1. Who we are
The Shoula apps and platform are operated by Shoula Express Delivery (الشعلة السريعة للتوصيل) ("Shoula", "we"), located at Babil, Iraq. We are the controller of the personal data described in this policy.
This page is available to everyone without signing in. It is written in short sentences to be read on a phone.
2. What we collect and why
We collect only what we need to run the delivery service. The table shows each kind of data, whose it is and why we collect it.
| Data | Whose | Why |
|---|---|---|
| Account and contact details: name, phone number; for merchants the store name and address; for drivers the vehicle type. | Drivers and merchants | Creating the account, signing in with a code sent to your phone, contacting you about orders, and showing your name to the other party in an order. |
| Location: the driver's location while on shift (foreground and background), and the pickup and drop-off addresses of each order. | Drivers (continuous while on shift); merchants (store address and order addresses) | Dispatching orders to the nearest driver, showing the driver to the merchant and to operations on a map, calculating distance and fare, and resolving delivery disputes. Details in section 3. |
| Device health: battery level, network connection state, and location-permission state (allowed / denied / while-in-use only). | Drivers | So operations can tell why a driver may have stopped receiving orders (low battery, no connection, location turned off) and act quickly. |
| Photos you upload: proof of delivery, fine objections, receipts. | Drivers (sometimes merchants) | Proving an order was completed, handling objections and financial settlements. |
| Push-notification token: a device identifier issued by Apple or Google. | Drivers and merchants | Sending alerts for new and urgent orders and status updates. |
| Order data: the customer's name, phone and address as entered by the merchant, items and amounts, timestamps, statuses and the assigned driver. | Entered by the merchant, seen by the assigned driver | Performing and tracking the delivery, financial settlement, and the record that protects each party's rights. |
| Support messages: what you send us via the app, email or WhatsApp. | Everyone | Replying to you and solving the problem. |
| Basic technical data: device model, OS, app version and crash logs. | Everyone | Running the app and fixing bugs. We use no advertising trackers. |
End customers: the person receiving the order does not use our apps. Their name, phone and address are entered by the merchant solely to perform the delivery, and we protect them as described here. The merchant is responsible for informing their customers that these details are shared with the delivery office.
3. Location during shifts (including background)
The Shoula Driver app collects the driver's location even when the app is closed or in the background, but only while the driver is on shift (status "online"). Location collection stops when the driver goes "offline" or ends their shift.
Why we ask for the "Always" location permission:
- So nearby order offers reach you while your phone is in your pocket or the app is in the background.
- So the merchant and the operations team can see where the driver is during an order and know the expected arrival time.
- To calculate the pickup and drop-off distance that the fare is based on.
What we do not do: we do not collect a driver's location off shift, we do not use location for advertising, and we do not sell it to anyone.
You can change the location permission at any time in your phone settings. If you choose "While using" or deny it, you may not receive orders and may not be able to start a shift, because dispatch depends on proximity.
The merchant app requests the device location only when needed (for example to set the store or pickup address) and never collects it in the background.
4. How long we keep data
- Account data: for as long as the account is active. Deleted within 30 days of a deletion request (see section 8).
- Location trail: detailed location points are kept for 90 days to handle objections and complaints, then deleted or anonymised so they no longer identify a driver.
- Photos: proof-of-delivery, objection and receipt photos are kept for 12 months after the related order or objection is closed, then deleted.
- Order and payment records: kept for as long as accounting and legal requirements demand, even after account deletion, separated from identity data where possible.
- Support messages: 12 months after the order or issue is closed.
5. Who we share data with
We do not sell or rent your data to anyone. We share it only in these cases:
- Between the parties to an order: the merchant sees the assigned driver's name, vehicle type, phone number and live location during the order. The driver sees the store name and address, and the customer's name, phone and drop-off address, only for orders they have accepted.
- Operations and support: authorised Shoula staff see order data and on-shift driver locations to dispatch orders and solve problems.
- Technical service providers: database hosting and push notifications (Google Firebase), maps (OpenStreetMap), and SMS verification codes. They process data only on our behalf and under our instructions.
- Authorities: when required by law or a court order.
6. Security
Data is transmitted encrypted (HTTPS), access is limited to staff who need it for their work, and sign-in uses a code sent to your phone instead of a fixed password. No system is 100% secure, so tell us immediately at connect@alshulaads.com if you suspect unauthorised access to your account.
7. Your rights
At any time you can:
- Access the data we hold about you and request a copy.
- Correct your name, phone and store details in the app or through support.
- Delete your account (section 8).
- Withdraw the location or notification permission in your phone settings, bearing in mind the effect on receiving orders.
- Object to how your data is processed, or lodge a complaint with us.
To exercise any right, write to connect@alshulaads.com from the phone number or email registered on your account. We reply within 30 days at most.
8. Account deletion
You can request deletion from inside the app or by emailing connect@alshulaads.com. The full steps, what is deleted, what is kept for accounting or legal reasons, and the expected timeframe are on the Delete account page.
9. Age
Our services are for adult merchants and drivers (18 and over). We do not knowingly collect data from anyone younger, and we delete any account we learn belongs to a minor.
10. Changes to this policy
We may update this policy when we add features or requirements change. We will publish the new version here with its effective date and notify you in the app if the change is material.
11. Contact
Privacy questions: connect@alshulaads.com
General support: connect@alshulaads.com · +9647877825257 · Contact page
Shoula Express Delivery (الشعلة السريعة للتوصيل), Babil, Iraq