Privacy Policy — Shaghf Kirkuk

This policy explains what information the Shaghf Kirkuk app and its web version (shaghfkirkuk.web.app) collect, why, and how it is used. Shaghf Kirkuk is a coffee ordering app for pickup and delivery from our Kirkuk branch.

WHAT WE COLLECT

• Sign-in details — depending on how you sign in: Sign in with Apple (iPhone and iPad only) or Google, which both give us your name and email address (Apple may give us a private relay email address instead of your real one; we use no Apple data for tracking or advertising); an emailed one-time code, for which we use the email address you type; or, for staff accounts, your phone number via a one-time SMS code (Firebase Phone Authentication).
• Guest identifier — when you open the app or web version without being signed in, it creates an anonymous guest account (Firebase Anonymous Authentication). It holds no name, email address or phone number and only lets the app reach our servers. When you sign in, your own account is used instead.
• Name and phone number — required to place an order: your first name (last name is optional) and a mobile phone number, so staff can address you and call you about your order. They are saved with your profile and copied onto every order you place.
• Order history — items ordered, prices, order type (pickup/delivery), status, timestamps, coupon code, requested time, notes, and any rating or comment you leave, together with the name, phone number and delivery address you gave on that order.
• Wallet — cashback balance and its transaction history, linked to your account.
• Delivery address and location — only if you choose delivery: the address you type or pick on the map, including the pin's coordinates, is saved with that order. When you open the map picker and allow location access, it reads your device's current location to place the pin (and again whenever you tap the locate button); we do not track your location in the background. The last address you used is also kept on your device so you do not have to type it again. Not collected for pickup orders.
• Device push-notification token — stored with your user ID, phone number and device platform, and used to notify you about your order status (accepted, ready, cancelled, modified). You can disable notifications in your device settings at any time.
• Offers and news — only if you say yes. The app asks once ("Get offers and news?"), and Profile → Settings has an "Offers & news" switch that stays off until you turn it on. When it is on, your device is subscribed to our offers-and-news notifications and the record of your device's notification token notes that you said yes. Turning the switch off, or deleting your account, ends the subscription (if your phone is offline at that moment, it ends the next time the app connects). We send these notifications only to people who said yes.
• Camera — used only by staff accounts to scan a customer's pickup QR code at handover. No photos or video are stored; the camera reads a code and nothing else.
• Technical data — when you ask for an emailed sign-in code we store your IP address, a request counter and a timestamp (not linked to your email address or account) to stop abuse. When you enter a coupon code that does not work, we store a counter and a timestamp under one-way hashes of your account ID and of your IP address (we do not store the code you typed, or your account ID or address in plain form) to limit repeated wrong guesses; the counter only covers the last ten minutes. Our servers also keep technical logs that include email addresses and user IDs.
• On your device — the app keeps your name, phone number, saved delivery address, cart, language choice and a copy of the menu in its local storage. Signing out clears your name and phone number from it, deleting your account also clears the saved address, and uninstalling the app removes everything.

WHY WE COLLECT IT

We use this information to operate the ordering service: authenticate you, process and fulfill your orders, calculate delivery, contact you about your order, protect the service from abuse, and notify you of order updates. If you say yes to "Offers & news", we also use your device to send you notifications about our own offers and news. We do not use your data for third-party advertising, we have not added any advertising or analytics services to the app, and we do not sell your data to third parties.

WHO WE SHARE IT WITH

Our branch staff see the name, phone number, delivery address and notes on your orders so they can prepare, deliver and contact you about them, and the receipts we print carry them too.

We use these services to run the app:

• Google Firebase — authentication, database, server functions, push messaging, app-integrity checks and hosting. Firebase acts as our data processor and does not use your data for its own purposes.
• Google — if you choose Google Sign-In (it gives us your name and email address), to deliver push notifications to Android phones, and through Google Fonts, from which the mobile app downloads its Arabic font (Google sees your IP address).
• Apple — if you choose Sign in with Apple, and to deliver push notifications to iPhones and iPads.
• Resend (resend.com), an email delivery service — only if you sign in with an emailed code: your email address and the code are sent to Resend so it can deliver the message.
• OpenStreetMap — only when you use the delivery map: the part of the map you are viewing and the pin's coordinates are requested from OpenStreetMap's servers (for map images and street-name lookup), which also see your IP address.

Some of these providers process data on servers outside Iraq, including in the United States. We do not share your data with anyone else except as required by law.

DATA RETENTION

Your account and order history are kept for as long as your account is active. You can delete your account yourself at any time in the app (Profile → Delete Account). This permanently deletes your profile (name and phone number), notification token, wallet balance and its history, any pending sign-in code, and your sign-in identity. The app also ends your offers-and-news subscription on that device. Any remaining wallet balance is forfeited. If you signed in with Apple on an iPhone or iPad, the app also revokes its Sign in with Apple access; if you delete an Apple account from another device, or the revocation fails, you can remove that access yourself in your Apple ID settings under Sign in with Apple.

Order records are not deleted with your account. They are retained for financial recordkeeping as required by law, and they still contain the name, phone number, delivery address and notes you gave on each order. The IP-address records used to limit sign-in-code requests are not linked to your account, and neither they nor the coupon-attempt counters described above are removed by account deletion.

Guest accounts have no profile to delete. You can also request deletion of your data, or of a guest identifier, by contacting us (see below).

YOUR RIGHTS

You can see your name and phone number on the app's Profile screen and delete your account there (Profile → Delete Account). The app has no screen for editing your name or phone number: to correct them, or to request a copy of your data, contact us. You can change the delivery address on any order at checkout. You can turn "Offers & news" on or off at any time in Profile → Settings, and block notifications in your device settings.

CHILDREN

Shaghf Kirkuk is not directed at children and we do not knowingly collect data from children.

CHANGES TO THIS POLICY

We may update this policy from time to time. Material changes will be reflected here with an updated "Last updated" date.

CONTACT

Questions about this policy or your data: workshopwork25@gmail.com