This policy covers the «حسين جمعة» merchant app for Android and iOS and the platform server it talks to. The app is owned and the platform operated by حسين جمعة. It is a business tool for merchants and shopkeepers to order goods from the warehouse and follow their orders and account.

• Phone number or email address — to sign in, send verification codes and reach you about orders.
• Password — to sign in. Never stored in plain text: only an Argon2id hash is kept, which nobody, including us, can read back.
• Store name, owner name and store addresses — to deliver orders to the right place.
• Orders, their items and amounts, and your account movements — to fulfil and settle orders in Iraqi dinars.
• Product photos you choose to add — shown to other merchants once the warehouse approves the product.
• Approximate IP address — for rate-limiting sign-in attempts and abuse prevention only.
• A random installation ID generated by the app — to limit accounts registered per installation; it is not a device ID and does not track you.

We do not collect location, contacts, the advertising ID, or any marketing or analytics data. The app contains no third-party advertising, tracking or analytics SDK.

When you send an order to your own customer, you enter that customer’s phone number, an optional second number, their governorate, and optionally their name and address, plus the amount they pay including delivery. This data is used only to deliver that order and to contact the customer about it. The customer has no account with us and no profile is built across orders; it is never used for marketing, sold, or shared beyond delivery. You, the merchant, are responsible for having your customer’s consent to share these details for delivery, and for entering only what delivery needs.

• Camera — to scan product barcodes, or photograph a product of yours when adding it. Barcode frames are processed on the device and never stored or sent; a product photo you choose to save is uploaded to show with the product.
• Photos (optional) — to pick an existing picture when adding a product.
• Network access and state — to talk to the server and know when to send orders saved offline.

No other permission is requested, and location is never requested.

The session tokens are kept in the system’s encrypted key store (Android Keystore / iOS Keychain); a copy of the catalog and recent orders, and orders created offline, are kept in a local database so the app works without a connection. Signing out and deleting the account wipe all of it from the device.

Only to the platform server, over HTTPS only. It is not shared with third parties, not used for advertising and never sold. Warehouse staff see it to the extent their work requires — preparing, delivering and settling orders — and every change is recorded against the person who made it. If a delivery company carries an order, it receives only what delivery needs: the order number, the customer’s phone, governorate and address, and the amount to collect.

• Orders and account movements are accounting records, kept as the law and settlement require — also after the account is deleted, but no longer linked to your name or phone.
• Verification codes expire within minutes and are stored hashed.
• Sessions: access token 15 minutes, refresh token 30 days; both revoked immediately on sign-out or deletion.
• Personal account data: for as long as the account exists, erased when it is deleted.

You can see your data in the app, correct your addresses in the app and other store details by contacting us, and delete your account yourself at any time: in the app via Settings → Delete account → Confirm, or on the web at the account deletion page. Deletion is immediate.

The app is a business tool for merchants. It is not directed to children or anyone under 13, and we do not knowingly collect children’s data.

If what the app collects or how it is used changes, this page and its date are updated before the change reaches the app.

Through the warehouse administration that created your account.