Privacy Policy

Version 2.2

This policy explains what Tedelal collects, why, who can see it, and your rights over it, in line with the Personal Data Protection Law of the Sultanate of Oman.

1. What we collect

From customers: name, phone number, vehicle details (make, model, year, colour, plate number), pickup address and coordinates, booking and chat history, a profile photo if you choose to add one (it is optional), and, when you pay by bank transfer, the transfer receipt you upload (an image or a PDF).

From partner drivers: name, phone number, profile photo (required, and approved by our staff before it is shown), national ID and driving licence with their expiry dates, bank name, account holder name and IBAN, and location while a job is in progress.

Automatically: the device's push-notification token and type, and technical logs needed to run and protect the service.

We do not receive or store full payment card numbers. Card payments, where offered, are processed by the payment gateway Amwal Pay, and we keep only the payment result and its reference. We do not use your data for advertising or tracking.

2. Why we use it

• to carry out your booking: collection, documentation, pricing and return
• to let you and the other party on a booking contact each other
• to send verification codes and booking status notifications
• to confirm payments, including checking bank-transfer receipts, and to make

any refund that is due

• to verify drivers' eligibility, review their profile photo and keep track

of document expiry

• for accounting and settlement, resolving disputes, and protecting the

service from misuse

3. Location

A customer's location sets the pickup point and is only requested while the app is in use.

A driver's location is shared only while a job is in progress, with the customer on that booking and with operations staff, and only the latest position is kept. Drivers are not tracked in the background or outside a job.

Addresses and locations are shown on maps, and routes and distances are calculated, using Google Maps Platform.

4. Photos, receipts and driver documents

Vehicle photos (which may show the plate, odometer and invoices) and inspection-report photos are kept in private storage, visible only to the customer on that booking, the assigned driver, and administrators.

A driver's profile photo is reviewed and approved by our staff, and is then shown to the customer on that driver's bookings. A customer's profile photo is optional and is shown to the driver on that customer's booking.

Bank-transfer receipts are kept in private storage, visible only to the customer who uploaded them, the assigned driver when the transfer is paid into the driver's account, and authorised staff. They are used to confirm the payment. When you pay by bank transfer, the app shows you the recipient's bank details: the platform's account, or the assigned driver's account holder name and IBAN.

Drivers' identity and licence documents are never shown to customers and are visible only to the review team.

5. Who we share it with

We do not sell your data. Sharing is limited to:

• the other party on a booking: name, phone number and profile photo only;

and, when a customer pays by bank transfer into the assigned driver's account, that driver's account holder name and IBAN, shown to that customer

• service providers we rely on to run the app: hosting and database, the SMS

provider that delivers verification codes, and the push notification service

• the payment gateway Amwal Pay, which processes card payments where they are

offered

• Google, whose Google Maps Platform is used to show addresses and locations

on maps and to calculate routes and distances

• authorities, where the law requires it

6. Where your data is stored

Data is stored with a cloud hosting provider outside the Sultanate of Oman, encrypted in transit and at rest, behind access rules that prevent any user from reading another user's data. By using the service you consent to this transfer for the purpose of operating it.

7. Retention

• Booking photos and records: at least twelve months after completion
• Financial records: as long as accounting rules require
• Bank-transfer receipts and payment references: as part of the financial

records

• Driver location: the latest position only, continuously overwritten
• Driver documents: for the life of the active account

8. Your rights

You can view and correct your details in the app, request a copy of your data, withdraw consent to notifications in your device settings, and delete your account at any time from Profile → Delete account. On deletion your personal details are removed, while booking and financial records are kept without them for legal and accounting purposes.

9. Children

The service is not directed at anyone under 18.

10. Changes

When this policy changes, a new version is published and you are asked to review and accept it.

11. Contact

For any privacy question, or to exercise your rights: Email: [email protected] — Phone: +968 9700 4093