Privacy Policy — Anjiz App

Effective date / Last updated: 2026-07-28

"Anjiz" is an Iraqi home-services booking app owned and operated by the Anjiz team ("Anjiz", "we"). This policy explains what data we collect, why, how we handle it, and which permissions the app requests.

1. Data We Collect

We collect the minimum data needed to provide the service:

• Name: to identify the order owner when performing the service.
• Iraqi phone number: your account identifier, used for account creation, verification via one-time code (OTP), and order-related communication.
• Addresses: the service locations you enter yourself.
• Location (While In Use only, optional): the app requests location access strictly While In Use, for a single purpose: helping you pin the service address on the map. We never track your location in the background.
• Order data: booked services, appointment times, order statuses, and the star ratings and comments you submit.
• Notification token (optional): a technical device token generated by the operating system, which we store linked to your account so we know which device should receive notifications about your own orders. The token itself does not reveal your identity, we never use it for tracking and never share it for any advertising purpose, and it is deleted when you turn notifications off or delete your account.

Guest browsing: you can browse all sections and prices without an account. No personal data is collected in guest mode. An account is required only when placing an order.

2. App Permissions

The app requests only three OS-level permissions, all optional — declining any of them does not stop you from using the app:

Platform keys — Location: iOS NSLocationWhenInUseUsageDescription, Android ACCESS_FINE_LOCATION / ACCESS_COARSE_LOCATION. Notifications: iOS APNs / UNUserNotification, Android POST_NOTIFICATIONS + FCM. Receipt saving: iOS NSPhotoLibraryAddUsageDescription (addOnly level), Android WRITE_EXTERNAL_STORAGE capped at maxSdkVersion=29 (Android 11+ saves with no permission at all).

No payment permission or data: the app requests no payment permission and collects no payment data — cash on completion only, no electronic payment. You can delete your account anytime at anjz.net/delete-account.

3. Purpose of Processing

We use your data exclusively to:

• Fulfil the service orders you book (reaching your address at the scheduled time).
• Communicate with you about your orders (confirmation, rescheduling, cancellation with a stated reason).
• Send OTP codes for account verification and password recovery.
• Send order-status notifications (if you enable notifications).
• Improve service quality based on your ratings.

We do not use your data for any other purpose, nor for advertising or marketing.

4. OTP Verification

When you create an account or recover your password, we send a verification code to your phone via WhatsApp or SMS through a specialised messaging provider (OTPiq). Your phone number is used by the provider solely to deliver the code.

5. Storage and Security

Your data is stored on the Supabase platform on servers located in the European Union (Frankfurt, Germany), protected by encryption in transit and at rest and strict access controls. Passwords are stored hashed and cannot be viewed by anyone, including the Anjiz team.

6. What We Never Do

• We never sell your data to anyone.
• We show no ads in the app.
• We use no third-party tracking or advertising analytics.
• We collect no payment data: payment is cash on service completion only; there is no electronic payment in the app.
• We never track your location in the background.

7. Data Sharing and Sub-processors

We never sell your data and share it only to the minimal extent required to operate the service, with the following sub-processors only:

• Hosting & storage — Supabase (Frankfurt, EU): database hosting.
• OTP messaging — OTPiq: phone number only, to deliver the verification code via WhatsApp or SMS.
• Notifications — Firebase Cloud Messaging (Google): an anonymous device token to deliver order-status notifications — it does not include your name or phone number.
• Anjiz's own service teams: name, address, phone number, and order details, to perform the service you booked.

We may disclose data where required by Iraqi law under an official request from a competent authority.

8. Your Rights

You have the right to:

• Access: request a copy of the data we hold about you.
• Rectification: edit your name and addresses in the app, or ask support to correct any data.
• Deletion: permanently delete your account in the app or by contacting support.

9. Account Deletion and Its Effect

You can delete your account inside the app (My Account → Delete Account → type the confirmation word → confirm), or via anjz.net/delete-account. Upon deletion:

• Deleted immediately: name, phone number, addresses, GPS coordinates, your notification token and all notifications, and login credentials.
• Retained anonymised: your past order history is kept after full removal of anything linking it to your identity, for legitimate accounting and operational reasons. It can no longer be associated with you.

See the Account Deletion page for details.

10. Data Retention

We retain your data for as long as your account exists. On account deletion, personal data is removed immediately as described above. Anonymised order records are kept for the periods required by accounting obligations.

11. Children's Privacy

Our services are intended for adults capable of contracting. We do not knowingly collect data from children under 18.

12. Changes to This Policy

We may update this policy when needed. Updated versions will be published on this page with a revised effective date, and material changes will be announced in the app.

13. Contact

For any privacy enquiry or to exercise your rights:

• Email: [email protected]
• Phone / WhatsApp: 07710777325 (+964 771 077 7325)