ZAIN Privacy Policy
Effective date: 14 May 2026
Last updated: 14 May 2026
⸻
1. Who we are
ZAIN ("we", "us", "our") is a ride-hailing platform operating in Tindouf, Algeria. We provide two mobile applications:
ZAIN RIDE — for passengers booking rides (Android package: com.zain.passenger)
ZAIN DRIVER — for drivers fulfilling rides (Android package: com.zain.driver)
This Privacy Policy describes what data we collect, why we collect it, how we use it, and your rights regarding that data.
Operated by: AICHI MEBAREK (trading as DAWAM TECH), Tindouf, Algeria
Contact email: dawam.ceo@gmail.com
⸻
2. Data we collect
2.1 Information you provide directly
Phone number (required) — for account creation via Firebase Phone Auth.
Name (optional) — for your profile.
Email (drivers only, required) — for account recovery and communications.
Profile photo (optional) — visible to your matched ride partner.
Driver documents (drivers only, required) — driver's license, vehicle registration, vehicle photos. Used solely for verification before you can accept rides.
In-app ratings and comments (optional) — to improve service quality.
2.2 Information collected automatically
Precise location (GPS) — only when the app is in the foreground, and only while you are using booking, navigation, or driver-online features. Used to:
Auto-fill your pickup point
Match passengers with nearby drivers
Compute distance, ETA, and fare
Show live driver position to passengers during a ride
Approximate location — for initial map centering when the app opens.
Device information — model, OS version, app version, language, time zone.
Device identifiers — Firebase Installation ID and FCM (Firebase Cloud Messaging) token, used to deliver push notifications.
Crash and diagnostic logs — captured by Firebase Crashlytics, stripped of personal content, used to fix bugs.
2.3 What we do NOT collect
❌ SMS / call logs
❌ Contacts
❌ Calendar
❌ Microphone or camera audio
❌ Browsing history
❌ Health, biometric, or financial account data
❌ Sensitive categories (race, religion, political opinion, sexual orientation, etc.)
⸻
3. Why we collect each data type
Data
Purpose
Phone number
Authentication
Name, photo
Identify you to your ride partner
Driver documents
Identity verification, compliance with applicable transport regulations
Location
Core ride functionality
Crash logs
Debugging
FCM token
Push notifications you opted into
Ride history
Service history, dispute resolution
⸻
4. Sharing of data
We do **not** sell your personal information
We share data only with the following categories of recipients:
- Other ZAIN users matched to your ride** — your first name, photo, vehicle details (drivers), live location during the ride (drivers ↔ passengers). In addition, your phone number is shown to the matched driver **only during the pickup phase** (from the moment the driver accepts your ride until the driver starts the trip) so they can call you if they cannot find you. The number is hidden from the driver's screen once the trip starts. The phone number is retained on the ride record for dispute resolution as described in Section 6.
- Service providers acting on our behalf:**
- Google (Firebase) — backend hosting, authentication, push notifications, crash reporting. Data is stored in Google Cloud regions and subject to Google's [Cloud Data Processing Addendum](https://cloud.google.com/terms/data-processing-addendum).
- Google Maps — map tiles and routing API. See [Google Maps Platform privacy](https://cloud.google.com/maps-platform/terms/maps-service-terms).
- Authorities** — only when required by Algerian law or in response to a valid legal process.
⸻
5. International transfers
Our backend (Firebase) processes data in Google Cloud data centers, which may be located outside Algeria (typically EU regions). All transfers are protected by Google's Standard Contractual Clauses.
⸻
6. How long we keep your data
Data
Retention
Account profile (active)
Until account deletion
Ride history
24 months after the ride
Driver KYC documents
Duration of driver activity + 5 years (regulatory)
Location data per ride
90 days (for dispute resolution)
Crash logs
90 days
FCM tokens
Until the app is uninstalled or token is rotated
After the retention period, data is permanently deleted or irreversibly anonymized.
⸻
7. Your rights
Under Algerian Law 18-07 on personal data protection, you have the right to:
Access — request a copy of your data
Rectify — correct inaccurate data
Delete — request deletion of your account and data ("right to be forgotten")
Restrict processing
Object to processing based on legitimate interest
Portability — receive your data in a machine-readable format
Withdraw consent at any time (where processing was based on consent)
To exercise these rights, use the in-app Profile → Settings → Delete Account option, or email dawam.ceo@gmail.com. We respond within 30 days.
Public account-deletion request form (no login required): https://forms.gle/hYWAC6T95ifeor1f8
⸻
8. Security
We protect your data with:
TLS 1.2+ encryption for all data in transit
Encryption at rest via Firebase / Google Cloud
Firestore Security Rules enforcing per-user access control
Crash logs scrubbed of personal content before upload
No system is 100% secure. If we discover a breach affecting your personal data, we will notify you and the relevant authority within 72 hours of discovery, per Article 36 of Algerian Law 18-07.
⸻
9. Children
ZAIN is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us data, contact us at dawam.ceo@gmail.com and we will delete it.
⸻
10. Changes to this policy
We may update this policy. Material changes will be announced in-app at least 30 days before they take effect. The "Last updated" date at the top reflects the most recent revision.
⸻
11. Contact
For any privacy question, complaint, or rights request:
ZAIN — operated by AICHI MEBAREK (DAWAM TECH)
Tindouf, Algeria
Email: dawam.ceo@gmail.com
Algerian Data Protection Authority (if you wish to file a complaint): Autorité Nationale de Protection des Données Personnelles (ANPDP)(https://anpdp.dz).