Privacy Policy
Last Updated: November 2025
Welcome to Sahla ("we," "our," or "us"). We are committed to protecting your privacy and ensuring you have a positive experience when using our food delivery application ("App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.
By using Sahla, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our App.
1. Information We Collect
1.1 Personal Information
We collect information that you provide directly to us, including:
- Account Information: Name, email address, phone number, profile image, date of birth, and authentication credentials
- Location Data: Your current location, delivery addresses, and location preferences (wilaya, city, etc.)
- Order Information: Order history, preferences, restaurant selections, and payment information
- Profile Data: User role (customer, restaurant owner, delivery person, or admin), preferences, and settings
1.2 Automatically Collected Information
When you use our App, we automatically collect certain information, including:
- Device Information: Device type, operating system, unique device identifiers, and mobile network information
- Usage Data: How you interact with our App, including pages visited, features used, time spent, and user behavior patterns
- Location Data: Real-time location information when you use location-based features (with your permission)
- Technical Data: IP address, browser type, access times, and error logs
1.3 Information from Third-Party Services
If you choose to sign in using third-party services, we may collect:
- Google Sign-In: Your Google account information (name, email, profile picture)
- Apple Sign-In: Your Apple ID information (name, email, if provided)
- Phone Verification: Phone number verification through SMS OTP
2. How We Use Your Information
We use the information we collect for various purposes, including:
- Service Delivery: To process and fulfill your orders, connect you with restaurants and delivery partners, and provide customer support
- Location Services: To determine your delivery location, show nearby restaurants, and optimize delivery routes
- Account Management: To create and manage your account, verify your identity, and maintain your profile
- Personalization: To personalize your experience, recommend restaurants and menu items based on your preferences and order history
- Analytics and Improvement: To analyze app usage, track user behavior patterns, improve our services, and develop new features
- Communication: To send you order updates, promotional messages, and important notifications (with your consent)
- Security and Fraud Prevention: To detect, prevent, and address technical issues, security threats, and fraudulent activities
- Legal Compliance: To comply with applicable laws, regulations, and legal processes
3. Third-Party Services and Data Sharing
3.1 Service Providers
We share your information with trusted third-party service providers who assist us in operating our App, including:
- Supabase: Database and authentication services for user accounts and data storage
- Firebase: Analytics, crash reporting, and push notification services
- Sentry: Error tracking and performance monitoring
- Google Maps: Location services and mapping functionality
- Payment Processors: To process payments for orders (if applicable)
- Delivery Partners: To coordinate and fulfill deliveries
- Restaurant Partners: To process and prepare your orders
3.2 Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
3.3 Legal Requirements
We may disclose your information if required by law or in response to valid requests by public authorities.
4. Data Security
We implement appropriate technical and organizational security measures to protect your personal information, including:
- Encryption of data in transit and at rest
- Secure authentication and authorization mechanisms
- Regular security audits and vulnerability assessments
- Access controls and employee training on data protection
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.
5. Location Data
Our App collects and uses location data to:
- Show you nearby restaurants and delivery options
- Calculate accurate delivery times and distances
- Enable location-based search and filtering
- Track delivery progress (for delivery partners)
You can control location permissions through your device settings. Note that disabling location services may limit certain features of the App.
Background Location: We may request background location access to provide location-based notifications and improve delivery tracking. This permission is only requested when necessary and with your explicit consent.
6. Your Rights and Choices
6.1 Access and Correction
You have the right to access, update, or correct your personal information through the App's settings or by contacting us directly.
6.2 Data Deletion
You can request deletion of your account and associated data by:
- Using the account deletion feature in the App settings
- Contacting us directly through the contact information provided below
We will delete your information within a reasonable timeframe, except where we are required to retain it for legal, regulatory, or legitimate business purposes.
6.3 Data Export
You have the right to receive a copy of your personal data in a structured, commonly used format. Contact us to request your data export.
6.4 Opt-Out Options
- Push Notifications: You can disable push notifications through your device settings or App preferences
- Location Tracking: You can disable location services through your device settings
- Analytics: Some analytics may be collected automatically, but you can limit tracking through your device settings
6.5 GDPR and CCPA Rights
If you are located in the European Economic Area (EEA) or California, you have additional rights under GDPR and CCPA, including:
- Right to access your personal data
- Right to rectification of inaccurate data
- Right to erasure ("right to be forgotten")
- Right to restrict processing
- Right to data portability
- Right to object to processing
- Right to withdraw consent
7. Children's Privacy
Our App is not intended for children under the age of 13 (or the applicable age of majority in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately, and we will delete such information.
8. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations
- Resolve disputes and enforce our agreements
- Maintain business records for legitimate purposes
When you delete your account, we will delete or anonymize your personal information, except where retention is required by law.
9. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We ensure appropriate safeguards are in place to protect your information in accordance with this Privacy Policy.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by:
- Posting the new Privacy Policy on this page
- Updating the "Last Updated" date at the top of this policy
- Sending you a notification through the App (for material changes)
You are advised to review this Privacy Policy periodically for any changes. Changes are effective when posted on this page.
11. Cookies and Tracking Technologies
While our mobile App does not use traditional web cookies, we use similar technologies such as:
- Device identifiers and advertising IDs
- Local storage and caching
- Analytics SDKs (Firebase Analytics)
- Crash reporting tools (Sentry)
These technologies help us understand how you use our App and improve our services.
12. SMS and Phone Permissions
Our App may request SMS permissions for phone number verification purposes. We use SMS to:
- Send one-time passwords (OTP) for account verification
- Verify phone numbers during registration and login
We do not read, store, or share your SMS messages beyond what is necessary for verification purposes.
13. Contact Us
14. Consent
By using Sahla, you consent to our Privacy Policy and agree to its terms. If you do not agree to this policy, please do not use our App.
This Privacy Policy is effective as of November 2025 and applies to all users of the Sahla Delivery App.