# Privacy Policy — Wasal (وصل)
**Last updated: June 28, 2026**
Ihsan ("Wasal", "we", "us", or "our") operates the Wasal mobile application (the "App"), a peer-to-peer delivery marketplace that connects people who are already traveling between cities in Egypt with people who want to send packages along the same route.
This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. By creating an account or using the App, you agree to this Policy.
> **Operator / contact:** Ihsan
> **Contact email:** ihsan0apps@gmail.com
---
## 1. Who this App is for
The App is intended for users **18 years of age or older**. It is not directed to children, and we do not knowingly collect personal information from anyone under 18.
## 2. Information we collect
We only collect information needed to operate the marketplace, verify identity, enable deliveries, and keep the community safe.
### 2.1 Account and profile information
- **Phone number** — used to create your account and sign you in via one-time SMS code (OTP).
- **Display name**
- **Profile photo** (optional)
- **City / nearest station** you select
### 2.2 Identity verification (sensitive information)
To reduce fraud and build trust, you may submit identity verification, which includes:
- **A photo of the front of your national ID**
- **A photo of the back of your national ID**
- **A selfie**
These images are stored securely and are **reviewed manually by our administrators** to confirm your identity. We do not use a third-party biometric/KYC service. We use this information solely to verify your identity, decide your verification status, and investigate fraud or abuse.
### 2.3 Delivery requests and item information
When you post a request, we collect:
- Item title, description, and an optional **item photo**
- Approximate weight category
- Origin and destination (city/station)
- Pickup/delivery time window
### 2.4 Recipient information
When you create a request, you provide the **name and phone number of the package recipient**. You are responsible for ensuring you have the right to share this information. It is shown to the traveler matched to your delivery so they can complete the handover.
### 2.5 Coordination details shared between matched users
Once a sender and a traveler are matched for a delivery, each party's **name, profile photo, city, rating, and phone number** become visible to the other so they can coordinate (for example, to call or message via the phone's dialer or WhatsApp). There is no in-app chat.
### 2.6 Precise location (live delivery tracking)
If you are the **traveler** carrying a package, you may turn on **live location sharing** while a delivery is in progress. When enabled:
- We collect your device's **precise location** and update it periodically (approximately every 30 seconds).
- Your latest location is shared **only with the sender of that specific delivery**, so they can follow the delivery's progress.
- Sharing runs as a foreground service with a persistent notification so you always know it is active.
- Sharing is **off by default**, is fully under your control, and **stops automatically** when the delivery is completed, cancelled, or when you turn it off.
We do **not** track the location of senders, and we do **not** collect location in the background outside of an active, traveler-initiated delivery. The App does not use the Google Maps Platform; when you tap to view a location, the coordinates are passed to the Google Maps app installed on your device.
### 2.7 Ratings, reviews, reports, and blocks
- **Ratings and reviews** you give or receive after a delivery (a star rating and optional comment). Aggregated ratings are visible to other users.
- **Reports** you submit about other users or deliveries, and **blocks** you create. These are used for safety and moderation.
### 2.8 Device and technical information
- **Push notification token** (Firebase Cloud Messaging) to deliver notifications.
- **Crash diagnostics and basic analytics** (via Firebase Crashlytics and Firebase Analytics), such as app version, device model, operating system version, and events about how the App is used, to keep the App stable and improve it.
- We use **Firebase App Check** to protect our backend from abuse.
## 3. How we use information
We use the information above to:
- Create and secure your account and sign you in;
- Verify your identity and display your verification status;
- Publish requests, match senders and travelers, and enable deliveries;
- Let matched users coordinate and complete handovers;
- Provide live delivery tracking when enabled;
- Operate ratings, reputation, reports, and blocking;
- Send you notifications about offers, delivery status, and verification results (you can control these per category);
- Detect, investigate, and prevent fraud, abuse, and violations of our terms;
- Maintain, troubleshoot, and improve the App;
- Comply with legal obligations.
## 4. How we share information
We do **not sell** your personal information. We share it only as follows:
- **With other users**, as described in Sections 2.4 and 2.5 (recipient details to the matched traveler; counterparty profile and phone number to matched users).
- **With service providers that run our infrastructure** — primarily **Google Firebase** (Authentication, Cloud Firestore, Cloud Storage, Cloud Functions, Cloud Messaging, Crashlytics, Analytics, and App Check). Google processes this data on our behalf to provide these services. See Google's Privacy Policy: https://policies.google.com/privacy
- **With the Google Maps app on your device**, only when you choose to open a location — the coordinates are handed to that app, which is governed by Google's own policy.
- **For legal and safety reasons** — to comply with applicable law, respond to lawful requests, enforce our terms, or protect the rights, safety, and property of our users and the public.
- **In a business transfer** — if we are involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
## 5. Payments
Payment for deliveries is handled in **cash, directly between users, off the platform**. We do **not** process payments and do **not** collect or store any card, bank, or other financial account information.
## 6. Permissions the App requests
- **Phone number / SMS code** — to sign you in (OTP).
- **Camera / Photos** — to capture or select your profile photo, item photos, and identity-verification images.
- **Location (precise and approximate, including a foreground-service for sharing)** — only for traveler live location sharing during an active delivery, as described in Section 2.6.
- **Notifications** — to send you delivery, offer, and verification updates.
- **Internet / network** — required for the App to function.
You can change or revoke permissions at any time in your device settings. Some features will not work without the related permission.
## 7. Data retention
We keep your information for as long as your account is active and as needed to provide the App. Delivery records, ratings, and reports may be retained as needed for safety, dispute resolution, fraud prevention, and legal compliance. Identity-verification images are retained while needed for verification and abuse prevention. Live location data is transient — only the most recent location is stored on the active delivery and it is no longer updated once sharing stops or the delivery ends. When you delete your account (see Section 9), we delete or de-identify your personal information, except where we must keep certain records to meet legal or safety obligations.
## 8. Data security
We use industry-standard measures provided by Google Firebase, including encryption in transit, server-side security rules that enforce least-privilege access, and App Check. Identity-verification images and other sensitive data are access-restricted. No method of transmission or storage is 100% secure, but we work to protect your information.
## 9. Your rights and choices
- **Access and correction** — you can view and edit your profile (name, photo, city) in the App.
- **Account deletion** — you can delete your account from within the App (Account → Delete account). This removes your profile and associated personal data, subject to the retention exceptions in Section 7.
- **Notification controls** — you can turn notification categories on or off in the App and in your device settings.
- **Location sharing** — you control whether to share live location and can stop at any time.
- **Other requests** — to request access to, correction of, or deletion of your personal information, contact us at ihsan0apps@gmail.com.
Depending on your jurisdiction, you may have additional rights over your personal data; we will honor applicable rights and respond to verified requests.
## 10. International data transfers
Our backend runs on Google Cloud / Firebase infrastructure. Cloud Functions are deployed in the **europe-west1** region, and other Google services may process and store data on Google's global infrastructure. By using the App, you understand your information may be processed outside your country of residence, with appropriate protections in place.
## 11. Changes to this Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you in the App. Your continued use of the App after changes take effect means you accept the updated Policy.
## 12. Contact us
If you have questions or requests about this Privacy Policy or your data, contact:
**Ihsan**
Email: ihsan0apps@gmail.com