Privacy Policy

1. Introduction

This Privacy Policy describes how the Maraf10 mobile application (the “App”, “we”, “our”, or “us”) collects, uses, stores and protects the personal information of its users (“you”, “your”) when you download, register for, or use the App.

By creating an account or otherwise using Maraf10 you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please do not use the App.

2. Information We Collect

2.1 Information you provide

• Account information — full name, email address, and phone number, provided when you register or update your profile.
• Profile picture — if you choose to upload one from your device’s gallery or camera.
• Authentication credentials — password (stored in hashed form) or a verification code sent to your phone / email.

2.2 Information collected automatically

• Device identifiers and push tokens — a Firebase Cloud Messaging (FCM) token is generated for your device so that we can deliver push notifications (e.g. loyalty rewards, promotions).
• Usage and diagnostic data — basic analytics such as screens viewed, actions taken inside the App, approximate device model, operating system version, and crash reports. This helps us measure engagement and fix bugs.
• Authentication session tokens — stored locally on your device to keep you signed in between sessions.

2.3 Information we do NOT collect

• We do not collect your precise location (GPS).
• We do not access your contacts, SMS messages, or call logs.
• We do not access photos or files on your device except the single image you explicitly pick for your profile.
• We do not sell your personal data to third parties.

3. How We Use Your Information

We use the collected information for the following purposes:

• To create, authenticate, and secure your Maraf10 account.
• To operate the loyalty program, including issuing points, discounts, and rewards linked to your account.
• To send transactional and promotional push notifications (you may disable notifications from your device settings at any time).
• To respond to your support requests and feedback.
• To detect, prevent, and investigate fraud, abuse, and security incidents.
• To analyze usage in aggregate so we can improve the App’s features, stability, and performance.
• To comply with applicable legal obligations.

4. Third-Party Services

Maraf10 relies on a limited number of third-party services to operate. These providers process data on our behalf under their own privacy policies:

• Firebase Authentication & Firebase Cloud Messaging (Google LLC) — used for sign-in and push notifications. Firebase Privacy.
• Google Play Services (Google LLC) — required by the Android platform for core functionality. Google Privacy Policy.

5. Data Storage and Security

Your account data is stored on secure servers operated by us. We apply industry- standard safeguards including encryption of data in transit (HTTPS/TLS), hashed password storage, and restricted administrative access. No method of electronic transmission or storage is 100% secure; however we continuously work to protect your information.

6. Data Retention

We retain your personal information for as long as your account is active or as needed to provide the App’s services. If you delete your account, we will erase or anonymize your personal data within a reasonable period, except where we are required to retain it to comply with legal obligations, resolve disputes, or enforce our agreements.

7. Your Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your account and associated personal data.
• Withdraw consent for marketing notifications at any time.
• Export a copy of your data in a commonly used format.

To exercise any of these rights, contact us at the email address below. We will respond within a reasonable timeframe.

8. Account Deletion

You can request deletion of your Maraf10 account and the personal data associated with it by sending an email to qaffarov.taleh@gmail.com from the email address registered to your account. Once verified, your account will be removed within 30 days.

9. Children’s Privacy

Maraf10 is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Effective date” at the top of this page and, where appropriate, notify you inside the App. Your continued use of the App after changes take effect constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: