1. Introduction
CarWhats Talabat ("we", "us") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal information when you use our app to order food, groceries, and goods delivered within your city. By using the app you agree to this policy.
2. Information we collect
We collect the following information to deliver and improve our service:
- Basic info: name, phone number, preferred language.
- Address: the address you choose for delivery (text + GPS coordinates).
- Location data: to discover nearby stores and compute delivery fees (only while the app is in use).
- Device info: model, OS, push notification token.
- Order data: what you ordered, from where, when, and the bill total.
- Payments: wallet balance + transactions (we never store card numbers).
- For merchants: store name, address, storefront photos, product photos, business registration if any.
- For drivers: vehicle plate, driver license photo, ID photo.
3. How we use your information
- Deliver your order from the merchant to your address.
- Find a nearby driver and estimate arrival time.
- Send WhatsApp verification codes for login.
- Send order-status notifications at every step.
- Process payments and manage your wallet.
- Resolve disputes and provide support.
- Improve the service and user experience.
- Meet legal obligations.
4. Information sharing
We share your information only with parties needed to fulfill the order:
- With the merchant: your first name, the order, special instructions.
- With the driver: your first name, phone, delivery address, coordinates.
- Notification provider: Firebase (Google) for in-app push.
- WhatsApp provider: Meta for OTP and order updates.
- Law enforcement only under valid legal request.
5. Location data
We use your location to:
- Show stores and restaurants near you.
- Calculate delivery fees accurately.
- Dispatch the driver to the right address.
- Track your order on the map in real time.
You can disable location services in your device settings at any time — but it will affect the accuracy of nearby stores. We do not track your location outside of app use.
6. Data security
We apply standard security measures:
- All data transmission encrypted via HTTPS/TLS.
- Secure authentication via JWT + WhatsApp OTP.
- Optional in-app PIN + fingerprint lock.
- Regular security reviews.
Despite our efforts, no method of transmission over the internet is 100% secure. Protect your PIN and never share OTP codes.
7. Data retention
We retain your data while your account is active, and longer when legal or accounting requirements demand it (invoices up to 5 years per Syrian law). When you request account deletion, we erase your personal data within 30 days — keeping de-identified transaction records for accounting.
8. Your rights
- Access the data we store via your in-app profile.
- Update or correct any field at any time.
- Delete your account (in-app or via the delete-account page).
- Disable notifications from device settings.
- Request a copy of your data.
- Withdraw consent for processing.
To exercise these rights, email: support@carwhats.com
9. Children's privacy
CarWhats Talabat is not directed at children under 13. We do not knowingly collect data from children. If you discover a child has provided us data, contact us immediately and we will delete it.
10. Third-party services
Our app uses third-party services for certain features:
- Google Maps — maps and routing.
- Firebase Cloud Messaging — push notifications.
- WhatsApp Business API (Meta) — OTP delivery and order tracking messages.
Use of these services is subject to their own privacy policies.
11. Changes to this policy
We may update this policy from time to time. We will notify you in-app or via WhatsApp of material changes before they take effect. Continued use after changes means you accept them.
12. Contact us
For any privacy-related question or request:
- Email: support@carwhats.com