Privacy Policy

1. Introduction

This Privacy Policy explains how Call To Clean ("we", "us", "our") collects, uses, and protects your personal information when you use the Call To Clean mobile application and related services (the "Services") in Qatar.

By creating an account or using the Services, you agree to the practices described here.

2. Information we collect

2.1 Information you give us

• Account details: full name, mobile number (Qatar +974), email address, profile photo (optional), preferred language (English or Arabic), and a password (if you choose email sign-in).
• Addresses: the addresses you save for service delivery, including building/area details and the map coordinates you pin.
• Booking details: the services you book, date and time, add-ons, special instructions, and the payment method you choose.
• Reviews and ratings: the 1–5 star ratings and comments you leave after a completed booking.
• Support messages: anything you send us by email when you contact support.

2.2 Information collected automatically

• Device data: device model, operating system version, app version, and locale.
• Push notification token: an Expo push token issued by your device, so we can send you booking updates.
• Approximate location: only while you are actively using the app and only when you grant permission — see Section 5.
• Server logs: standard request logs (IP address, timestamp, endpoint) kept for security and troubleshooting.

We do not use third-party analytics, advertising, or crash-reporting SDKs in the app (no Google Analytics, no Facebook SDK, no Sentry, no Mixpanel, no Firebase Analytics).

2.3 Information about service providers (partners)

If you sign up as a service provider, we additionally collect the information needed to verify and pay you: identification documents, business details, the services and pricing you offer, your availability schedule, and bank or payout details. Customers see only your displayed name, photo, ratings and service listings.

3. How we use your information

• To create and secure your account, including phone-number verification by one-time SMS code.
• To accept and fulfil your bookings, including sharing the necessary details with the assigned service provider.
• To process payments through our payment gateway and to operate your in-app wallet.
• To send booking-related push notifications and transactional emails (e.g. password reset).
• To provide customer support and resolve disputes.
• To detect and prevent fraud, abuse, and violations of our Terms.
• To comply with applicable laws in Qatar.

4. Who we share your information with

We do not sell your personal information. We share it only with the parties below, and only as needed:

Recipient	What they receive	Why
Assigned service provider	Your name, mobile number, booking details, and the address for that booking	So they can contact you and deliver the service
Noqoody Pay (payment gateway, Qatar)	Booking amount, payment reference, and the card details you enter on their secure page	To process card payments — we never see or store your full card number
Twilio (Verify service)	Your mobile number	To send one-time SMS verification codes during sign-up and login
Expo (push notification service)	Your device's push token and the message body	To deliver push notifications about your bookings
Cloudinary (media hosting)	Profile photos and any images you upload	To store and serve images in the app
Resend / SMTP email provider	Your email address and the message body	To send password-reset and other transactional emails
Hosting infrastructure (Railway, Vercel)	Data we store on our servers	To run the backend and web portal that power the app
Legal authorities	Only what is legally required	To comply with a valid court order or regulatory request

5. Location data

The customer app requests location permission only "while using the app". We use it solely to pin the map when you add or edit a saved address, so providers can find you. We do not request "Always" / background location, and the app does not track your movements when it is closed or in the background.

For geocoding (turning a map pin into a readable address) we currently use OpenStreetMap's public Nominatim service. The lookup contains only the coordinates you pinned.

You can revoke location permission at any time in your device settings; you'll then need to enter address details manually.

6. Payments

• Card payments are processed by Noqoody Pay, a payment gateway licensed in Qatar. Your card data is entered on their secure page and is never stored on our servers.
• Cash on service means you pay the service provider directly when the job is done.
• Wallet balances are held in QAR and can be funded via card. Wallet transactions (top-ups, payments, and refunds) are recorded in your account history.
• All prices and transactions are in Qatari Riyal (QAR).

7. Notifications

We send push notifications for booking status changes (accepted, on the way, completed, etc.). You can disable push notifications at any time in your device settings. We may also send transactional emails (e.g. password reset) which are not promotional.

8. Data retention

• Account and booking data is kept while your account is active.
• When you delete your account (Profile → Delete Account, or by request), we delete or anonymise your personal data within 30 days.
• We may retain limited records longer where required by law (for example, payment and tax records).

9. Security

• All traffic between the app and our servers uses HTTPS (TLS).
• Passwords are hashed with bcrypt — we never see your plaintext password.
• Sessions use signed JSON Web Tokens (JWT) and expire automatically.
• Access to production systems is restricted to authorised personnel.

No system can be 100% secure, but we work continuously to protect your information.

10. Your rights

You can, at any time:

• Access and update your profile and addresses from inside the app.
• Delete your account from Profile → Delete Account in the app. Active bookings will be cancelled and personal data will be removed (subject to legal retention).
• Request a copy of the personal data we hold about you, or request correction of inaccurate data, by emailing support@calltoclean.qa.
• Withdraw consent for optional processing (such as push notifications) at any time.

We will respond to verified requests within 30 days.

11. Children's privacy

Call To Clean is intended for adults. We do not knowingly collect personal data from children under 18. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be communicated in the app or by email. Your continued use of the Services after changes take effect means you accept the updated policy.

13. Contact us

Questions, requests, or concerns about this policy or your data:

Call To Clean
Email: support@calltoclean.qa
Support page: /support