Privacy Policy

This policy explains what data the “Saydaliyati” app and its web platform collect, why, where it is stored, who can see it, and how to request its deletion. By using the app you agree to this policy.

1. Data we collect

a) Account data

• Your name, email, password and country when you create an account. The password is stored on the platform server with one-way encryption (bcrypt); we never see it.
• Your mobile number, if you enter it (optional).

b) Pharmacy data entered by users

• Products, prices, batches, expiry dates, stock, warehouses and purchase invoices.
• Sales, returns and invoices.
• Customers: name, mobile number, and debt and payment history.
• Staff: name, email, mobile, role, permissions, shift type, salaries and advances, and salary payout accounts (e-wallet or bank account) if the manager enters them.
• The pharmacy's expenses and payment accounts.
• Activity log: who performed each operation and when, within the pharmacy.

This data belongs to the subscribing pharmacy, which is responsible for entering it and for obtaining its customers' and staff's consent. We store and process it on the pharmacy's behalf solely to provide the service.

c) Device data

• A random identifier the app creates for each device, to tell devices apart during sync and prevent data conflicts between them.
• A local copy of the pharmacy data on the device, so the app works without internet.
• Device name, app version, last connection and the number of operations not yet sent — so the owner knows which device hasn't sent its data.
• The device's signed license (the offline working period) and the push notification token, if you allow notifications.

We do not collect your location, contacts, photos or files.

2. App permissions

• Camera: only to scan barcodes when selling and adding products. No photos are taken, stored or sent.
• Internet and network state: to sync data and know whether a connection is available.
• Vibration: feedback when a barcode scan succeeds or fails.
• Notifications: alerts about the subscription, staff and unsent data. You can turn them off in the phone settings.
• Background work and restart: to send what was sold offline when the internet returns, even if the app is closed.

3. How we use the data

• Running the app, storing the pharmacy's data and syncing it across its devices.
• Verifying users' identity and their permissions within their pharmacy.
• Managing the pharmacy's subscription and reminding the owner when it is about to end.
• Reports in the owner's web panel.
• Technical support when requested.

We do not sell data, use it for advertising, or share it with anyone for marketing purposes. The app contains no ads and no third-party tracking or analytics tools.

4. Where data is stored and who processes it

• The Saydaliyati platform server at our hosting provider: stores accounts and pharmacy data and syncs it between devices, as well as subscriptions, payments and the owner panel's reports.
• Google Firebase Cloud Messaging: only to deliver push notifications to the phone — the notification text and device token pass through it, not the pharmacy's data. Subject to Google's privacy policy.
• PayPal: if the owner pays the subscription through it. Their card or account details stay with PayPal and never reach us; we receive the payment confirmation, amount and reference. Manual payment receipts are stored on our server in private storage visible only to the administrator.
• Email: we send verification codes and alerts from the platform's mail server.
• Your device: the local copy used to work without internet.

Data travels between the app and the servers over an encrypted connection (HTTPS/TLS).

5. Who can see the data

• Within the pharmacy: each user sees what their permissions, set by the manager, allow.
• No pharmacy can see another pharmacy's data; security rules on the server isolate each pharmacy from the others.
• The service provider: only when needed for technical support, subscription management or fixing a technical problem.
• Authorities: if the law requires us to.

6. Data retention

• We keep the pharmacy's data for as long as its subscription is active.
• After the subscription and its grace period (3 days) end, the data remains available for viewing and export and is not deleted automatically, so the owner can retrieve it or renew.
• Data is permanently deleted when the owner requests deletion of their pharmacy, as described in section 7.

7. Deleting your account and data

• From the app: “My account” → “Delete my account”. A staff account is deleted immediately.
• From the web: the account deletion request page.
• A pharmacy owner's account: deleting it deletes the pharmacy and all its data, so we contact the owner to confirm before proceeding.
• We carry out requests within 30 days at most after verifying them.
• Deleting a pharmacy removes all its data from the platform server and cannot be undone.
• When a staff account is deleted, their personal data (name, email, mobile and payout accounts) is erased and the sign-in account is deleted; the operations they recorded in the pharmacy remain under “Deleted account”, as they are part of its financial records.
• We may keep payment and invoice records for as long as the law requires.

8. Data protection

Encrypted connections, server-side security rules that prevent any user from accessing anything outside their pharmacy, permissions per role, an activity log of every operation, a sign-in token per device that is revoked when the password changes, and an email alert when signing in from a new device. Still, no system is completely secure; we recommend a strong password and not sharing your account.

9. Children

The app is a business tool for pharmacies. It is not intended for anyone under 18, and we do not knowingly collect their data.

10. Your rights

You may access your data, correct it from within the app, and request a copy of it or its deletion by contacting us using the details below.

11. Changes to this policy

We may update this policy and will change the “Last updated” date above. If the change is material, we will notify users in the app or by email.