reviewed separately and are not automatically completed by deleting a Wassla account.

4. Website and cookies

The website is hosted on Firebase Hosting. The contact form prepares a message draft in your browser; it does not send it or create a ticket. Review and send it from your email app. Information you send in support messages is processed for that purpose. We currently use no analytics tools, marketing tools or cookies on the website. The app's advertising measurement choice is separate from the website.

5. Retention

Account and operational information is kept while needed for services and reviewed on a deletion request. Specific records may be retained until orders, settlements and disputes are resolved, for an applicable legal retention obligation, or as needed to address fraud or protect rights. Financial records are not automatically erased by an account-deletion request.

Deletion review includes active records, archives, backups and relevant service-provider records. Support explains what was deleted, what remains, the reason, and its retention period or end criterion. A missing profile or being signed out does not prove all copies were erased.

6. Request account and data deletion

You can submit a manual request without installing or signing in. Email info@wasslaapp.com with the subject "Wassla account and data deletion request". Specify the app, account phone or email, and each account to delete. Never send passwords, verification codes or card details.

Support verifies ownership and reviews associated personal data, including addresses, location, files, images, archives, merchant profile, documents and banking beneficiary details, or driver profile as applicable. Support then confirms the outcome and exceptions. The request covers the account and its data, not just deactivation.

In releases with "Request account and data deletion", access it in customer and merchant Settings, or the driver home screen. It opens an email draft; it does not send it or automatically erase data. Send the message yourself. Direct email works for any app version. A request does not automatically cancel orders or issue refunds.

7. Choices and protection

Manage device permissions, update details available in the app, or contact us to request access, correction, deletion or rights available under applicable law. Opt out of optional marketing using the available mechanism or by contacting us. We use technical and organisational safeguards, but no storage or transfer method has absolute security.

8. Children, updates and contact

Services are not directed to children below the age requiring parental consent under local law. Contact us if you believe a child's information was collected without required consent. We update this policy when practices change, show the update date and provide additional notice for material changes where required. Wassla admin team: info@wasslaapp.com.