Privacy policy

Your account

• Your phone number — the only thing that identifies you to us
• Your name, if you entered it
• Your consent to marketing messages
• Your language

So that you can sign in to your account, so that we know what name to address you by, and so that we can get your order to you.

Kept: For as long as the account exists. If you delete it, your number and your name are erased from it at once.

Sign-in code

• The number the code was requested for
• A fingerprint of the code — not the code itself
• The network address the request came from
• The message reference at WhatsApp

The code is stored hashed rather than readable, so a leak of the database does not hand over live codes. The network address is kept for one reason: to stop anyone who floods numbers with messages.

Kept: A few minutes. Then the code expires, whether it was used or not.

Your sessions

• A fingerprint of the session token — not the token itself
• The device identifier that the app created
• The type of device and its operating system
• The network address at sign-in

So that you stay signed in without entering a code every time, and so that you can end your sessions.

Kept: Until the session expires or is cancelled.

Your addresses

• Governorate
• Area
• Block
• Street
• Avenue
• House or building
• Floor
• Apartment number
• Your notes for the driver
• The contact number for this address — the driver receives it, and it may differ from the number on your account
• A coordinate of the pin on the map, if you placed one
• A coordinate of the pin on the map, if you placed one
• The name you chose for the address
• The type of address — house, apartment or office

So that the order arrives. The pin only helps the driver — it does not decide your area or change the delivery fee, and the written address is what counts.

Kept: Until you delete it. For us, deleting it means archiving it rather than erasing it, because past orders carry their own copy of it, and that copy is part of the financial record.

Notifications on your device

• The notification token issued by your device’s operating system
• The device’s operating system — iOS or Android
• The device identifier that the app created
• The app’s language on your device, so that we send notifications in it

To tell you when your order is confirmed and when it is out for delivery. We do not send offers to it unless you turn offers on yourself.

Kept: Until your device invalidates it or you sign out.

Photos for a return request

• The photo you attached to the return request

So that the condition of the product can be checked. We reach only the photos you choose — not your library.

Kept: Together with the return request it was attached to.

What you viewed recently

• The products whose pages you opened

For the “Recently viewed” row on the home screen, and nothing else. We do not build an advertising profile from it, and we do not sell it.

Kept: It changes each time you browse.

Favourites

• The products you saved

So that you find what you saved on any device you sign in from.

Kept: Until you remove it or delete your account.

Your search history

• The words you searched for

To show you your recent searches, and to learn what people look for and do not find. We do not build an advertising profile from it, and we do not sell it.

Kept: Until you clear it from the search screen or delete your account.

The notifications we sent you

• The title of the notification
• Its text
• Its title in English, if it reached you in English
• Its text in English, if it reached you in English

So that we know what was sent to you and when, and you do not get the same notification twice.

Kept: Until you delete your account.

Support conversations

• The subject of the conversation
• The language you wrote to us in, so that we reply in it

To follow your request for help until it is resolved.

Kept: Until you delete your account.

Support messages

• What you wrote to us and what we replied

They are the conversation itself.

Kept: With the conversation, and they are deleted when you delete your account.

Your consent to offers

• The channel — WhatsApp or notifications
• Whether you agreed or turned them off
• The wording you agreed to, as it was shown to you
• The language the wording was shown to you in
• The wording in English, if your app was in English
• Where the decision came from — the app, or your reply “STOP” on WhatsApp

So that we send offers only to people who asked for them, and can show that they asked. Each decision is added and never edited, and the latest decision is the one that applies.

Kept: For as long as the account exists. If you delete your account, the record stays, with no number or name that points to you.

Partner accounts — for suppliers and delivery companies

• The mobile number of the branch, the manager or the delivery company
• The account name as TOYZ recorded it, such as the name of the branch
• The reason the account was suspended, if it was

So that the partner can sign in to the orders portal with their number, and see only the orders of their own branch or of the branches they deliver for.

Kept: For as long as the account exists. A suspended account stays as a record of who handled each order.

Partner sessions

• A fingerprint of the session token — not the token itself
• The device identifier that the app created
• The type of device and its operating system
• The network address at sign-in

So that the branch phone stays signed in without a code every time, and so that we can end its sessions at once if the account is suspended.

Kept: Until the session expires or is cancelled.

Alerts on the partner’s phone

• The notification token issued by the phone’s operating system
• The phone’s operating system — iOS or Android
• The device identifier that the app created
• Whether the phone allows notifications

So that the phone gives an alert for every order that is new or ready for collection.

Kept: Until the phone invalidates it, the partner signs out, or the account is suspended.

App usage statistics

• A random identifier used only for these statistics, which is not linked to your account, your number or your device anywhere else
• What you did in the app, in numbers rather than words: which product you opened, by its number in our catalogue; how many results your search had, not what you typed; and how many gift finder questions you answered, not your answers

To learn where people stop between opening the app and completing an order, and which paths lead them to what they buy: the gift finder, search or browsing. Alongside them are the order events themselves — placed, confirmed, delivered — copied from the order’s record. We do not link app statistics to your account, we do not sell them, and we do not build an advertising profile from them.

Kept: App statistics are deleted after thirteen months.

Location

A single reading while the app is open, to suggest your delivery area. We do not read your location while the app is in the background — the app does not even ask for that permission — we do not keep the reading, and you can choose your area manually and refuse the permission altogether.

Photo library

To attach a photo to a return request. We reach only the photo you choose.

Camera

To take a photo of the product and attach it to a return request.

Tap Payments — the payment gateway

Your first name, your phone number, the order amount and its reference number.

We never see your card details at all: the payment page is Tap’s page, opened inside the app, and the card numbers are entered there and do not pass through our servers at any moment.

WhatsApp Business — from Meta

Your phone number, so that you receive the message with your sign-in code and the messages about your order, and offers if you turned them on.

WhatsApp is the only channel — we do not send text messages instead, and we do not ask for an email address.

Expo, Apple and Google — the notification channels

Your device’s notification token, and the text of the notification itself: the order number and its status, or the offer if you turned offers on.

The business that prepares your order

The items and their quantities, the branch the order is to be prepared at, and the deadline. If you asked for gift wrapping, the text of the card as you wrote it, so that they write it out and put it with the toys.

It does not see your phone number, your address or the amounts.

Whoever delivers the order to you

The delivery address and a way to contact you, so that they can reach you.

Sentry — crash reports

When an error happens in the app or on our servers: the error itself, where it happened in the code, the version of the app, and the type of device and its operating system.

It does not receive your name, your number, your address or what you were buying: we remove the content of the request and the session headers from the report before it is sent, and we do not ask the tool to collect what it usually collects.

PostHog — usage statistics

A fixed set of events and nothing else: the app was opened, an area was chosen, a search was made, the gift finder was started and finished, a product was opened, something was added to the cart, checkout was started, the order was sent or could not be sent, a notification was opened, a banner was tapped. With them, a random identifier for the device, and the type of device and its operating system.

It does not receive your number, your name, your address or what you searched for — we send the number of results, not the words — nor the names of what you bought, only their numbers in our catalogue. The identifier is random and does not point to you, we do not ask the tool to work out your location from your network address, and all of it goes when you delete the app.

The maps built into your device

When you open the map to place the pin for your address, your device’s system — Apple or Google — shows the map and turns the coordinates into a place name, each under its own policy.

We do not open the map on our own: it opens when you ask for it.

To see what we hold

In the app: “Account”, then “Privacy and your data”, then “Send me a copy”, and you receive a copy of everything we keep about you in one file. Or ask us for it on WhatsApp and we will send it to you.

To correct it

You can change your name and your addresses in the app at any time.

To have it deleted

In the app: “Account”, then “Privacy and your data”, then “Delete my account”, or ask us for it on WhatsApp. Your number, your name, your addresses, your favourites, what you viewed, your search history, your notifications and your support conversations are erased at once, and your sessions end on every device. What the financial and legal record needs is kept: the orders, their amounts, their payments and their refunds, with no number, name or address that points to you, and the area only. If an order of yours is on its way, or money owed to you has not reached you yet, the account is not deleted until that is complete.

To choose whether you get offers

Offers are off until you turn them on yourself, for each channel separately: WhatsApp and notifications. You can turn them off at any time from “Privacy and your data”, or by replying “STOP” to any offers message. Messages about your order are not offers: they always reach you.

To turn off notifications

Turn them off in your device’s settings. Order status notifications are not marketing — if you turn them off, we will not be able to tell you when your order is confirmed or when it is on its way to you. On Android, offers have a separate channel called “Offers” that you can turn off on its own.