Privacy Policy

App name: DAMU

Android package name: com.damu.customer

Effective date: 5 October 2026

Last updated: 5 October 2026

This Privacy Policy explains how DAMU (“we”, “us”, “our”) collects, uses, shares, and protects personal information when you use the DAMU customer mobile application (the “App”). The App lets you browse products, manage a cart and favorites, place delivery orders, pay, track deliveries, earn rewards, and contact support.

By creating an account, continuing as a guest, or otherwise using the App, you agree to this Privacy Policy. If you do not agree, please do not use the App.

Before you publish this policy, replace the bracketed contact details in the Contact section with your real business name, email, and address. Google Play requires a privacy policy that is hosted at a public URL and that includes a way for users to contact you.

1. Who this policy covers

This policy applies to the DAMU customer app on Android and to the related services that support it, including our servers, in-app support, and the third-party services named below. It does not cover websites or services that we do not control, even if you open them from a link in the App.

2. Information we collect

We collect information you give us, information created when you use the App, and limited information from your device when a feature needs it.

2.1 Account and profile

• Phone number. You sign in with a one-time code sent to your phone number.

• Name and email address. You can add or update these on your profile.

• Profile photo. You can choose a photo from your camera or photo library. We store the image you upload and a link to it on your account.

• Account identifiers and session tokens. We create a customer or guest account ID and keep authentication tokens so you stay signed in.

• Guest use. If you continue without signing in, we create a guest session so you can browse. Ordering and account features require a phone-verified account.

2.2 Delivery addresses and location

• Addresses you save. Street or area text, city, floor, apartment, delivery instructions, and map coordinates (latitude and longitude).

• Precise location, only if you allow it. The App asks for location access so it can place a pin on the map, fill in an address, and show delivery tracking. You can deny this permission and enter an address manually. We do not collect your location in the background when the App is closed.

2.3 Orders, cart, and preferences

• Cart contents, favorites, product views needed to fulfill browsing, promo codes, and referral codes you apply.

• Orders, including items, quantities, prices, delivery time, delivery address, order notes, cancellation and return requests, ratings, and issue reports.

• Loyalty points, vouchers, wallet balance applied at checkout, reward redemptions, and your referral code and share link.

• Language preference (Arabic or English), stored on your device.

2.4 Payments

Card payments and Apple Pay, where offered, are processed by MyFatoorah, our payment provider. When you pay by card, card details are entered in MyFatoorah’s payment form. We do not receive or store your full card number or card security code.

If you save a card, we store only a payment-method reference together with the card brand, last four digits, and expiry month and year, so you can recognize and reuse that card. Cash on delivery, when available, does not involve card data.

2.5 Notifications

If you allow notifications, we collect a Firebase Cloud Messaging token for this device, together with the app type (customer) and platform (Android or iOS). We use it to send order updates, stock alerts you subscribe to, and other service messages. You can turn notifications off in your device settings. Signing out removes this device’s token from your account.

2.6 Support

When you contact support in the App, we collect the messages you send, the topic, any related order, and files you attach from your camera, photo library, or file picker (such as photos of an order issue).

2.7 Information stored on your device

The App stores your sign-in tokens, profile cache, and language choice locally on your device so the App can open without asking you to sign in every time. This data stays on the device until you sign out, delete your account, or uninstall the App.

2.8 What we do not collect

• We do not sell personal information.

• We do not show third-party ads in the App, and we do not collect an advertising ID for advertising.

• We do not access your contacts, microphone, SMS inbox, or call log.

• We do not use a separate analytics or crash-reporting SDK in the App. Network logs used while developing the App are disabled in release builds.

3. How we use information

We use personal information to:

• Create and secure your account, send one-time sign-in codes, and keep you signed in.

• Show products, prices, and availability, including stock alerts you request.

• Save your cart, favorites, addresses, and checkout choices.

• Deliver orders, show the courier and delivery status, and handle cancellations, returns, and ratings.

• Take payment, apply wallet balance, promo codes, vouchers, and referral rewards.

• Send push notifications and in-app messages about your orders and account.

• Answer support requests and improve help content.

• Prevent fraud and misuse, enforce our terms, and meet legal duties.

• Remember your language.

4. When we share information

We share personal information only as needed to run the App:

• Delivery operations. Your name, phone number, delivery address, coordinates, and delivery instructions are shared with the people and systems that pick, dispatch, and deliver your order, including the assigned courier when a delivery is in progress.

• MyFatoorah. Payment details needed to charge or save a card are processed by MyFatoorah. Their handling of card data is covered by MyFatoorah’s own terms and privacy policy: https://www.myfatoorah.com/

• Google Firebase. Push notification tokens and message delivery are handled by Google Firebase Cloud Messaging. Google’s privacy information is at https://policies.google.com/privacy and https://firebase.google.com/support/privacy.

• Google Maps. Map display, place lookup, and address geocoding use Google Maps Platform. Location queries you make while choosing an address or viewing tracking are sent to Google. See https://policies.google.com/privacy.

• Service providers. Companies that host our systems or send SMS one-time codes process data only on our instructions.

• Legal and safety. We may disclose information if the law requires it, or to protect customers, couriers, or our services from fraud or harm.

• Business transfer. If the App or the business is sold or reorganized, customer information may transfer with it, still subject to this policy.

We do not sell or rent your personal information to data brokers or advertisers.

5. Permissions the App requests

Android asks you before the App uses sensitive features. You can change these later in system settings.

• Internet. Required to load the catalog, account, and orders.

• Precise and approximate location. Optional. Used to set a delivery pin and to show order tracking on a map.

• Camera. Optional. Used for a profile photo or a support attachment.

• Photos, media, and files. Optional. Used when you pick an existing photo or file for your profile or a support request. On older Android versions the App may request storage access for the same purpose.

• Notifications. Optional. Used for order and account alerts.

6. How long we keep information

• Account data is kept while your account is active.

• Orders, payments, and support records are kept for as long as we need them to complete the order, handle disputes, and meet tax, accounting, and legal record-keeping duties.

• Guest sessions are kept until they expire or you sign in and the session is no longer needed.

• Push tokens are removed when you sign out or when the token is no longer valid.

• Saved cards can be removed by you in the App. We then delete the saved payment-method reference we hold. MyFatoorah may keep payment records as its own legal duties require.

When you delete your account in the App, we delete or de-identify profile data that we are not required to keep. We may retain order and payment records where the law requires it, in a form that is limited to that purpose.

7. Account deletion

You can delete your account inside the App from your profile. Deletion signs you out and starts removal of your account. You can also ask us to delete your account by emailing the address in the Contact section. Uninstalling the App removes data stored only on that device; it does not by itself delete the account on our servers.

8. Your choices and rights

Depending on where you live, you may have the right to access, correct, or delete personal information, to object to or limit certain uses, and to lodge a complaint with a data-protection authority.

You can update your name, email, and photo in the App, manage saved addresses and saved cards, turn off notifications, and deny location, camera, and photo access. To exercise other rights, contact us using the details below. We may need to confirm that the request comes from the account holder, usually through the phone number on the account.

9. Children

The App is a shopping and delivery service for adults and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has given us personal information, contact us and we will delete it.

10. Security

We use technical and organizational measures appropriate to the data we hold, including encrypted connections (HTTPS) between the App and our servers, access controls on accounts, and payment handling by a certified payment provider so full card numbers never reach our App. No method of transmission or storage is completely secure. Please keep your phone and one-time codes private.

11. International processing

We and our providers (including Google and MyFatoorah) may process information in the country where you use the App and in other countries where those providers operate. Those countries may have different data-protection laws. We share information with providers only as described in this policy.

12. Changes to this policy

We may update this policy when the App or the law changes. We will change the “Last updated” date above and, if a change is material, we will notify you in the App or by another reasonable method. Continued use of the App after the update means you accept the revised policy.

13. Contact us

Questions, access requests, and deletion requests:

• App: DAMU (package com.damu.customer)

• Business name: Damu

• Email: support@damuk.com

• Address: Kuwait

Appendix — Google Play Data safety (for the Play Console form)

Use this appendix when you fill in Play Console → App content → Data safety. Declare only what the published app does. This summary matches the current DAMU customer app.

• Does the app collect or share any of the required user data types? Yes.

• Is all of the user data collected by your app encrypted in transit? Yes (HTTPS).

• Do you provide a way for users to request that their data be deleted? Yes. In-app account deletion on the profile screen, and by email to the contact address above.

Data types to declare as collected

• Personal info — Name, Email address, Phone number, User IDs. Collected, required for account features (phone number and user ID). Name and email are provided by the user. Shared with delivery operations as needed. Purpose: account management, app functionality, fraud prevention. Not used for advertising.

• Financial info — User payment info. Purchase history is collected by us. Card entry is handled by MyFatoorah and is shared with that payment processor. We store brand, last four digits, and expiry for saved cards. Purpose: app functionality. Not used for advertising.

• Location — Approximate location and Precise location. Collected only when the user grants permission, while choosing an address or viewing tracking. Shared with Google Maps for geocoding and map display, and coordinates are stored with the saved address. Purpose: app functionality. Optional.

• Photos. Profile photo and support attachments, only when the user picks or captures them. Purpose: app functionality. Optional.

• App activity — App interactions and In-app search history if you log search queries on the server. Cart, favorites, and orders are collected. Purpose: app functionality.

• Messages. In-app support messages. Purpose: app functionality.

• Device or other IDs. Firebase Cloud Messaging token. Shared with Google Firebase. Purpose: app functionality (push notifications). Optional, based on notification permission.

Do not declare (not used by this app): advertising ID, contacts, SMS, microphone, health data, third-party advertising, or sale of data.

Third-party SDKs to account for in Data safety

• Firebase Cloud Messaging (firebase_messaging) — device token and notification delivery.

• Google Maps and Geocoding (google_maps_flutter, geocoding) and device location (geolocator) — map and address.

• MyFatoorah (myfatoorah_flutter) — card and wallet payments.