Privacy Policy

Last updated: November 6, 2026

This policy explains what information the Super Rashaqaty app collects, why, who it is shared with, and how you can control or delete it.

1. Information we collect

Account

• Your email address. You sign in with a one-time code sent by email; we never ask for or store a password.
• If you sign in with Google: the email and name Google sends to confirm your identity.
• The governorate you choose.

Fitness and health data (optional)

• Display name, birth year, gender, height, activity level, goal, target weight, and a profile photo if you upload one.
• Weight and body measurements, meals and calories, water, workouts and favourite exercises.
• This data is stored in your account so it syncs between your devices. Only you can see it; the app's administrators have no access to it.

Data that stays on your device only

• Steps: counted from the phone's motion sensor (the "physical activity" permission) and kept on the device.
• "Make your own meal": meals you create are saved on the device only.
• Settings such as appearance, language and the goal-reminder time.

Orders and subscriptions

• When you order a product: name, phone number, delivery address (if you choose delivery), notes, and the items and price.
• When you subscribe to a gym or request a course: name, phone number, notes and the chosen plan.
• Payment is cash on delivery. We do not collect card or bank details.

Support, reports and notifications

• Support messages you send and reports about content or a store.
• In-app notifications about your orders and subscriptions.

Store and gym owners

• Store or gym name, phone, city, photos, products and prices, and financial records (sales and commission, or the monthly fee).
• Precise location of the gym or store: location permission is requested from store and gym owners only, to place their premises on the map. We do not collect the location of regular users.

Technical and security records

• Technical logs the server needs to run and protect the service (such as sign-in times).
• An audit log of administrative actions (who did what and when) to prevent misuse.

2. How we use information

• To run your account, sign you in and sync your data.
• To calculate calories and goals and show your progress.
• To deliver your order to the store or gym, track its status and send notifications.
• To answer support messages and reports.
• To protect the app and its users from fraud and misuse.

3. Who we share it with

• The store or gym you order from: sees your name, phone, delivery address and order details so it can prepare and deliver it, after the administrators approve the order.
• The app's administrators: see orders, support messages and reports to review them. They cannot see your fitness or health data.
• Service providers working for us:
  • Supabase: database, sign-in and photo storage.
  • Our email provider (Resend): to send sign-in codes.
  • Cloudflare: hosting this website and email forwarding.
  • Google: when you choose Google sign-in, and distribution through Google Play.
  Their servers may be located outside Iraq.
• Authorities: only when the law requires it.

4. Phone permissions

• Physical activity: to count steps on the device.
• Notifications: for order alerts and goal reminders. You can turn them off in settings.
• Location: store and gym owners only, to set the premises' location.
• Run after restart: so the goal reminder keeps working after the phone restarts.

5. Security

All traffic between the app and the server is encrypted (HTTPS), and the database is locked by access rules so each user can only see her own data. No system is 100% secure, however.

6. Retention

• Your account data is kept until you delete the account.
• Notifications are deleted automatically after 60 days.
• When you delete your account, we delete the account, profile, fitness and health data, photos and gym subscriptions.
• Records of orders placed with stores are kept for accounting, detached from your account.
• Security records may be kept as long as needed to prevent misuse.

7. Your rights

• View and edit your data inside the app.
• Delete your account in the app: Account ← menu ⋮ ← Settings ← Account and sign-in ← Delete my account permanently.
• Or request deletion on the account deletion page.
• For any question or request about your data, email support@superrashaqaty.com.

8. Children

The app is open to everyone but is not directed at children under 13, and we do not knowingly collect their information. If you are 13–17, use the app with your parent's or guardian's knowledge. If we learn that an account belongs to a child under 13, we delete it.

9. Changes

If we change this policy we update the date above, and we announce important changes inside the app.