1. Introduction
Welcome to Khedma ("we," "our," or "us"). Khedma is a delivery and logistics platform operating in Qatar and the Gulf region. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and related services.
By using Khedma, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the application.
2. Information We Collect
2.1 Information You Provide
- Account Information: Name, email address, phone number, and password when you register.
- Profile Information: Profile photo and any optional personal details you add.
- Order Information: Pickup and delivery addresses, item descriptions, and special instructions.
- Payment Information: Payment method details processed securely via SkipCash. We do not store full card numbers.
- Support Communications: Messages, screenshots, and order references submitted via support tickets.
2.2 Information Collected Automatically
- Location Data: Real-time GPS location (required for delivery tracking and navigation). Drivers' location is collected in the background during active orders.
- Device Information: Device type, operating system, app version, and unique device identifiers.
- Usage Data: App interactions, crash reports, and analytics via Firebase.
- Push Notification Tokens: To deliver order status updates and alerts.
3. How We Use Your Information
- To create and manage your account
- To process and fulfill delivery orders
- To provide real-time GPS tracking between customers and drivers
- To process payments and manage your in-app wallet
- To send push notifications about order status changes
- To respond to support requests
- To improve app performance and user experience through analytics
- To comply with legal obligations in Qatar and the Gulf region
4. Location Data
Khedma relies on location data to function correctly. Specifically:
- Customers: Location is used to suggest addresses and show driver position on the map during active orders.
- Drivers: Foreground and background location is collected every 10 seconds during active orders to enable live tracking. A persistent notification informs drivers when background tracking is active.
- Supervisors: Fleet-wide driver positions are displayed on a supervisor map.
You may disable location access via your device settings, but doing so will prevent core app functionality from working.
5. Sharing Your Information
We do not sell your personal data. We may share your information with:
- Other Users: Your name, rating, and relevant order details are shared between customers, drivers, and supervisors as needed to complete orders.
- Payment Processors: SkipCash processes card payments. Their privacy policy governs that data.
- Firebase (Google): Used for authentication, analytics, crash reporting, and push notifications.
- Google Maps: Used for address picking, routing, and navigation.
- Legal Authorities: When required by law or to protect our rights and users' safety.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide services. Order history is retained for a minimum of 2 years for legal and business purposes. You may request deletion of your account and associated data at any time — see Section 10.
7. Data Security
We implement industry-standard security measures including Firebase JWT authentication with automatic token refresh, encrypted data transmission (HTTPS/WSS), and secure payment processing via SkipCash with 3D Secure verification. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
8. Children's Privacy
Khedma is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
9. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Correct inaccurate or incomplete data
- Request deletion of your account and data
- Withdraw consent for location or notification access via device settings
- Lodge a complaint with a relevant data protection authority
10. Account Deletion
You can request deletion of your Khedma account and all associated personal data at any time. Visit our Delete Account page for instructions. Upon deletion, your data will be permanently removed within 30 days, except where retention is required by law.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via push notification or in-app alert. Continued use of Khedma after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy, contact us at: