The short version

• We collect what the service needs to work: who you are, where you are when you ask for something nearby, and what you have ordered, booked or posted.
• We do not sell your data, we do not track you across other apps or websites, and there is no advertising identifier in this app.
• We do not store your IP address, and we do not look up your location from it.
• You can delete your account from inside the app. Your name and phone number are erased.

What you give us

Directly, when you register or use a feature:

• Your name and mobile number, and a password (stored only as a one-way hash — nobody at Hala Hub can read it).
• Addresses you save, and the nicknames and door details you give them.
• Anything you post or write: marketplace and car listings, job posts and applications, reviews and ratings, messages to a driver, merchant or seller, and support requests.
• Photos you upload for a listing, and — if you apply to work with us as a partner — identity or licence documents.

What your device gives us

• Your location, when you allow it. This is precise location, because a taxi has to reach a specific place.
• A push notification token, if you allow notifications, so we can tell you a driver has arrived.
• Your app version and language, so we can serve the right content and know when a build is too old to work.

What we record as you use the app

• Your rides, orders, deliveries, appointments, rentals and bookings, with their times, places and prices.
• Your wallet balance and every transaction that changed it.
• Which parts of the app you use, so we can see what is working. These records are aggregated for reporting.
• What you have viewed and searched for in the marketplace, cars and jobs, so the app can suggest similar things. This is the only thing here used to personalise what you see, it is kept for 120 days, and every suggestion tells you which of your own actions produced it.

What we do not collect

This list is as much a part of the policy as the one above it.

• We do not store IP addresses. Your address is used momentarily to rate-limit abusive traffic and is never written down.
• We do not infer your country or city from your IP address. The only location we have is the one your device reports after you allow it.
• There is no advertising identifier, no third-party analytics SDK, and no tracking of you across other apps or websites. Apple's privacy manifest for this app declares no tracking, and that is accurate.
• We do not read your contacts, your photo library beyond the images you pick, your calendar or your call history.
• We do not collect your location when the app is closed. The app never asks for background location and does not declare a background location mode.

Location, specifically

Location is the most sensitive thing this app handles, so it gets its own section.

We ask for it only while you are using the app, and only when a feature needs it — to set your pickup point, to show services near you, to follow a ride you have booked, or to put the weather and prayer times for your area on your dashboard. If you refuse, the app keeps working; it asks you to choose a city instead.

When you book a ride, your driver sees the pickup point you set. During the trip, your driver's position is shared with you. If you send somebody a trip-sharing link, that person can follow the vehicle until the ride ends; the link can be revoked at any time, does not include your name, and does not reveal your pickup point until the trip has started.

Your most recent position is stored so nearby services and dispatch work. A position that could not be measured is never sent — the app does not substitute a guess for a reading.

One external service receives a location: the weather provider that fills the daily dashboard. It is given an approximate position — rounded to about a kilometre, which is all a forecast needs — with no name, phone number or account identifier attached.

Who else sees your information

• The person serving you. A driver sees your first name, your pickup and destination, and the phone number the ride is booked on. A restaurant or shop sees your order and delivery address. A service provider sees the job you asked for and where. They see what the job needs and nothing else — a driver never sees your wallet, a merchant never sees your other orders.
• Other users, for what you chose to publish. A marketplace listing, a review or a job post is public by design. Reviewers' names are shortened on public pages.
• Our own staff, where their job requires it — support agents handling your ticket, operations staff investigating a complaint or a fraud report. Every such action is recorded in an audit log with the name of the person who took it.
• Nobody else. We do not sell, rent or trade your information, and we do not share it for anyone else's advertising.

Services we use to run Hala Hub

As of the date at the top of this page:

• Weather data comes from an external forecasting service, which receives an approximate position — rounded to about a kilometre — and nothing else.
• Maps, address search and route calculation all run on our own servers. Browsing the map does not tell anybody outside Hala Hub where you are looking.
• SMS delivery and push notifications are built into the platform but are not currently switched on. While they are off, no phone number or device token is sent to any outside company. When we switch them on, this page will name the providers before it happens.
• Payment processing is not connected. Wallet top-ups in this pilot are simulated and no card or bank details are collected anywhere in the app.

How long we keep things

• Your account and its history stay while the account exists.
• Vehicle position trails from a ride: 90 days.
• Fare estimates: 180 days.
• What you viewed and searched, used for suggestions: 120 days.
• Partner performance history: 365 days.
• Records of completed transactions are kept after account deletion in an anonymised form — detached from your name and number — because a ride or an order is also the other party's record and their earnings statement has to stay correct.

Your choices

• Delete your account: Profile → Delete Account, in the app. It asks for your password. Your name becomes “Deleted user”, your phone number is released so it can be registered again, and every session is signed out. It is refused only while you have a ride or order in progress, or money left in your wallet — finish or withdraw first.
• Location: turn it off in your phone's settings at any time. The app will ask you to pick a city instead.
• Notifications: turn them off in your phone's settings, or from the Notifications row in your profile, which links straight there.
• Your own content: you can edit or remove your listings, job posts and saved addresses yourself.
• To ask what we hold about you, or to have something corrected, contact us at the address below.

How we protect it

• Your sign-in token is stored in your phone's secure keychain, not in ordinary app storage.
• Your password is stored only as a bcrypt hash and cannot be read back, by us or by anyone with a copy of the database.
• Changing your password, or an administrator resetting it, immediately invalidates every existing session on every device.
• Traffic between the app and our servers is encrypted in transit. Credentials for outside services are encrypted at rest.
• No system is perfectly secure. If a breach affects you, we will tell you.

Children

Hala Hub is not intended for children under 13, and we do not knowingly collect their information. If you believe a child has registered, contact us and we will remove the account.

This is a pilot

Hala Hub is running a limited pilot in Syria. Some things a normal privacy policy would describe are not real yet: wallet top-ups are simulated rather than processed by a bank, and when no real driver is available a ride may be served by a demonstration account rather than a person. We are telling you because a policy that describes a finished product you are not actually using is not a policy worth reading.

As those parts become real, this page will be updated before they are switched on — not after.

Changes and contact

If we change this policy in a way that affects what we collect or who sees it, we will change the date at the top and say what changed. Continuing to use the app after a change means accepting it.

Questions, requests or complaints about privacy: privacy@halahubz.com, or the Contact page on this site.