Dorak Privacy Policy

1. About this policy

Dorak helps customers find service providers, join queues, and receive updates about their turn. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use the Dorak application and related services.

For the processing described here, Dorak is responsible for deciding how and why your information is used. Individual service providers may separately process information for their own business purposes.

2. Information we collect

Depending on how you use Dorak, we process:

• Account information: email address, account identifier, authentication information, account type, and verification status.
• Profile information: name, telephone number, and information you submit to complete your profile.
• Queue information: selected business and services, service-recipient category, barber preference, ticket number, queue status, and relevant timestamps.
• Arrival information: updates you submit, such as “I’ve arrived” or “I’m nearby.”
• Provider information: business name, location, service menu, staff information, opening or availability information, and details submitted for approval.
• Notification information: device push tokens and information needed to deliver service notifications.
• Support information: messages, account-deletion reasons, and details you voluntarily provide when requesting help.
• Technical information: information processed by our infrastructure to operate and secure the service, which may include IP addresses, device/browser details, request times, and error or authentication logs.

Please do not submit passwords, verification codes, payment-card details, or unnecessary sensitive information in support messages or free-text fields.

3. Signing in with Google

If you choose Google sign-in, Google provides basic identity information associated with your authorization, which may include your name, email address, profile image, and Google account identifier.

We use this information to authenticate you and establish or connect your Dorak account. Google sign-in does not give Dorak access to your Gmail messages, contacts, or Google Drive files.

You may manage Dorak’s connection through your Google account settings. Removing that connection does not itself delete your Dorak account or records.

4. Location and maps

Providers may grant location permission to help set their business location. They may also use the available manual location controls.

Approved business locations are displayed to customers. Map requests are processed by our mapping supplier and may disclose technical information, such as an IP address and the map area requested.

The “I’m nearby” and “I’ve arrived” buttons communicate the status you select; they are not a claim that Dorak has independently verified your physical location.

Dorak does not request background location tracking in its current mobile application. Opening directions launches an external mapping service, whose own privacy policy applies.

5. How we use information

We use information to:

• Create, authenticate, and maintain accounts.
• Operate queues and display service-status updates.
• Share necessary ticket information with the selected provider.
• Review, publish, and maintain business listings.
• Deliver account messages and optional push notifications.
• Respond to support requests and process account deletion.
• Investigate misuse, enforce access restrictions, and protect the service.
• Meet applicable legal obligations and resolve disputes.

Where consent is required, we request it separately. Device permission or acceptance of our Terms is not treated as blanket consent for unrelated uses.

6. Who receives information

We disclose information only as relevant to the purposes described in this policy:

• Your selected provider: information needed to identify and manage your queue entry and deliver the selected service.
• Other customers: approved public business information. Private account information is not part of the public business listing.
• Authorized Dorak personnel: information needed for administration, support, security, and provider review.
• Service suppliers: infrastructure providers supporting authentication, databases, email, maps, and notifications.
• Authorities or other recipients: where disclosure is legally required or otherwise permitted under applicable law.

Current technical suppliers include Supabase, Google sign-in, Expo/Google notification infrastructure, Geoapify, and Resend for transactional email. Each supplier receives information relevant to the service it performs.

7. International processing

Our suppliers may process information outside Jordan. Our currently configured production database is hosted in Paris, France; other supplier operations may involve additional countries.

8. Information stored on your device

Dorak uses local storage to maintain authentication, preferences, and essential application functionality. The mobile app uses secure storage for authentication credentials where supported.

The Dorak website (dorak.shop) is an information site with no sign-in and no forms. It stores your light or dark theme choice in your browser’s local storage. It loads fonts from Google Fonts, so Google may receive your IP address and browser details when you visit. The website is hosted by Cloudflare, which processes technical request data, such as IP addresses, to deliver and secure the site.

9. Account deletion

Customers and providers can use Support & account deletion in the app to start the selfservice deletion process. The current process requests a reason and offers an optional support callback. Accepting support is not a condition of deletion.

Deletion removes the account and associated records covered by the deletion process. For providers, this can also remove business listings and related queue information. Limited information may remain where necessary for applicable legal obligations, security, or documented abuse prevention. For example, an account deleted and blocked by an administrator may leave an email restriction record to prevent prohibited re-registration. We keep such information only for as long as necessary for those purposes.

You may also contact info@dorak.shop for help. We may verify account ownership, but we will never ask you to send your password or verification code.

10. Your rights and choices

Subject to applicable law, you may request access to your personal information, correction, deletion, restriction of processing, withdrawal of consent, or another available data-protection right.

Contact info@dorak.shop with your request. We may request proportionate information to verify your identity and will respond within the applicable legal period.

You can disable notifications or revoke location permission through your device settings. Some related features may then be unavailable.

You may raise a complaint with Jordan’s competent personal-data-protection authority.

11. Children’s information

Dorak’s adult/child service category identifies the person receiving a service; it does not verify account-holder age or parental authority.

Dorak accounts are intended for people aged 18 or over, and we do not knowingly allow children to create their own accounts. A parent or guardian may use their own account to join a queue for a child.

If you believe a child has created an account, contact info@dorak.shop and we will review it and, where appropriate, delete it.

12. Security

We use technical and organizational measures intended to protect information, including authentication and access controls. Access is limited according to the functions users and administrators are permitted to perform.

No system can guarantee absolute security. Please protect your device and credentials and report suspected unauthorized access to info@dorak.shop.

13. Changes and contact

We may update this policy to reflect changes in our services or obligations. We will update the effective date and provide additional notice or obtain consent when required. Questions or requests: info@dorak.shop.