Privacy Policy
Last updated: 2026-08-19
This policy explains what data the Wasalny app collects,
how we use it, who we share it with, and what rights you have. The app connects
passengers with drivers in Jordan.
1. Data we collect
When you create an account
- Name, phone number, and password (stored hashed — nobody can read it).
- Your governorate and preferred app language.
Drivers, in addition
- National ID number and vehicle details (type, make, model, year, colour, plate number).
- Document photos you upload yourself: national ID, driving licence, vehicle registration, and a photo of the vehicle.
- Your chosen pickup areas and reception range.
When you use the service
- Trip details: the governorate and area you select for pickup and destination, an optional
free-text description you write, passenger count, proposed price, notes, trip type and timing.
- Trip status and timestamps, and any ratings or comments you leave.
- For drivers: subscription details, payment method, transfer reference and payment proof image.
Technical data
- Your device's push notification token (Firebase), used to deliver alerts.
- Last-seen time, app version, and IP address in server logs.
What we do not collect: the app does not request location permission and
does not collect GPS coordinates. We rely only on the governorate and area you pick manually.
We do not access your contacts or photos beyond the files you choose to upload, and we never
store card details — payment happens outside the app.
2. How we use it
- Creating your account, signing you in, and reviewing driver documents before approval.
- Showing your ride request to suitable drivers in your area and completing the trip.
- Letting both parties make contact: once a driver accepts, each side sees the other's name and phone number.
- Sending notifications about your trips, account, and subscription.
- Support, resolving disputes, and preventing abuse.
3. Sharing
We do not sell or rent your data. Sharing is limited to:
| Recipient | What is shared | Why |
|---|
| The other party on a trip | Name, phone number, trip details | So you can complete the trip and contact each other |
| Google Firebase | Device token and notification text | To deliver push notifications |
| Our hosting provider | Database and file storage | To run the service |
| Authorities | Only what the law requires | Where we receive a binding legal request |
4. Retention
- Account data: for as long as your account is active, or until you ask us to delete it.
- Trip and payment records: kept for accounting and dispute resolution even after account
deletion, separated from your personal details as far as practicable.
- Driver documents: deleted when the driver's account is deleted.
5. Security
- All traffic between the app and our servers is encrypted with HTTPS.
- Passwords are stored as one-way hashes (bcrypt) and cannot be recovered.
- Admin panel access is restricted to authorised staff.
6. Your rights
- Access your data or request a copy.
- Correct anything inaccurate, in the app or by contacting us.
- Delete your account and data — see the
account deletion page.
- Turn off notifications at any time in your device settings.
7. Age
The service is intended for people aged 18 and over. We do not knowingly collect data from
anyone younger; if we discover such an account we delete it and its data.
8. Changes to this policy
We may update this policy from time to time; the date at the top always reflects the latest
version. We will tell you in the app about any significant change.
9. Contact us