Privacy Policy

Last Updated: January 29th 2025

Welcome to Hayat Online ("Company," "we," "us," or "our"). This Privacy Policy governs the collection, use, and disclosure of personal and technical information when you use our application ("Service"). By accessing or using the Service, you acknowledge that you have read and understood this policy.

1. Information We Collect

1.1 Personal Information

We collect the following information necessary to fulfill our contractual obligations and legitimate business interests:

• Account Credentials: Email address and phone number during account registration.
• Third-Party Authentication: Account identifiers when using "Sign in with Google" or "Sign in with Apple."
• Geolocation Data: Precise coordinates only when voluntarily created through the Service's location feature. Users may delete this data at any time via app settings.

1.2 Technical Information

We automatically collect anonymized technical data essential for service delivery, security, and compliance:

• Device metadata (type, manufacturer, operating system, and hardware identifiers)
• Network characteristics (IP address, connection type, user agent)
• System configurations (language, regional settings, display preferences)
• Environment status (physical/virtual device detection)

2. Legal Basis and Purpose of Processing

We process information under the following legal frameworks:

• Contractual Necessity: To provide account functionality, order delivery, and location services.
• Legitimate Interests: For security monitoring, fraud prevention, and service optimization.
• Legal Compliance: To meet regulatory obligations and respond to lawful requests.

3. Data Sharing and Disclosure

We disclose information only under these strictly limited conditions:

• Authorized Vendors: To third-party processors bound by data protection agreements (e.g., cloud hosting, analytics).
• Legal Requirements: When compelled by subpoena, court order, or valid government request.
• Business Transfers: In connection with mergers, acquisitions, or asset sales, with notice to affected users.

4. Security Measures

We implement technical and organizational safeguards including:

• End-to-end encryption for data in transit (TLS 1.2+)
• Pseudonymization of technical identifiers
• Regular security audits and vulnerability testing
• Strict access controls with least-privilege principles

No electronic transmission or storage system can be guaranteed as 100% secure. Users provide data at their own risk.

5. User Rights and Choices

You may:

• Access, correct, or delete personal data via account settings
• Withdraw consent for location tracking (may affect service functionality)
• Request permanent account deletion through in-app tools, subject to legal retention requirements
• Opt out of non-essential data processing by contacting support

6. Data Retention

We retain information only as long as necessary for:

• Active account maintenance (until deletion request)
• Legal obligations (tax records, dispute resolution)
• Aggregated analytics (indefinitely in anonymized form)

7. Policy Updates

Material changes will be communicated through:

• In-app notifications at least 30 days prior to effective date
• Updated "Last Updated" timestamp with change summaries

Continued use after changes constitutes acceptance of revised terms.

8. Jurisdiction and Disputes

This policy shall be governed by the laws of Republic of Iraq. Any disputes shall be resolved through binding arbitration in Republic of Iraq.

9. Contact Information

Email: support@hayatonline.app

This policy does not create third-party beneficiary rights.