Privacy Policy

1. Data Controller and Contact

The person responsible for the processing described in this Policy is Thair Majed Ghazi Adameh, operating the AlHerafey service. Privacy questions, correction requests, complaints, and account-deletion questions may be sent to support@alherafey.com.

Scope of This Privacy Policy

This Policy applies to the AlHerafey Android and iOS applications, the AlHerafey website, customer and artisan accounts, bookings, conversations, reviews, complaints, reports, support requests, professional verification, notifications, and account-security systems. It does not govern websites or services operated independently by third parties.

2. Data We Process

3. How We Obtain Data

We receive data directly from you when you register, update a profile, create or respond to a booking, upload content, send a message, submit a complaint, contact support, or change settings. We also receive limited technical and delivery data from the application, our servers, notification services, and infrastructure providers as needed to operate and protect the Services.

4. Purposes of Processing

• Create, authenticate, secure, and manage customer and artisan accounts.
• Match customers with artisans and operate bookings, quotes, service delivery, and booking history.
• Enable communications, notifications, support, complaints, reviews, and safety investigations.
• Verify professional profiles and review submitted images or documents.
• Prevent abuse, unauthorized access, fraud, spam, and violations of our terms.
• Maintain service reliability, troubleshoot errors, measure operational performance, and comply with valid legal requests.

Legal and Operational Grounds

Depending on the circumstances, we process personal data because it is necessary to provide a requested service, create and secure an account, administer a booking, investigate a complaint or dispute, protect the integrity of the Services, respond to a valid legal request, or support a legitimate operational purpose that does not override the user's rights. Where processing depends on device permission or consent, the user may withdraw that permission through the relevant device or account settings.

5. Who Can Access Data

Booking participants receive only the information reasonably needed to arrange and perform the requested service. Authorized AlHerafey administrators and support personnel may access records when required for verification, support, complaints, security, or service administration. We do not publish professional documents, private support records, authentication credentials, or notification tokens.

A verified artisan's professional profile and business contact telephone number may be displayed through the public website or discovery features to allow customers to contact the artisan. Artisans should provide a telephone number suitable for this professional purpose and may contact support about correction or removal, subject to account and service requirements.

We use service providers acting on our instructions, including Vultr for infrastructure hosting, Google Firebase Cloud Messaging and Apple Push Notification service (APNs) for notification delivery, and configured email hosting or delivery services for operational and support email. These providers may process limited data needed to deliver their service. We may also disclose information when required by a valid legal process, to protect users or the Services, or in connection with a legitimate transfer of the Services subject to appropriate safeguards.

6. Device Permissions

Photo-library or camera access is used only when you choose to upload a profile image, booking image, professional document, complaint attachment, or support attachment. Notification permission enables booking, message, account, and support updates. Permissions are optional and can be withdrawn in your device settings. Refusing a permission disables only the feature that needs it; core account access remains available where technically possible.

User-Generated Content and Safety

Users may submit profile information, booking descriptions, messages, photographs, reviews, ratings, complaints, reports, and support messages. Users must not submit illegal, threatening, abusive, fraudulent, discriminatory, sexually exploitative, harassing, or otherwise objectionable content.

AlHerafey provides mechanisms to report a user or content, submit a complaint, contact support, block another user from sending new messages, and permit authorized administrators to investigate reports. Blocking does not automatically erase existing booking or conversation records where those records are needed to preserve evidence, support an active booking, or protect participant rights.

7. Retention

We keep identifiable data only for as long as it is needed for the purposes described above. Our current operational retention rules are:

• Active-account data is retained while the account remains active.
• On completed account deletion, active sessions, notification tokens, private profile images, and professional documents are deleted or invalidated as part of the deletion process.
• Closed booking, communication, support, complaint, and security records are retained only for as long as reasonably necessary to resolve disputes, protect users, maintain service integrity, and meet applicable obligations.
• When continued identification is unnecessary, records are deleted, anonymized, or access to them is restricted.
• Protected backup copies may temporarily contain previously deleted information until the applicable backup cycle overwrites or expires them. Backup data is not restored for ordinary business use.

When a record must be preserved, we restrict its use and remove or replace direct identifiers where reasonably possible. Retention periods may be shortened when the information is no longer needed.

8. Account Deletion

Customers and artisans can request permanent account deletion from Profile → Privacy and Help → Delete Account Permanently in the application. The application requires the current password to re-authenticate the account owner. You may also begin through our public account-deletion page. Requests are handled in accordance with Jordanian Personal Data Protection Law No. 24 of 2023 and its applicable regulations.

A completed deletion removes or anonymizes the account and personal profile, revokes active sessions and notification tokens, and deletes private files that do not need to be retained. If an open booking, complaint, support case, financial reconciliation, or safety dispute exists, the request is recorded and completion is postponed until the open obligation can be closed without impairing the rights of another participant. Historical records alone do not permanently prevent deletion. Eligible requests are handled without undue delay, subject to identity verification and applicable obligations.

9. Correction, Access, and Choices

Subject to Jordanian Personal Data Protection Law No. 24 of 2023 and its applicable regulations, you may request access to your data, obtain information about its processing, correct inaccurate data, object to or restrict processing where applicable, withdraw consent for a consent-based purpose, request deletion, and submit a complaint. You can correct many profile fields in the application or contact us at support@alherafey.com. We may verify identity before acting. A request may be limited where honoring it would expose another person's data, undermine an active dispute, or conflict with an applicable obligation.

Website Cookies and Local Storage

The website may use strictly necessary session cookies, security tokens, and local storage to keep users signed in, protect forms against misuse, remember essential choices, and operate requested features. We do not state that advertising or analytics cookies are used unless such tools are actually enabled. If optional analytics or advertising tools are introduced, this Policy and any required consent controls will be updated before use.

10. Security

We use administrative and technical controls intended to protect personal data, including authenticated access, access restrictions, transport encryption through HTTPS, password hashing, and session revocation. No online service can guarantee absolute security. Please use a strong, unique password and contact us if you suspect unauthorized access.

Tracking and Advertising

The current AlHerafey Services are not designed to track users across unrelated applications or websites for targeted advertising. We do not request App Tracking Transparency permission merely as a precaution. If advertising, cross-application tracking, or advertising-measurement technology is introduced, this Policy and the relevant store disclosures will be updated and any required permission will be requested before tracking occurs.

11. Children

The Services are intended for people who are legally able to request or provide the offered services and are not directed to children. If you believe a child has provided personal data without appropriate authorization, contact us so we can investigate and take appropriate action.

12. International Processing

Our providers may process data in countries other than your country of residence. Where this occurs, we limit processing to what is needed for the Services and use the contractual and technical protections available for the relevant provider and transfer.

Third-Party Services and Links

The Services may contain links to third-party websites or rely on independently operated services. Third-party services may have their own privacy policies and security practices. AlHerafey is not responsible for independent processing performed by third parties outside the services they provide to AlHerafey. Users should review the privacy terms of third-party services before providing information directly to them.

13. Changes to This Policy

We may update this Policy when the Services, providers, legal requirements, or data practices change. We will publish the revised text here and update the date above. Material changes may also be communicated in the application or through an account communication when appropriate.