Privacy Policy — SHA7N Driver

Last updated: 10 June 2026
Effective date: 10 June 2026

This Privacy Policy explains how SHA7N ("SHA7N", "we", "us", or "our") collects, uses, shares, and protects your personal information when you use the SHA7N Driver mobile application (the "App") and the related driver services (together, the "Service").

This Policy applies to drivers and delivery partners who register for and use the SHA7N Driver App. If you use a SHA7N customer application instead, a separate privacy policy applies to that app.

By creating an account or using the App, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with it, please do not use the App.

1. Who We Are

SHA7N operates a ride-sharing and delivery logistics platform that connects drivers with customers who need delivery and transport services in Iraq. SHA7N is the data controller responsible for your personal information processed through the App.

  • Service name: SHA7N Driver
  • Contact for privacy matters: info@sha7n.app

2. Summary of Data We Collect

  • Account & identity — name, phone number, email, gender, date of birth. You provide it.
  • Government / KYC documents — national ID number, ID photo and expiry, driver license number, license photo and expiry. You provide it.
  • Vehicle information — make, model, year, color, license plate, registration document, vehicle photos. You provide it.
  • Profile media — profile photo. You provide it.
  • Precise location — GPS coordinates and direction of travel while you are online or on an active delivery, including in the background. Collected automatically from your device.
  • Financial data — wallet balance, earnings, transaction history, payout records, bank account/IBAN for payouts. Generated by use; IBAN provided by you.
  • Device & technical data — device ID, device model and brand, operating system version, app version, IP address, push notification token. Collected automatically.
  • Communications & activity — delivery history, ratings and feedback, in-app notifications. Generated by use.

We do not knowingly collect data from anyone under the legal working/driving age (see Section 12).

3. Information You Provide to Us

When you register and use the App, you provide:

  • Identity details: your name, gender, date of birth.
  • Contact details: primary phone number (used to log in and verified by SMS one-time code), optional email address, and any secondary phone numbers you add.
  • Identity and license verification (KYC): your national/government ID number, ID document image and expiry date, driver license number, license document image, and license expiry date. These are required to verify that you are legally permitted to drive and to operate on the platform.
  • Vehicle details: make, model, year, color, type, size, fuel type, dimensions, weight, license plate number, vehicle registration/license document image, and additional vehicle photos.
  • Profile photo.
  • Payout details: bank account / IBAN information used to pay your earnings.

4. Information We Collect Automatically

4.1 Location data

The SHA7N Driver App is a location-based service. To match you with nearby deliveries, show your position to customers during an active order, and calculate routes and earnings, we collect your device's precise GPS location and direction of travel.

  • When in use (foreground): We collect your location while the App is open and you are online, in a dispatch queue, or on an active delivery.
  • In the background: When you have an active delivery or are waiting in a dispatch queue, we continue to collect your location even when the App is in the background or your screen is locked, so that customers can track the delivery and the platform can manage dispatch. iOS displays a blue indicator while background location is active.
  • Frequency: While tracking is active, your location is updated at frequent intervals (a few seconds apart) and after meaningful movement.
  • Control: Location tracking only runs while you are online, queued, or on an active delivery. You can stop tracking by going offline, and you can revoke location permission at any time in your device settings — however, you will not be able to receive or complete deliveries without it.

We store your current location, the on/off times of your driving sessions, and the full GPS route of each delivery you complete. Trip route history is retained as part of our delivery and dispute records (see Section 8).

4.2 Device and technical data

We automatically collect a device identifier, device name, brand and model, operating system version, app version, IP address, and push notification token. This data is used for security, session management, push notification delivery, fraud prevention, and troubleshooting.

5. How We Use Your Information

We use your personal information to:

  • Create, verify, and manage your driver account.
  • Verify your identity, driving license, and vehicle eligibility (KYC).
  • Match you with delivery requests and broadcast nearby opportunities.
  • Show your live location and vehicle details to the relevant customer during an active delivery.
  • Calculate distances, routes, fares, and your earnings.
  • Process your earnings, wallet balance, and payouts.
  • Send you operational push notifications (new delivery offers, order status changes, payment and wallet updates).
  • Maintain safety, prevent fraud and abuse, and investigate disputes.
  • Provide customer and driver support.
  • Comply with legal, tax, and regulatory obligations.
  • Improve and secure the Service.

6. Legal Bases for Processing

Where applicable law requires a legal basis, we rely on:

  • Performance of a contract — to provide the driver Service you sign up for.
  • Consent — for background location collection and push notifications (which you grant through device permission prompts and can withdraw).
  • Legal obligation — to meet identity verification, tax, and regulatory requirements.
  • Legitimate interests — to keep the platform safe, prevent fraud, and improve the Service.

7. How We Share Your Information

We do not sell your personal information. We share it only as described below.

7.1 With customers

During an active delivery, we share with the relevant customer your first name, profile photo, driver rating, live location and direction, and vehicle details (including make, model, color, and license plate) so they can identify you and track their delivery. Your full identity documents, contact details, and financial information are never shown to customers.

7.2 With service providers (data processors)

We share specific data with trusted third parties that process it on our behalf:

  • Firebase Cloud Messaging (FCM) & Expo — delivery of push notifications. Data shared: push notification token, device platform.
  • Google Maps Platform — maps, geocoding, and routing. Data shared: location coordinates.

These providers are authorized to use your data only to perform services for us and are bound by confidentiality and data protection obligations.

7.3 For legal and safety reasons

We may disclose information if required by law, court order, or government request, or where necessary to protect the rights, safety, or property of SHA7N, our users, or the public, or to investigate fraud or violations of our Terms of Service.

7.4 Business transfers

If SHA7N is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this Policy.

8. Data Retention

We keep your personal information for as long as your account is active and as needed to provide the Service. Specific retention practices include:

  • Account, identity, vehicle, and profile data: retained while your account exists. After account deletion, this data is removed or anonymized except where we must retain it (see below). Some records are soft-deleted (hidden and scheduled for removal) before permanent deletion.
  • Delivery and trip GPS history: retained as part of our operational, safety, and dispute records.
  • Financial records (earnings, transactions, payouts, IBAN): retained for the period required by applicable tax, accounting, and anti-fraud laws, even after account deletion.
  • Authentication and security logs (sessions, device info, IP addresses, SMS verification records): retained for security, fraud prevention, and audit purposes.

When we no longer need your information, we delete or anonymize it.

9. Data Security

We protect your information using industry-standard measures, including:

  • Encryption of data in transit (HTTPS/TLS).
  • Access controls limiting who can view personal data internally.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please keep your login credentials confidential and notify us immediately of any unauthorized use.

10. Your Rights and Choices

Subject to applicable law, you may:

  • Access the personal information we hold about you.
  • Correct inaccurate information (some profile fields are editable in the App; others, such as your verified name, require contacting support).
  • Delete your account and associated personal data (see Section 11).
  • Withdraw consent for location or notifications by changing your device permissions.
  • Object to or restrict certain processing.

To exercise these rights, contact us at info@sha7n.app. We will respond within a reasonable timeframe and may need to verify your identity first.

Permission controls

  • Location (foreground & background) — used for matching, dispatch, live tracking, routing, and earnings. Control via Device Settings → SHA7N Driver → Location.
  • Camera — used to capture your profile photo and document images. Control via Device Settings → SHA7N Driver → Camera.
  • Photo library — used to upload existing images and documents. Control via Device Settings → SHA7N Driver → Photos.
  • Notifications — used for delivery offers and status and payment alerts. Control via Device Settings → SHA7N Driver → Notifications.
  • Face ID / biometrics — used for secure, convenient login. Control via Device Settings or in-app.

11. Account and Data Deletion

You can request deletion of your SHA7N Driver account and personal data at any time:

  • In the App: open the Account/Profile section and follow the account deletion option, where available; or
  • By email: send a deletion request from your registered email or phone to info@sha7n.app with the subject "Delete My Account".

When you delete your account, we remove or anonymize your personal data, except information we are legally required to retain (such as financial, tax, and certain fraud-prevention records) and information necessary to resolve disputes or enforce our agreements. Pending payouts must be settled before deletion can be completed.

12. Children's Privacy

The Service is intended only for individuals who are of legal age to work and hold a valid driving license in Iraq. The App is not directed to children, and we do not knowingly collect personal data from minors. If we learn that we have collected data from a minor, we will delete it.

13. International Data Transfers

Some of our service providers (such as cloud storage, maps, and notification services) may process data on servers located outside Iraq. Where we transfer data internationally, we take steps to ensure it remains protected in accordance with this Policy and applicable law.

14. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you in the App. Your continued use of the Service after an update means you accept the revised Policy.

15. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data:

SHA7N
Email: info@sha7n.app

This Privacy Policy is governed by the laws of the Republic of Iraq.

Terms of Service →