Privacy Policy

Effective date: 31 October 2026 · Legal operator: Dam Computer Systems Company L.L.C., Amman, Jordan.

Deleting your account and data · النسخة العربية

Who we are

This policy explains how we handle your data when you use the store app you downloaded, or its web version. The legal operator responsible for this data is Dam Computer Systems Company L.L.C., registered address Building 79, Jabal Arafat Street, Al Yasmeen, Amman, Jordan. We run more than one store app on the same platform, and this policy covers all of them. “D.A.M Technology” is only the developer name under which our store apps are listed on Google Play; it is not the legal operator.

Data we collect

• Phone number (required): to sign you in with a code sent by SMS, and to link your orders to your account.
• Name (optional).
• Email address (optional): only if you add one in the app, to sign in with a code or link sent by email.
• Delivery addresses: the area and details you type, the address label, and the delivery zone.
• Location:
  • From your phone: only when you tap “use my current location” or place the pin on the map while adding an address or moving an address's pin, with the app open in front of you — never in the background. You can allow precise location, approximate location only, or neither and place the pin by hand. We save the pin's coordinates, their accuracy and the time with the address.
  • At your door: when a driver delivers your order, or tries to, the driver's app records the driver's own location, its accuracy and time, and the result of the delivery check, linked to your order.
  • From your delivery zone we work out the general region it belongs to.
• Orders and payments: items, amounts, status and times, plus wallet credit, loyalty points and refunds. We don't collect card or bank details; payment in the app is cash on delivery or wallet credit.
• Referral code: one you type when you sign up, or one carried from a partner’s card or link you opened on this device within the 30 days before you signed up. A carried code is attached at signup even if you clear the field.
• Sign-in records: our authentication provider logs sign-in events, including your device's IP address.
• Crash reports and sign-in code counts: when the app hits an error it sends a technical report with the page address, the browser or device type, the app version, and the app's recent steps and network requests; it may include internal identifiers such as an order number. It also sends a count event each time a sign-in code is requested or typed in, to measure whether SMS codes arrive, with the same technical details and no phone number or account identifier. It is set not to send your personal data by default and not to store your IP address, and it does not record your screen.
• On your device: the app stores your sign-in session, your cart, a referral code if you have one, your theme choice, and a short record of the phone numbers codes were sent to, used to space out repeated code requests. That record stays on the device until the next code request, even after you sign out. Deleting your account does not wipe your device.

We don't collect an advertising ID, don't use advertising tools or analytics services — the only usage count we keep is the sign-in code count described above — don't access your contacts, photos or files, and don't send push notifications today.

How we use your data

To sign you in, fulfil and deliver your orders, support you, prevent abuse and fraud and keep the service secure, fix errors, and meet our legal obligations. We process your data to provide the service you ask for, and as far as the laws in force in the Hashemite Kingdom of Jordan allow or require; this policy is governed by those laws. We don't sell your data, don't show ads, and don't send marketing messages: SMS from our sender carries sign-in codes only. We email you only to sign you in, or to answer a message you sent us (for example to privacy@iwaspjo.net).

Who sees your data

• Our team in operations and the warehouse: order details, including your address, pin and delivery attempts, to fulfil orders and support you. Access is limited to authorised staff.
• Drivers: The driver delivering your order sees your first name, your delivery address, a button that opens their phone’s dialler with your number, the cash amount to collect, and the outcome of the most recent delivery attempt that did not succeed, with the previous driver’s note on it, if any. If a member of our team delivers your order, they see your full name, as they do elsewhere in our operations. Navigating to you may open Google Maps on the driver's phone with your pin coordinates or your address text.
• The store you order from: if the app you use carries the brand of a store other than us, that store's owner sees your name, phone number, delivery zone (not your street), your orders and your total delivered spend.
• Marketplace stores (ordering from other stores inside the app): the store sees what you ordered, the amounts and the times; it never receives your phone number, and the app does not show it your name. Our team, not the store, calls you about your order. If you call a store yourself on the number shown on its page, it will see your number as on any call.
• The partner who referred you: if a referral code was attached when you signed up (typed, or carried from a link), that partner sees your name, signup date, region, and the number and total value of your delivered orders — across every store app you use with the same number.
• For Dabbour customers: Dabbour Network (iwaspjo.com): if you use Dabbour Network with the same phone number, it receives your wallet balance and its last 50 entries (amount, type, date and the related order reference, if any), and your رصيد and its entries, if any, and holds the orders you place through it.
• Service providers who process data on our behalf:
  • Supabase — database and sign-in: stores your account, orders and addresses.
  • Twilio — sends the SMS codes (receives your number and the message text).
  • Resend — sends sign-in emails if you added an email (receives your email address).
  • MapTiler — map images on the pin screen (receives the map area you view and your device's IP address, not your saved pin).
  • Sentry — the crash reports and sign-in code counts described above.
  • Cloudflare — hosts the app's web version and stores our encrypted backups.
  • Railway — hosts our operations and delivery servers, which process orders and addresses.
  • GitHub — runs our weekly backup job, which handles a copy of the database briefly before it is encrypted.
  • OpenStreetMap — map images on our team's map view around your pin (receives the map area, not your identity).
  • Google — hosts our email (support@iwaspjo.net and privacy@iwaspjo.net), so it receives what you send us; and navigation on the driver's phone, as above.
• Authorities: we disclose your data to a public authority only where the laws in force in Jordan require it, such as an order from a court or a competent authority, and only as far as that requires.

Where your data is stored

Our database is stored in the European Union (Frankfurt, Germany), outside Jordan. Crash reports and sign-in code counts are stored in the European Union (Germany). Sign-in emails are sent from Ireland, and our email provider keeps its logs in the United States. SMS sign-in codes are processed in the United States. Our other service providers listed above may process data in other countries. We occasionally test our backups by restoring them into a temporary copy in the same EU region (Frankfurt), which is deleted after the test.

How long we keep it

• Account, addresses and orders: while your account exists. Removing an address from My addresses only hides it; its details are erased when you delete your account.
• Delivery location records at your door: the exact location point is cleared once it is 90 days old; the rest of the delivery record is kept while your account exists. After deletion, see the next section.
• Crash reports, sign-in logs, and our SMS and email providers' logs, at those providers: crash reports and sign-in code counts for up to 90 days; sign-in logs at our authentication provider for 7 days; email logs for up to 30 days; and our SMS provider keeps each message's record (your number and the code it carried) available for 13 months under its default settings, then moves it to an archive whose retention we have not yet confirmed.
• Printed referral-card links (iwaspjo.net/r/…): we record the browser type, country and referring page, with no IP address and no account, for 90 days; after that only a daily total remains.
• Backups: see the deletion section.

Deleting your account and data

How to ask

1. In the app: Account → Delete account.
2. On the web, from any browser, without the app: the account deletion page (/delete-account on this website).
3. By writing to us at privacy@iwaspjo.net.

Verifying it's you: in the app, you are already signed in. On the web, you sign in with your phone number and the code we send it by SMS. If your account has no phone number, write to us.

What happens

• Straight away: you're signed out on every device, no new orders can be placed, and the deletion request is recorded.
• For 7 days you can change your mind: sign in again and press “Cancel request”. That needs a new SMS code; if it doesn't arrive, write to us.
• After 7 days deletion runs automatically at the next daily run (around 5:40 a.m. Amman time). If your request is held for one of these reasons, we resolve it within 30 days of when you made it:
  • an order on your account not yet delivered or cancelled, or an in-store purchase (at a store's till) still open: the hold clears by itself, and deletion completes at the next daily run after that.
  • a balance in your favour — wallet credit (including a store's gift credit), money owed to you, or enough loyalty points to redeem (500 or more in one store app): our team settles it with you, or records it as waived, before deletion completes. Write to us about it.
  • a partner role or money record linked to your account after you asked: our team reviews it with you.
  At any time, sign in to the app or on the deletion page to see whether your request is on hold, and why.
• Scope: deletion covers your customer account in every store app on our platform that uses the same phone number.
• When the request can't be recorded: if your sign-in also holds a business or partner role (such as agent, supplier, wholesale buyer, member, store owner, store staff or driver), or a member's credit, points or ownership record (such as member credit, member points or a share in a shipment), the request can't be recorded in the app or on the deletion page, because self-service deletion covers customer accounts only. Write to us: our team can close some of these roles and records, and some can't be closed yet.

What we delete

Your name, phone number, email address, sign-in account, saved addresses (text, pin and accuracy), and free-text notes about you on your orders and their deliveries.

What we keep, no longer naming you

• Records of orders (items, amounts, dates, status, store and delivery zone), payments, wallet, loyalty points and refunds; the account's creation date, region and store; and items held in a cart. Refund records keep their written reason and settlement reference. Loyalty points are counted separately in each store app, and only in whole blocks of 500; points that don't make a whole block (under 500, or what is left over above the whole blocks) are not paid out and stay on these records. Our team's internal notes about your deletion request are kept as they are.
• The partner who referred you keeps the referral record: your signup date, region, and the number and value of your delivered orders, without your name.
• Delivery location records: the driver's location at your door is erased 90 days after each delivery or attempt (at once, if it is already older), while the fact of the delivery, its time and its check result stay with the order.
• A random identifier may remain: if you ordered from a store in the marketplace, a random identifier of your former sign-in stays so those order records remain valid, with no phone, email or name. Your deletion request record is kept too, under that random identifier, not your phone number: while the request is pending — and permanently if you cancel it — it can be linked to your account.
• A rare case: if your phone number moves onto your sign-in from another sign-in while your request is pending, a store account on that number that was in the other sign-in's name may be erased with yours, even if it carries a marketplace order less than seven days old, possibly placed from the other sign-in. The order record itself stays, but no longer names anyone.

Backups and providers' copies

• We don't edit backups; your data stays in them until they expire: daily backups for about 7 days, weekly encrypted copies for about 35 days, monthly encrypted copies for about 400 days, and encrypted offline archive copies for no more than 12 months.
• If we ever have to restore a backup made before your deletion was completed, then, as part of that restore, we will repeat every deletion, and honour every cancelled deletion request, recorded in our most recent surviving copy. A deletion completed after that most recent copy was made could still be undone, and your data would come back; you can ask us to delete your account again at any time.
• Sign-in logs at our authentication provider, and our SMS and email providers' logs, are kept for the periods given under “How long we keep it”; deletion does not reach them.

Also worth knowing

• An app screen that was already open may keep working for a short while, until its sign-in expires.
• We won't send you a message when deletion completes.
• You can sign up again later as a new customer; nothing from your old account carries over.

Your choices and rights

You can edit your name and email in the app, and move an address's pin, rename it or remove it. An address's text can't be changed: add a new address, or write to us. You can ask to see or correct your data by writing to us — we don't yet have a tool to download your data. You can delete your account as described above. The laws in force in Jordan may give you further rights over your data; to use any of them, write to us at the address under “Contact”, and if our answer does not satisfy you, you can complain to the competent authority in Jordan.

Security

We use encrypted connections, encrypt our backups and keep their key offline, and limit access to our operations systems to authorised staff. No system is perfectly secure.

Children

The service is not directed at anyone under 18, we don't knowingly collect their data, and the app has no age check.

Changes to this policy

We post any change on this page with a new effective date, and announce it in the app. If the Arabic and English versions differ, the Arabic version prevails.

Contact

Privacy or deletion questions: privacy@iwaspjo.net