Bawilka

Privacy Policy

Last updated: February 27, 2026

Your privacy matters to us. This policy explains how Bawilka collects, uses, and protects your personal information.

Table of Contents

  1. 1. Information We Collect
  2. 2. How We Use Your Information
  3. 3. Sharing Your Information
  4. 4. Data Security
  5. 5. Data Retention
  6. 6. Your Rights & Choices
  7. 7. Location Data
  8. 8. Push Notifications
  9. 9. Children's Privacy
  10. 10. Policy Updates
  11. 11. Contact Us

This Privacy Policy applies to the Bawilka mobile application ("App") operated by Bawilka ("we", "our", "us") and accessible at bawilka.com. By using our App, you agree to the collection and use of information as described in this policy.

1

Information We Collect

We collect several types of information to provide and improve our services:

Account Information

When you register, we collect your full name, phone number, email address, and password (stored as a secure hash). This information is required to create and manage your account.

Profile & Address Data

We collect delivery addresses you save in your address book, including address name, type (house, apartment, office), street address, geographic coordinates (latitude/longitude), floor, and optional notes.

Order & Transaction Data

Details of orders you place, including items ordered, store information, delivery address, total amount, order notes, and order status history.

Location Data

With your permission, we collect your device's GPS coordinates to identify nearby stores and set delivery locations. You can disable location access through your device settings at any time.

Voice Order Data

When you use the Voice Order feature, we record and transmit your audio recording to the store for order processing. Recordings are used solely to fulfil your order and are not stored permanently after processing.

Device & Technical Data

We may collect your device type, operating system version, app version, FCM push notification token, and anonymised usage data to improve app performance and send you notifications.

2

How We Use Your Information

  • Account Management: To create, verify, and manage your Bawilka account including phone OTP verification.
  • Order Processing: To route your orders to the correct store, calculate delivery fees, and facilitate delivery to your address.
  • Store Discovery: To identify and display stores that are available in your area based on your delivery location.
  • Push Notifications: To send you order status updates, promotions from stores you've subscribed to, and important service announcements.
  • Customer Support: To respond to your enquiries, resolve disputes, and improve our service quality.
  • App Improvement: To analyse usage patterns, fix bugs, and develop new features that enhance your experience.
  • Legal Compliance: To meet any applicable legal obligations, resolve disputes, and enforce our terms.
3

Sharing Your Information

We do not sell, rent, or trade your personal information. We share data only in these limited cases:

Partner Stores: Your name, phone number, delivery address, and order details are shared with the store you order from solely to fulfil your order.
Firebase (Google): We use Firebase Cloud Messaging for push notifications and Firebase Authentication-related services. Data is processed by Google in accordance with their privacy policy.
Legal Authorities: We may disclose information when required by law, court order, or government authority to comply with legal processes.
Business Transfers: In the event of a merger, acquisition, or asset sale, user data may be transferred as part of that transaction, subject to the same privacy protections.
4

Data Security

We take the security of your data seriously and implement industry-standard measures to protect it:

Encrypted Transmission

All data is transmitted over HTTPS with TLS encryption.

Hashed Passwords

Passwords are hashed using bcrypt and never stored in plain text.

Access Controls

Access to user data is restricted to authorised personnel only.

Regular Backups

Data is regularly backed up to prevent loss from system failures.

⚠ While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you promptly in the event of a data breach.

5

Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. Specifically:

  • Account data is retained until you request account deletion.
  • Order history is retained for a minimum of 2 years for legal and dispute-resolution purposes.
  • Voice order recordings are deleted within 30 days of order completion.
  • Anonymised analytics data may be retained indefinitely.

To request deletion of your account and associated data, go to Account → Danger Zone → Delete Account within the app.

6

Your Rights & Choices

Access

You can view your account information at any time in the Account section of the app.

Correction

Update your name, phone number, and profile information from Account → Update Account.

Deletion

Delete your account and all personal data from Account → Danger Zone → Delete Account.

Notification Preferences

Subscribe or unsubscribe from store notifications individually within each store's page in the app.

7

Location Data

Bawilka requests access to your device's location to:

  • Show you stores available in your area.
  • Auto-fill delivery address on the map.
  • Calculate accurate delivery distances and fees.

Location access is requested only when you use location-dependent features. You may deny or revoke location permission in your device settings — this will not prevent you from using the app, but you will need to enter your delivery address manually.

We do not track your location in the background while the app is closed.

8

Push Notifications

We use Firebase Cloud Messaging (FCM) to send push notifications to your device. We may send:

  • Order status updates (confirmed, on the way, delivered).
  • Promotions and offers from stores you have subscribed to.
  • Important service or account notifications.

You can manage notification preferences in your device's notification settings or via the Notifications settings in the app.

9

Children's Privacy

Bawilka is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected] and we will take steps to delete such information.

10

Policy Updates

We may update this Privacy Policy from time to time. When we make significant changes, we will notify you via a push notification or an in-app message. The updated policy will be available at bawilka.com/privacy-policy and within the app under Account → Information. Your continued use of Bawilka after changes are posted constitutes your acceptance of the updated policy.

11

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how your data is handled, please reach out to us:

Website: bawilka.com
Address: Bawilka HQ, Erbil, Iraq