Privacy Policy

Welcome to Mashaweeri. We provide a digital tool that helps ride-hailing and delivery drivers record their income, trips, and expenses, calculate net income, analyse app performance, and generate personal reports.

This policy applies to all users of the platform. By using Mashaweeri, you acknowledge that you have read this policy. Formal acceptance of the Privacy Policy and Terms of Use takes place when you create an account through our registration process.

Mashaweeri does not sell your personal data. We do not use third-party advertising or analytics tracking tools in the current version of the platform.

We collect data that you enter or that is generated automatically when you use the service. We do not collect your live GPS location and we do not access your accounts on ride-hailing apps (Uber, Bolt, etc.) unless you enter that information manually.

• The data we process includes:
• Account data (name, email, language, encrypted password)
• Trip data (app, amount, payment method, date, time, notes)
• Expense data (category, amount, payment method, date, time, notes)
• Support data (ticket subject, messages)
• Technical data (IP address, login history, browser type) for security and service operation

• When you register, we ask for:
• Name
• Email address
• Password (stored encrypted — we never store plain-text passwords)
• Preferred language (Arabic, English, Urdu)

We may also record account creation date, last login, login IP address, and last activity — for security and account management.

We do not currently require a phone number at registration. If this changes, we will update this policy.

• When recording a trip, you may enter:
• Application (e.g. Uber, Bolt, Jeeny, inDrive, HungerStation, Keeta, Noon, Amazon, or Other with a custom name)
• Trip amount
• Payment method (Cash, Bank Transfer, App Balance, Electronic Payment)
• Date and time
• Optional note

This data is used to calculate your income, display your personal reports, and compare app performance within your account only. We do not show your trips or income to other drivers.

• When recording an expense, you may enter:
• Category (fuel, oil, maintenance, car wash, tyres, parking, fees, other — or a custom category)
• Amount
• Payment method
• Date and time
• Optional note

This data is used to calculate your net income and personal reports. You are responsible for the accuracy of the data you enter.

We record the payment method you choose for each trip or expense (cash, bank transfer, app balance, electronic payment). We do not store bank card numbers or bank account details — the platform does not currently integrate with payment gateways to move your money.

• We process your data for the following purposes:
• Recording trips, income, and expenses
• Calculating net income and settlements
• Analysing each app's performance within your account
• Creating personal reports and dashboard views
• Operating and maintaining the service
• Providing technical support and responding to enquiries
• Improving the service based on general platform usage
• Creating aggregated, anonymised statistics and analytics — only for users who have explicitly opted in, and in compliance with applicable requirements
• Meeting legal obligations where required
• Protecting platform security and preventing misuse

Authorised Mashaweeri administrators may access user data when necessary to operate the service, provide support, fix errors, or investigate account issues.

No staff member may access data beyond the permissions granted to them (principle of least privilege). Regular users cannot access another user's data.

We log sensitive access operations (such as viewing financial data or changing permissions) in an internal audit log.

We retain your data while your account is active and as long as necessary to provide the service. When you request account deletion, we apply an appropriate retention policy: we may delete or anonymise personal data while keeping records required for security or legal compliance where necessary.

Login and admin audit logs may be kept for a limited period for security purposes.

In the future, we may use aggregated, anonymised data to show general indicators (e.g. average recorded income for a given app over a period) without disclosing any individual driver's data.

Your data is not used in aggregated statistics unless you explicitly consent at registration or in Settings. If the number of participants is too small and an individual could be identified, we will not display that statistic.

Example of what we do not do: "Driver X earned 5,000 SAR." Example of what we may do later: "Average recorded income for app X during period Y is Z" — provided no individual can be identified.

We do not sell your personal data to third parties. We do not send your income, expense, or trip data to external parties for marketing purposes.

We will not add systems that send your financial data to third parties without a legitimate purpose disclosed to you — such as hosting providers, legal obligations, or your explicit request.

• We may share limited data only in the following cases:
• Infrastructure providers (hosting, email) under confidentiality obligations
• When required by law or an official request from a competent authority
• When necessary to protect Mashaweeri's rights, users, or platform security

We do not share your data with ride-hailing apps (Uber, Bolt, etc.) — Mashaweeri is an independent platform for recording your personal data.

• Subject to applicable law, you may:
• Access your data within your account
• Request correction of inaccurate data
• Request deletion of your account (from Settings — when this feature is enabled)
• Withdraw consent for aggregated statistics (without affecting mandatory consent required for core service operation)
• Submit a privacy-related request via technical support

You will be able to manage some of these requests from the Privacy & Data section in Settings.

• We use an essential PHP session to keep you logged in and preserve preferences (such as language). This session is:
• HttpOnly (not readable by JavaScript)
• SameSite=Strict
• Expires after a period of inactivity

We do not currently use advertising cookies, Google Analytics, or similar tracking tools. If added in the future, we will provide an appropriate consent mechanism before enabling them.

• We apply reasonable technical and organisational measures, including:
• Password encryption
• CSRF protection on forms
• Parameterised database queries
• Server-side authorisation checks
• Linking every trip and expense to the owner's user_id
• HTTP security headers

No system is 100% secure. If you suspect your account has been compromised, change your password and contact us.

App names and trademarks (Uber, Bolt, Jeeny, inDrive, HungerStation, Keeta, Noon, Amazon, and others) appear in Mashaweeri only so you can categorise your trips. These names and logos belong to their respective owners.

Mashaweeri is not affiliated with Uber, Bolt, Jeeny, HungerStation, or any other ride-hailing or delivery app unless a partnership is officially announced. Mashaweeri is a personal recording tool — not an agent or representative of those companies.

• For privacy enquiries or questions about how we process your data:
• Registered users can contact us via the Support section in the platform.
• Official privacy email: [To be configured — see platform settings].

We will respond to privacy requests as soon as reasonably possible, subject to our team capacity and applicable requirements.

We may update this policy from time to time. For material changes, we will notify you via the platform or email, and may request renewed consent on login.

The version number is shown at the top of this page. Continued use of the service after an update means you have reviewed the published version.