Privacy policy
This policy sets out what data the Zanbbel app collects, how and why it collects it, who we share it with, and how you ask for it to be deleted.
1. What we collect
| Data | Why | How it reaches us |
|---|---|---|
| Phone number | Creating your account and signing in with a code | You enter it |
| Name · email (optional) · profile photo | Showing who you are to merchants and the driver | You enter it |
| Location | Showing nearby shops, working out shipping cost, tracking your shipment | From the device with your permission — you can type the address instead |
| Shipping addresses | Getting your order to you | You enter them |
| Order history and cart | Fulfilling the order, invoices, support, reordering | From your use |
| Payment details | Completing payment | Handled by Stripe — we do not store your card number on our servers |
| Wallet and bank account (for withdrawals) | Deposits, withdrawals and settlements | You enter them |
| Identity verification documents | Verifying sellers and preventing fraud | You upload them when you request verification |
| Device id · model · app version | Technical support, diagnosing faults, measuring performance | Automatically |
| Push token | Sending updates on your order | Automatically once you allow notifications |
| Chat and support messages | Talking to the seller and support | You write them |
We do not collect your contacts, your photos (beyond what you deliberately upload), or the list of apps installed on your device.
2. Why we use it
- Fulfilling your orders and shipping them to you.
- Letting you pay, be refunded, and manage your wallet.
- Telling you where your order is.
- Answering your questions and resolving problems.
- Preventing fraud and protecting accounts.
- Improving the app and measuring how it performs.
We do not sell your personal data to anyone.
3. Who we share it with
| Party | What reaches them | Why |
|---|---|---|
| The seller you ordered from | Your name, phone, address and the order | To prepare and ship the order |
| The carrier and whoever hands over the shipment | Your first name, phone and delivery address | To deliver the shipment |
| Stripe | Payment details | Processing payments |
| Google Firebase | Push token, crash data | Notifications and crash diagnosis |
| Google Maps | Location coordinates | Maps and address lookup |
| Meta (WhatsApp Business) | Your phone number | Delivering your sign-in code and order alerts |
| Meta (ad measurement) | Your usage events with your phone and email hashed, your IP address and browser identifiers — detailed in section 3b | Measuring ads and targeting them better |
We require every party to protect your data to a standard no lower than this policy sets.
3b. Ad measurement with Meta
We use the Meta pixel on the website and Meta’s Conversions API from our server to learn which of our ads brought you here and to show our ads to people with similar interests. On each event (page view, product view, search, add to cart or favourites, checkout start, completed order, account creation) Meta receives:
- The product id, its value and currency, the search term and the order number — never your address or payment details.
- Your phone number, your email (where we have one) and an identifier for your account or device, hashed with SHA-256 so they cannot be read as text.
- Your IP address, browser or device type and operating system, the page URL and the page that referred you, and Meta’s cookies (_fbp and _fbc) that link your visit to the ad you clicked.
- On the website, Meta’s “automatic advanced matching” may also pick up what you type into our forms (email, phone, name, address), hashed in your browser before it is sent.
You can refuse all of this: on the website through the “ad measurement” notice on your first visit, and in the app through the measurement prompt or your device’s tracking settings. Refusing stops both the pixel and the server-side sending, and we store your refusal against your device identifier. Meta’s use of this data is governed by its data policy and its business tools terms.
4. How long we keep it
- Account data: for as long as your account exists.
- Order and financial records: kept after deletion for as long as accounting and legal obligations require.
- Verification documents: deleted once their purpose has passed.
5. Your rights
- To see your data.
- To correct it inside the app: Account → Edit profile.
- To delete it — inside the app (Account → Settings → Delete account) or through the delete-account page.
- To withdraw permission for location, notifications or tracking from your device settings at any time, and for ad measurement through the website notice or the app prompt.
6. Security
Traffic is encrypted over HTTPS. Sign-in tokens are held in the device’s secure store — Keychain on iOS and EncryptedSharedPreferences on Android.
7. Children
The service is not aimed at anyone under 16, and we do not knowingly collect their data. If we learn of such an account we delete it.
8. Changes
On any material change we update the date above and tell you inside the app.
9. Contact
Email: privacy@zanbbel.com · WhatsApp: +971 50 561 6722