Privacy Policy

• Account: your phone number, your password (stored only as a one-way hash), your display name, the Latin-letter name printed on your shipping address, your governorate and your language.
• Account code: a unique code (e.g. ESH123456) we issue for your address, which links your parcels to your account.
• Parcels: what arrives for you at the warehouse: weight, dimensions, photos taken on arrival, the category of the contents, the value of the goods as shown on the invoice inside or as you enter it, and each stage of the journey.
• Delivery: the delivery addresses you add, and a recipient’s name and number if you give them.
• Messages: reports and messages you send us in the app, and claims for parcels.
• Notifications: a push identifier for your phone so we can alert you, and the list of notifications we sent you.
• Technical: your IP address at sign-in and on some requests, for security and abuse prevention, and short-lived server logs.
• Face ID / fingerprint lock: checked on your phone only; we never receive your fingerprint or face. The app does not ask for your location, contacts, camera or photos.

• To create your account, sign you in and send verification codes.
• To match parcels arriving at the warehouse to your account, and to price, ship and hand them over.
• To tell you what is happening to your parcels, and to answer your reports and claims.
• To protect the service from fraud and abuse, and to keep the records a business must keep.

We do not sell your data, and we do not use it for advertising.

• Twilio / WhatsApp: to send verification codes to your number.
• OneSignal: to deliver notifications to your phone (the push identifier only, not your name or number).
• Hetzner (Germany): where our servers and database run.
• Cloudflare R2: storage for parcel photos and backups.
• The warehouse and the shipping and delivery companies handling your parcel: only what they need to move and hand it over, such as your code, Latin name and delivery address.
• The Esh7anli app: if your number has an Esh7anli account, we may check at sign-up to link the two.
• Authorities where the law requires it, such as customs.

For as long as your account exists. When you delete your account we remove your personal data at once and keep past parcel and payment records without anything that identifies you, because a business must keep them. A copy may remain in our protected backups for up to 30 days before it is deleted.

In the app: Account → Delete my account, then enter your password. Deletion is not possible while parcels are still on their way or waiting for you. If you no longer have the app, see the account deletion page.

The service is for people aged 18 and over. We do not knowingly collect data from anyone younger.

If we change this policy we will publish the new version here with its date. Questions: support@esh7anli.com