Privacy Policy
Last updated: November 11, 2026
- We collect the minimum needed to run your orders: your phone number, name, addresses, and location when needed.
- We do not sell your data, we show no ads, and we use no third-party tracking or analytics tools.
- We share your data only with those needed to fulfil your order (the store, and the courier or driver) and with specific technical service providers.
- You can delete your account at any time: in the app (Account → Delete my account) or on the deletion page.
- The service is for people aged 18 or over.
1. Who we are and scope
Wasil Transport and Delivery Project ("Wasil", "we", "us") operates the Wasil app for Android and the website on which you are reading this page. Our address: Kutha District, Babil, Iraq. This policy applies to your use of the Wasil app in all its modes (customer and merchant mode) and to this website. We are responsible for processing the data described here.
Wasil provides three services: delivery from stores and restaurants, Jibli (a courier buys what you ask for and delivers it to you), and taxi rides. Independent partners — stores, couriers and drivers — operate within these services.
2. Data we collect
a) Data you provide
- Phone number (required to create an account and sign in) and name.
- Addresses: the addresses you save (label, address text, a nearby landmark, and the map location).
- Order content: products and notes, the description of what you want to buy in "Jibli" (which may include medicines or personal items if you write them), and the pickup and drop-off points of taxi rides.
- For merchants (merchant mode): business name, owner, phone number, address and location, logo and product pictures you upload, and transfer receipt images used to activate a subscription.
- Any message you send to support (via WhatsApp or email).
b) Data collected while you use the app
- Location: we request your precise or approximate location only while you are using the app and when you use a feature that needs it (choosing a delivery address or pickup point, and checking whether the service is available in your area). We do not track your location in the background.
- Notification token and device identifier: to deliver order-status notifications to your device.
- Technical data: IP address, request times, app version and device type, for security, abuse prevention and troubleshooting.
c) What we do not collect
- We do not collect bank card data (payment is cash on delivery).
- We do not access your contacts, messages or photos unless you choose a picture yourself, and we do not use the advertising ID.
3. Summary of data, purpose and sharing
| Data | Examples | Why we use it | Who receives it |
|---|---|---|---|
| Account information | Phone number, name | Sign-in and verification; contacting you about your order | The store and the courier or driver handling your order (name and number); the Wasil team |
| Location and addresses | Saved addresses, delivery or pickup point on the map, current location when requested | Service-area and store availability, delivering your order, taxi fare calculation | The courier or driver handling your order; the store (address); map providers (as needed to display maps) |
| Order content | Products, notes, Jibli description, ride route | Fulfilling the order, resolving problems, accounting | The store, the courier or driver, the Wasil team |
| Device identifier for notifications | Push token (FCM), device type | Sending order-status notifications | Google Firebase Cloud Messaging |
| Merchant data | Name, address, phone, location, logo and product pictures, subscription receipts | Showing the store to customers, review and approval, subscription management | Store details and pictures are shown to customers; receipts are visible to the team only |
| Technical data | IP address, request times, app version | Security, abuse prevention, troubleshooting | Our server hosting provider |
4. How we use your data
- Creating your account and verifying your phone number with a code sent to you.
- Showing the stores available in your area and carrying out your orders and rides from start to delivery.
- Enabling the store and the courier or driver to contact you (call or WhatsApp) to complete the order.
- Sending order-status notifications and important alerts.
- Customer support and resolving complaints and disputes.
- Security, fraud prevention, fake-order prevention and abuse prevention.
- Accounting, keeping order and payment records, and legal compliance.
- Improving the service using aggregated statistics that do not identify you.
We do not sell or rent your data and we do not use it for targeted advertising.
5. Who we share your data with
- The courier or driver assigned to your order: your name, phone number, delivery address and location, order details and notes, only to complete the delivery. In Jibli they see the description of what you want to buy. In taxi rides they see the ride points, your name and number.
- The store you order from: your name, phone number, address and order details.
- The Wasil team: to manage orders and provide support. This includes internal operational notifications sent to a private team group on Telegram that contain the details of a new order.
- Technical service providers that process data on our behalf and only as needed:
- Google Firebase Cloud Messaging: to deliver notifications (device token and notification content).
- WhatsApp Business Platform (Meta): to send the verification code to your phone number (your number and the code).
- Map and address-search providers (such as OpenStreetMap and services built on it): they may receive your device IP address, the displayed map area and search text in order to show maps and address results.
- Server hosting provider: to store and process data.
- Authorities: when required by law or a court order, or to protect our rights and users' safety.
6. Permissions the app requests
- Location: to set your address and check availability. You may decline and choose the address manually on the map.
- Notifications: to tell you about your order status. You can turn them off in your phone settings.
- Photos or camera (merchants only): when you choose a picture for your store, product or transfer receipt. We only access what you select.
- Internet: to run the app.
7. How long we retain data
- Account data and addresses: for as long as your account exists; erased when you delete it.
- Verification codes: they expire after a few minutes and are stored only in a hashed, unreadable form.
- Notification token: until you sign out or delete your account.
- Order and ride records: we retain them for accounting, dispute resolution and legal obligations. When you delete your account we erase everything that identifies you from them (name, phone, addresses, notes) and coarsen coordinates to a wide area (about one kilometre); anonymous data (amounts, dates and statuses) remains.
- Technical logs: for a limited period for security purposes.
- Web deletion requests: after processing, we keep a record of the request without your full phone number.
8. Deleting your account and data
You can delete your account in any of these ways:
- In the app: Account → "Delete my account", then confirm with a verification code sent to you. Deletion is carried out immediately.
- On the web: through the deletion request page, without installing the app. We verify the number's owner by phone call and carry out the deletion within 30 days at most (usually within days).
- By contacting us directly by email or WhatsApp below.
What is erased: your name, phone number, saved addresses, registered devices and sessions, and everything that identifies you inside your past orders and rides. What remains: order and accounting records in anonymous form (amounts, dates, statuses) for legitimate financial and legal purposes. After deletion you may register again with the same number as a new account.
Conditions: deletion is not possible while you have an order or ride in progress (finish or cancel it first). Merchant accounts are deleted through support after financial settlement.
9. Your rights and choices
- Access and correction: you can edit your name and addresses in the app, and request a copy of your data through support.
- Deletion: as described in section 8.
- Withdrawing permissions: at any time from your phone settings (location, notifications), which may affect some features.
- Complaints: contact us and we will respond to your request; you may also contact the competent authorities.
10. Data security
We take reasonable measures to protect your data, including encrypting the connection between the app and the server (HTTPS), storing verification codes in hashed form, restricting team access, keeping subscription receipt images in private storage that is not publicly accessible, and limiting sign-in attempts. However, no method of transmission or storage is 100% secure, so we encourage you to protect your phone and never share your verification code with anyone.
11. Transfers outside Iraq
The hosting servers and the notification and verification services we use may be located outside Iraq, so your data may be processed in other countries. We use providers we believe apply appropriate protection and we share the minimum necessary with them.
12. Children
Our services are intended for people aged 18 or over, and we do not knowingly collect data from anyone younger. If we learn that we have, we delete the account and its data. If you are a parent or guardian and believe your child registered with us, please contact us.
13. Advertising, tracking and cookies
We show no ads in the app and use no third-party tracking or behavioural analytics tools, and we do not share your data for advertising purposes. When you submit a form, our website uses a technical cookie only to protect the form against forgery; it is not used for tracking.
14. External links and apps
The app sometimes opens other apps at your request (phone calls, WhatsApp, or the browser). Those apps are governed by their own policies and are not our responsibility.
15. Changes to this policy
We may update this policy. We will change the "Last updated" date above and notify you in the app or on the website of any material change. Continued use after an update means you accept it.
16. Contact us
For any question or request about your data:
- Entity: Wasil Transport and Delivery Project
- Address: Kutha District, Babil, Iraq
- Email: wasil.iq4@gmail.com
- WhatsApp: 07866573000
17. Governing law
This policy is governed by the laws in force in the Republic of Iraq, without prejudice to any rights granted to you by other laws that apply to you.