Legal

Privacy Policy

Effective 11 September 2026

This policy explains how we process personal data when you use the STORAQ apps, get.storaqapp.com, or storaqapp.com. It is meant to meet the notice standards used by large consumer services (identity of the controller, categories of data, purposes, sharing, retention, and your rights).

1. Who is responsible

The controller is the operator of STORAQ. Open a support ticket for privacy requests.

2. Data we collect

• Account and sign-in data: name, email, optional phone, password hash, preferred language, and — if you use Google sign-in — the Google account identifier, name, email, and avatar you allow.
• Store and commerce data: store profile, catalogue, product images, stock, orders, receipts, delivery or appointment details, reviews, and payment references or cash transaction records you submit.
• Communications and media: in-app chat, support tickets, images, video, voice notes, shared locations, and emails or push notifications we send.
• Device and app data: platform, app version, a randomly generated installation identifier, secure session data, local cache state, crash and diagnostic events, and an Android push token when you allow notifications.
• Permission-based data: foreground location for nearby stores, maps, delivery, or reverse geocoding; camera for barcode and store QR scans; microphone for voice notes; and photos or files when you choose to upload them.
• Download-site data: IP address, user agent, requested file, and security or download logs needed to run this site and count downloads.

3. Why we use it

We use data to create and secure accounts, run discovery, store, checkout, delivery, appointment, chat, and subscription features you request, prevent fraud and abuse, enforce device or referral limits, send service messages, provide Android notifications, and improve reliability. We do not build advertising profiles from STORAQ app data. Legal bases typically include contract, legitimate interests (security and product quality), consent for optional permissions, and legal obligation where it applies.

4. Sharing

We share data with infrastructure and hosting providers, email delivery when configured, Google when you choose Google sign-in, Firebase Cloud Messaging for Android notifications, map or geocoding services such as OpenStreetMap/Nominatim when a map or nearby feature needs them, and payment providers or authorized payment agents depending on the feature and country. We do not sell your personal data or use third-party advertising trackers on this download site. We may disclose information if required by law or to protect users from serious harm.

Permissions and local app data

The app requests foreground location for nearby stores, maps, delivery, and reverse geocoding; camera access for barcode and store QR scans; microphone access for voice notes; photo or file access when you choose an upload; and Android notifications when you opt in. STORAQ does not request background location. The app also uses secure device storage and a local database or cache for session, settings, and offline state.

Account deletion

Request account deletion without the app · طلب حذف الحساب دون التطبيق

Request deletion from Profile → Delete account or the website deletion page. Confirm the emailed code within 10 minutes. A 14-day cancellation period applies, after which ordinary account data and shop assets are purged or de-identified. Active orders, deliveries or service jobs can postpone completion and are checked daily. Necessary financial/legal records and limited security/fraud evidence may be retained. Reported-content archives are retained for up to 90 days unless a documented legal or safety hold applies.

Reported chat review

When a chat is reported, authorized STORAQ administrators may access and review the relevant conversation, attachments, and metadata to assess the report, protect users, prevent abuse, comply with law, or preserve evidence. Content may be retained after deletion where necessary for these purposes. Access is limited to authorized personnel and handled under our security controls.

5. International transfers

Servers may be located outside your country. Where a transfer tool is required, we rely on standard contractual clauses or an adequacy decision.

6. Retention

We keep account, order, financial, security, and referral-abuse evidence for as long as needed to run the service, resolve disputes, prevent abuse, and meet legal obligations. Owned store assets and ordinary account data are removed or de-identified through the account-deletion flow, but reported or soft-deleted chat and media may remain when needed for safety, fraud investigations, or law. Download logs are kept for a short operational window.

7. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, or export your data, to object to certain processing, and to withdraw consent. You may also complain to a supervisory authority. Open a support ticket for requests. We may need to verify your identity.

8. Children

STORAQ is not directed at children under 16, or under 13 where that is the applicable threshold. We do not knowingly collect data from children.

9. Automated decisions

We do not make legally significant decisions about you solely by automated means without human review.

10. Changes

We will post updates on this page and change the effective date. Material changes will be highlighted when the law requires it.