سو-دواء – سياسة الخصوصية

SuDawa operates the SuDawa medicine distribution platform. This policy describes the data we collect, how we use it, and your rights.

By using the app you agree to the practices described here.

1. Data We Collect

Account data:

• Full name, email address, and mobile number
• Account type (pharmacy / agent / sub-agent)
• Business name and license number (for business accounts)
• Password (hashed and stored by Supabase – we never see it)

Business data:

• Inventory listings, catalogs, and pricing
• Order and invoice details
• In-app messages between users

Device and usage data:

• FCM notification token (to deliver push alerts)
• Location data (for maps and delivery tracking – only with your permission)
• Camera access (for barcode and expiry-date scanning – only with your permission)
• Biometric data (used locally on your device only for biometric login – never transmitted to us)

2. How We Use Your Data

• Operating your account and providing platform features
• Matching pharmacy orders with suppliers
• Sending stock, order, and payment notifications
• Sending password-reset emails
• Reviewing business registrations by SuDawa admins
• Analysing app usage to improve the service (aggregated, anonymised data)

We do not sell your data or share it with third parties for marketing purposes.

3. Data Sharing

We share data with the following sub-processors:

• Supabase – database and authentication infrastructure
• Firebase (Google) – push notifications and crash reporting
• Brevo – transactional email (password reset)
• OpenRouteService – maps and directions (no personally identifiable data sent)

We may disclose data if required by law or to protect our legal rights.

4. Data Storage and Security

• Data is stored on Supabase servers hosted in the Middle East/Europe region
• All connections are encrypted with HTTPS/TLS
• Session tokens are stored with AES-256 encryption on your device
• We retain data only as long as necessary to operate the service

5. Your Rights

• Access: Request a copy of your personal data
• Correction: Update your information inside the app or by contacting us
• Deletion: Request deletion of your account and data (available inside the app)
• Withdraw consent: Revoke location, camera, or notification permissions from your device settings at any time

6. Children

The app is intended for businesses and professionals. We do not knowingly collect data from anyone under 18. If we discover such data, we will delete it immediately.

7. Changes to This Policy

When this policy is updated we will revise the "Last updated" date above and notify you in-app if the changes are material. Continued use of the app constitutes acceptance of the updated policy.