Privacy Policy

Who this is about

Awbar is operated by Awbar, a drinking-water delivery business in Erbil, Kurdistan Region, Iraq. The app and the server behind it were built and are maintained by Valyar. Your information is held on Awbar's own server at awbar.valyar.com and is not sold, rented, or handed to advertisers — ever.

What the app collects, and why

Only what an order actually needs:

• Your phone number — it is how you sign in. We send a one-time code to it and it identifies your account. There is no password.
• Your name — so the driver knows who they are delivering to.
• Your delivery addresses — the area, street, building, floor, a landmark, any note for the driver, and the point you place on the map. Drivers cannot find an address in Erbil without this.
• Your device's location — only while you are choosing a delivery point, and only if you allow it, so the map can start where you are. You can refuse and place the pin by hand instead. The app does not follow you in the background.
• Your orders — what you ordered, when, where it went, how you paid, and whether it arrived.
• A notification token — an anonymous identifier your phone issues so we can tell you when your order is confirmed, on its way, or delivered. Covered in full below.

If you are a driver using the app for work, it also records your position while you are on a delivery route, and the photo you take at hand-over as proof of delivery. This is for the shop to run deliveries and settle cash, and it stops when you are not on a route.

The app does not collect contacts, photos (other than a driver's delivery photo), microphone, health data, or anything used for advertising or tracking across other apps and websites.

Notifications

If you allow notifications, your phone issues a token that identifies that one installation. It is stored against your account so the shop can tell you when your order is accepted, being prepared, on its way, or delivered.

A phone can only be reached through its own manufacturer's service, so these messages pass through Google's Firebase Cloud Messaging and, on an iPhone, Apple's Push Notification service. They carry the order number and its status — nothing else. You can turn notifications off at any time in your phone's settings, and signing out removes the token from the server.

Who else sees anything

Only the services the app cannot work without:

• An SMS provider receives your phone number in order to deliver your sign-in code.
• Google and Apple relay notifications, as described above.
• OpenStreetMap serves the map tiles you see when choosing an address.
• A payment provider — only if you choose to pay online rather than cash on delivery, and only what that payment needs. Card details are never seen or stored by Awbar or by the app.

Beyond these, information is shared only where the law requires it. The driver bringing your order sees your name, address, and phone number, because that is how a delivery works.

How long it is kept

Your account and addresses are kept while you use the app. Orders are kept as business and accounting records for as long as the law requires, even after an account is closed — an order is also a receipt. Sign-in codes expire within minutes. A notification token is removed when you sign out or when the phone stops accepting messages.

Deleting your account

You can delete your account from inside the app: Profile → Delete account. It removes your profile, your saved addresses, and your sign-in. Completed orders stay as accounting records, as above, but are no longer attached to a usable account.

You may also ask us to show you what is held about you, correct it, or delete it, by writing to info@valyar.com.

Keeping it safe

Traffic between the app and the server is encrypted (HTTPS). Sign-in uses one-time codes rather than passwords, so there is no password to leak. Access to the shop's dashboard is limited to named staff accounts with permissions. No system is perfectly secure, but nothing is stored that is not needed.

Children

Awbar is for ordering household water and is not directed at children. We do not knowingly collect information from anyone under 13. If you believe a child has created an account, write to us and it will be removed.

Changes

If this policy changes, the date at the top changes with it. Material changes will be announced in the app before they take effect.

Contact

Questions about this policy, or about information held about you: info@valyar.com.