Privacy Policy & Account Deletion

Last updated: July 3, 2026

Welcome to Mawada Phone App. We take your privacy seriously. Please read this policy carefully to understand how we collect, use, protect, and delete your data.

Delete Account

You can delete your account at any time.

To delete your account and personal data from Mawada Phone App, send an email to:

elshawafa26@gmail.com

With the subject: "Mawada Phone Account Deletion Request", and include the email address registered to your account.

Your account and all personal data will be deleted within 30 days of the request. See Section 10 below for full details.

1. Introduction & Scope

Mawada Phone App ("we" or "the app") is an e-commerce platform specializing in selling new and used mobile phones and accessories. This Privacy Policy applies to all users of the app within the Arab Republic of Egypt.

By using the app, you consent to the collection and use of your data as described in this policy. If you do not agree, please do not use the app.

2. Types of Data We Collect

A. Data You Voluntarily Provide

• Account Data: Full name, email address, phone number, password (encrypted and not visible to us).
• Delivery Data: Full delivery address (city, street, building number, apartment), additional phone number for the delivery driver.
• Order Data: Products ordered, quantities, prices, selected payment method, order notes.
• Reviews & Ratings: Ratings and comments you write about products.
• Wishlist & Cart: Products added to your wishlist or shopping cart.
• Payment Proof Images: When paying via InstaPay, you may voluntarily provide a transfer screenshot (stored temporarily for order review, deleted later).
• Support Communications: Any messages or inquiries you send to our support team.

B. Data Collected Automatically

• Device Data: Device type (Android), operating system and version, unique device identifier (Expo Push Token) for push notifications.
• Usage Data: Pages visited within the app, time spent, products searched.
• Approximate Location Data: Your approximate location (city/governorate) based on IP address to determine delivery cost and nearby branches. We do not collect your precise GPS location.

C. Data We Do Not Collect

• We do not collect precise GPS location.
• We do not collect your contacts.
• We do not collect photos or media from your device except those you voluntarily upload (payment proof image).

3. How We Collect Data

• During Registration: We collect your account data when you create a new account.
• When Placing an Order: We collect order data and delivery address when completing a purchase.
• During Interaction: We collect usage data automatically while you browse the app.
• When Contacting Us: We collect any data you send when contacting support.

4. How We Use Your Data

• To Provide Service: Process your orders, deliver them to your address, and update you on order status.
• For Delivery: Share your address and phone number with the delivery company to deliver your order.
• To Contact You: Communicate with you regarding your orders (confirmation, status change, delivery issue).
• For Payment: Process your payments via Paymob (card and wallet payments).
• For Payment Verification: Review payment proof images (InstaPay) to confirm orders.
• For Notifications: Send order notifications and promotional offers (you can opt out anytime).
• To Improve the App: Analyze your usage patterns to develop and improve your experience.
• For Security: Protect your account and prevent fraud and misuse.
• For Authentication: Send verification codes via email to confirm your identity during registration or password changes.

5. Legal Basis for Processing

We process your data based on the following grounds:

• Contract Performance: To process and deliver your orders (this is the primary basis).
• Consent: To send promotional offers and marketing notifications (you can withdraw consent at any time).
• Legitimate Interest: To improve the app, prevent fraud, and ensure platform security.
• Legal Compliance: To comply with applicable laws and regulations in Egypt.

6. Data Sharing with Third Parties

We only share your data as necessary to provide the service, with:

A. Core Service Providers

• Supabase: Database and authentication platform. Stores your account data, orders, and wishlist on secure servers. Supabase Privacy Policy
• Brevo: Email service. Used to send verification codes, order confirmations, and invoices via email. Brevo Privacy Policy
• Paymob: Payment gateway. Card and wallet payments are processed entirely through Paymob. We do not store your card details on our servers. Paymob Privacy Policy
• Expo: Push notification platform. Used to send push notifications to your device. Expo Privacy Policy
• Vercel: Hosting platform for the admin dashboard. Vercel Privacy Policy

B. Other Limited Parties

• Delivery Companies: We share your name, address, and phone number with the delivery company responsible for delivering your order.
• Legal Authorities: We may disclose your data if required by law or to protect our legal rights.

C. We Will Never

• Sell your personal data to any third party.
• Use your data for advertising purposes outside the app.
• Share your data with parties for marketing purposes without your explicit consent.

7. Data Storage & Security

• Storage Location: Your data is stored on Supabase servers, which use cloud providers (AWS, Google Cloud, etc.) in the United States and Europe.
• Encryption: All data transmitted between the app and our servers is encrypted using TLS/SSL. Passwords are hashed using bcrypt and are not accessible to us.
• Restricted Access: Access to your data is limited to authorized personnel who need it to provide the service.
• Additional Security: We implement strict security policies, periodic system reviews, and firewalls to protect your data.
• Security Limitations: Despite reasonable security measures, no internet transmission is 100% secure. We recommend using a strong password and a secure email account.

8. Data Retention

• Account Data: Retained as long as your account is active. If you delete your account, we delete your personal data within 30 days.
• Order Data: Retained for 5 years for accounting, tax, and legal purposes.
• Cart & Wishlist: Retained as long as your account is active.
• Payment Proof Images: Retained for 6 months after order confirmation, then automatically deleted.
• Reviews & Ratings: Remain visible even if you delete your account (without your name) to maintain value for other users.
• Usage Logs: Anonymized usage data retained for 12 months for analysis.

9. Your Rights

You have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data we hold.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): Request deletion of your personal data at any time.
• Right to Restrict Processing: Request restriction of data processing under certain circumstances.
• Right to Data Portability: Request transfer of your data to another service provider (in available formats).
• Right to Object: Object to processing of your data for marketing purposes at any time.
• Right to Withdraw Consent: Withdraw your consent to data processing at any time (without affecting the lawfulness of processing before withdrawal).
• Right to Lodge a Complaint: File a complaint with the relevant data protection authority if you believe your data processing violates your rights.

To exercise these rights, please contact us via the email below. We will respond within 30 days.

10. Account Deletion

You can request account deletion at any time by:

1. Sending a deletion request to: elshawafa26@gmail.com
2. We will delete your account and all personal data within 30 days of the request.
3. Pending orders will be cancelled before account deletion.
4. We may retain some data to comply with legal obligations (e.g., invoice records).

11. Notifications & Marketing

• Order Notifications: We send push notifications about your order status (confirmation, shipping, delivery). These are essential and cannot be disabled as they are part of the service.
• Promotional Notifications: We may send promotional offers and new products if you opt in. You can opt out anytime from app settings.
• Email Communications: We send essential emails (order confirmation, invoice, verification code). Marketing emails are only sent with your consent.

12. Cookies & Similar Technologies

The app does not use traditional cookies. However, we use:

• Local Storage (AsyncStorage): To persist login state and shopping cart contents on your device.
• Cache: To speed up app loading and improve performance.
• Session Tokens (JWT): To maintain login state with limited expiry.

We do not use cross-site tracking technologies.

13. External Links

The app may contain links to external websites (e.g., InstaPay for payment). We are not responsible for the privacy practices of these sites. We recommend reading their privacy policies.

14. Payment Processing

When paying through the app:

• Card & Wallet Payments: Payment is processed entirely by Paymob. We never see or store your card details (card number, expiry date, CVV). We only receive payment success/failure confirmation.
• Cash on Delivery: No electronic payment data is processed.
• InstaPay: You voluntarily provide a transfer screenshot. It is used only for payment verification and deleted after 6 months.

15. International Data Transfer

Your data may be transferred to and stored on servers outside Egypt (e.g., United States, Europe) through the service providers we use (Supabase, Brevo, etc.). We ensure these providers comply with applicable data protection standards.

16. Children's Privacy

Our app is not intended for children under 13. We do not knowingly collect personal data from children under 13. If we discover that we have collected data from a child under 13 without parental consent, we will delete it immediately. If you believe we have data about a child under 13, please contact us.

17. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by:

• An in-app notification when you open the app after the update.
• Email for substantive changes affecting your rights.
• Updating the "Last updated" date at the top of this page.

We recommend reviewing this page periodically. Your continued use of the app after changes constitutes acceptance of the updated policy.

18. Data Breach Procedures

In the event of a data breach affecting your personal data:

• We will notify you within 72 hours of discovering the breach.
• We will inform you of the type of data affected and actions taken.
• We will work with relevant authorities to address the situation.
• We will take immediate action to prevent recurrence.

19. Governing Law

This Privacy Policy is governed by the laws and regulations of the Arab Republic of Egypt. Any dispute related to this policy shall be subject to the jurisdiction of Egyptian courts.

20. Contact Us

If you have any questions or requests regarding this Privacy Policy or your personal data, please contact us at:

• Email: elshawafa26@gmail.com

We will respond to all inquiries within 5 business days. To exercise your data rights (account deletion, data correction, etc.), we will respond within 30 days.