Privacy Policy

01Who we are and the scope of this policy

The Roseau app is a store for selling phone spare parts and accepting repair requests, run by Roseau Store. We are the data controller for the personal data the app processes.

This policy applies to the Roseau app on Android and iOS, and to the backend services it relies on. It does not apply to any other website or app you reach from a link inside the app.

The store-management app used by our own staff has a separate policy, and it is not available to the public.

The app shows this policy in Arabic only, inside the app itself (Account (حسابي) → Privacy Policy (سياسة الخصوصية)). This page is its English translation, and the two are the same text — except for a paragraph in Section 14 concerning this website in particular.

By using the app, you agree to what is set out here. If you do not agree, you are free not to use it, or to delete your account under Section 11.

02Data we collect

We collect the least the service needs, and each category has a specific reason. You can browse the store and search it without an account at all; registration is only required to buy something or to use features tied to your account.

What you give us yourself

Phone number

Your identity in the system, verification by a code sent to you, and communication about your order.

Full name

Addressing you, and delivering the order to its owner.

Password

Protecting your account. Stored hashed — no one on our side can read it.

Delivery addresses

Governorate, area, street, building, floor, apartment, and your notes — to deliver the order to you.

Location coordinates and their accuracy

When you set the address on the map or tap "My current location", so the courier reaches the right door. Optional — you can type the address by hand instead.

Profile picture

Shown on your profile inside the app. Optional, and you may delete it whenever you wish.

Device or part photo

When searching by image, to identify the device and find its parts. See Section 4.

Repair-request data

Your name, number, address, device name, and fault description — to receive the device and repair it.

Ratings and reviews

Published on the product page together with your name. See Section 15.

Order notes

Special instructions you write in the cart.

What arises from your use of the app

Orders and their details

Items, quantities, prices, total, order status, its date, and its status-change history — to fulfil the order, show your history, and for our accounting obligations.

Invoice amendments

If the store amends your invoice, we record the time and reason for the amendment and show them to you.

Order-cancellation requests and their reasons

To decide on them and keep a record.

Favourites

The products you have marked, so you can find them later.

Loyalty points and their movements

Your balance, what you earned and spent, and from which order.

Account tier

Regular, wholesale, or special — determines the prices shown to you, and is set by the store, not by you.

Account status

Active or blocked, and why — to protect the store from abuse.

IP address and request time

Logged when requesting a verification code, sending a repair request, or searching by image — to prevent abuse and cap usage. Not used to track you or to build a profile about you.

Fake-location signal

When sending a repair request, the system checks whether the location has been spoofed by software and stores a signal to that effect — protection against false requests that send a courier to an address that does not exist.

Verification codes

The code sent, its expiry time, and the number of attempts — to verify your number and prevent guessing.

Notification token

An identifier the notification provider gives your device so notifications about your order reach it. Linked to your account and number when you sign in, and unlinked when you sign out or delete your account. Never used for advertising or tracking.

What stays on your device and never reaches us

• The shopping cart, before the order is completed.
• Your dark-mode preference.
• Tracking links for repair requests you sent without an account — saved on your device so you can follow your request; losing them means losing the ability to follow up from that device.
• Your device model as reported by the operating system — read on the device to suggest suitable parts for it, and never sent to our servers.
• Reading the text printed on the device or its box when searching by image — happens entirely on your device.

Deleting the app erases everything in this paragraph.

03Device permissions

The app does not request a permission unless it actually needs it, and it explains why at the moment it asks. Refusing any of them does not stop you from browsing and buying.

Location (while in use)

To set the delivery address on the map and calculate the route to it. If you refuse it, you can type your address by hand or move the pin yourself.

Camera

To photograph the device or part and search for it. If you refuse it, you can search by typing or choose a photo from the gallery.

Photo gallery

To choose a photo of your device to search with, or a photo for your account. If you refuse it, your profile picture stays empty.

Notifications

To tell you about a change in your order or repair-request status, and about the administration approving your account. If you refuse it, you can still follow your orders from inside the app as usual.

Internet

The app does not work without it.

You can withdraw any permission at any time from your phone settings, and the app carries on with what remains available to it.

04Search by image

Search by image goes through two stages, and the difference between them matters to your privacy:

• On your device first: the app reads the text printed on the device or its box, compares the photo with the store's own photos, and reads your phone model from the system. This stage runs entirely inside your phone, and the photo never leaves the device during it.
• Then on our servers, when needed: if the first stage is not enough — for example a smooth back panel with no text — the photo is sent to our server, which passes it to a specialised image-recognition AI service (see Section 7) to identify the device shown in it.

Your photo is never used to train any model of ours. If you would rather not send your photos to a third party, do not use this feature — searching by typing and picking the model from a list are always available and serve the same purpose.

05Why we use your data

• Fulfilling your order: preparing it, delivering it, and communicating with you about it.
• Managing your account: creating it, signing you in, verifying your number, and recovering it if you lose access.
• Repair service: receiving your device, diagnosing it, and informing you of the repair stages.
• After-sales service: responding to your enquiries, complaints, and return or cancellation requests.
• Showing you the correct prices for your account tier, and calculating your loyalty points.
• Improving the store: knowing which parts are in demand and improving search results — using aggregated data, not a personal profile about you.
• Protection from abuse: preventing false requests, capping verification codes and image search, and blocking abusive accounts.
• Legal compliance: keeping sales records and invoices as required by applicable law.

We do not use your data for any purpose beyond what is listed above, and we do not make fully automated decisions about you that have a legal effect on you.

06Legal basis and your consent

• Performance of a contract: whatever is needed to complete your order, provide the repair service, and manage your account.
• Your explicit consent: access to your location, camera, and photo gallery, and sending your photo to the recognition service. This is requested from you at the time, and you may withdraw it whenever you wish.
• Legitimate interest: protecting the store and its customers from fraud and abuse, and securing accounts.
• Legal compliance: keeping the sales records that must be kept.

07Who we share data with

We do not sell your data, rent it out, or trade in it in any form. It is shared only with the technical service providers who run the app, and only to the extent their work requires:

Supabase

Hosts the database, accounts, and photo files. It receives the data we hold about you, acting as an infrastructure processor on our behalf.

OTPIQ

Sends verification-code messages. It receives your phone number and the code text, at the moment of sending only.

OneSignal

Delivers notifications to your phone. It receives your device's notification token, and your account identifier and phone number — linked to the device so your order's notification reaches you and no one else. The link is broken as soon as you sign out or delete your account.

OpenRouter and the recognition-model providers behind it

Identifies the device in a search-by-image photo. It receives only the photo — without your name, number, or account — and it is sent only if you use the feature and on-device processing was not enough.

OpenStreetMap Foundation — the Nominatim service

Searches for a place by name when you choose your address. It receives your search text and IP address.

The OSRM project

Calculates the route between the store and the delivery address. It receives the coordinates of both points and the IP address.

CARTO

Provides the base maps shown inside the app. It receives the geographic tiles the map displays in front of you, and the IP address.

Apple and Google

Convert coordinates into a readable address via your phone's system service, and provide the on-device text-recognition library — which runs on the device itself.

Other, limited cases

• Delivery courier: receives your name, number, address, and the content of your order, and nothing else.
• Store staff: each one sees only what their own permission allows, and their actions on your account are logged in an internal record.
• Official authorities: when a binding legal request comes from a competent authority, and only to the extent it requires.
• Transfer of store ownership: data may pass to the new owner and remain governed by this policy; we will inform you before that happens.

08Where it is stored, and transfer outside Iraq

Your data is stored on Supabase servers in the Seoul — South Korea region. That is, it is transferred outside Iraq and processed there.

Some requests may be processed in other locations depending on the service provider: verification messages through a provider operating in Iraq, and mapping, image-recognition, and notification services through servers in Europe and the United States. We contract with these providers to process data on our behalf and to protect it.

By using the app, you acknowledge and agree to this transfer.

09Retention period

Account data

For as long as your account exists, then deleted under Section 11.

Orders and invoices

Up to 5 years from the order date, for our accounting and tax obligations and for parts warranty. They remain after account deletion under the name recorded on them, without a phone number or login account.

Repair requests

Up to 2 years from closing the request, for the repair and warranty record. They remain after account deletion without a phone number.

Roseau Coins movements

For as long as the orders linked to them remain, and they remain after account deletion.

Delivery addresses

Until you delete them or your account is deleted.

Ratings and reviews

Until you delete them, the store removes them for breaching its rules, or your account is deleted.

Verification codes

Minutes, until they expire, then cleared out.

Verification-code request log

Up to 30 days, for protection against abuse.

Search-by-image log

Up to 24 hours.

Search-by-image photos

Never stored at all.

Profile picture

Until you delete it or your account is deleted.

10Your rights over your data

• Access: knowing what we hold about you and requesting a copy of it.
• Correction: amending your name, number, and addresses — most of which you can edit yourself from the app.
• Deletion: deleting your account and your data under Section 11.
• Withdrawing consent: turning off location, camera, or gallery permission from your phone settings, without disabling the rest of the app.
• Objection and restriction: objecting to a specific processing activity or requesting that it be restricted.
• Data portability: obtaining your data in a machine-readable format.
• Complaint: if our response does not satisfy you, you have the right to complain to the competent data-protection authority in your country.

To exercise any of these rights, write to us (Section 17). We respond within 30 days at most, and we may ask for proof of your identity, to protect your account from a request impersonating you.

11Deleting your account and data

You may delete your account whenever you wish, in either of two ways:

• From inside the app: Account (حسابي) → Delete account (حذف الحساب), then enter your password and type the confirmation sentence. Deletion is carried out immediately.
• By messaging us on WhatsApp from your registered number, with the subject "Account deletion request" — see the contact details in Section 17, or the account-deletion request page (in Arabic).

What is permanently deleted

Your login account and phone number: no one can sign in with this account afterwards, and your number is erased from your profile, from repair requests, and from the store's notifications and records. Deleted along with them: your profile picture, your addresses, your favourites, your ratings and reviews, your notifications, the verification codes linked to your number, and the link between your device and notifications. Tracking links for repair requests saved on your device are invalidated.

What remains with the store, and why

Financial records remain with the store: your orders, their items and invoices, your repair requests with their details and costs, your Roseau Coins movements and balance, and staff notes — together with the name recorded on them. These are the basis of our accounting and of the warranty, and the law requires keeping them for the period stated in Section 9. They are not linked to any login account after deletion, and your number does not appear in them.

When deletion is not carried out immediately

If you have an order or repair request in progress, wait for it to finish or cancel it first: the courier is already on the way to you with your number and address, and erasing them would leave the order with no way to be delivered.

Timing

Deletion from inside the app is immediate. Deletion requests sent by message are carried out within 30 days of verification, and we confirm this to you. Backup copies that may contain your data are erased within 90 days at most, in the normal backup cycle.

After deletion, you can create a new account with the same number, and it starts with no history.

The full detail — the conditions for deletion, everything that is deleted and what remains, and what happens on your device — is in the Account Deletion Policy.

12Data security

• Every connection between the app and our servers is encrypted over HTTPS/TLS.
• Your password is stored hashed, and no one on our side can read it.
• The database is protected by row-level security: your account can reach only its own rows, even if it tried to reach others directly.
• Staff permissions are segmented: a staff member sees only what their task requires, and their actions are logged in an internal record under their name.
• Caps on verification codes and search by image protect against guessing and abuse.
• Keys for sensitive services stay on the server and are never shipped inside the app.

Even so, no electronic method is absolutely secure. If a breach occurs that affects your personal data, we will notify you and inform the competent authorities within 72 hours of becoming aware of it.

13Children's privacy

The app is aimed at adults; we do not intend it for children and do not knowingly collect their data. An account can only be created by someone who is 18 years old or has reached the legal age for contracting in their country.

If we learn that an account belongs to a child under this age, we delete it and delete its data immediately. If you are a parent or guardian and believe your child has created an account, write to us, and we will act as soon as we receive your message.

14No advertising and no tracking

The app contains no advertising network, no behavioural-analytics tools, and no third-party tracking tools. We do not use advertising cookies or your device's advertising identifier, and we do not track your activity across other apps or websites — the app does not show you the tracking-permission prompt that appears on iPhone devices, because we do not track you in the first place.

We do not send you marketing notifications; the text messages you receive are the verification code and matters directly related to your order.

The same applies to this website: no cookies, no analytics tools, and its fonts and images are hosted on itself, so your address is never sent to a third party. The only thing it stores in your browser is your dark-mode preference.

15What is shown publicly to others

Most of your data is private and no other customer sees it. The one exception is your ratings and reviews on products: shown to everyone who opens the product page, together with the name recorded on your account and the date written.

Your phone number, your address, and what you bought are never shown alongside them. If you want to remove a review or rating you wrote, delete it from the app or write to us. All of it is deleted together with your account.

16Changes to this policy

We may update this policy whenever features or service providers change, and the last-updated date at the top of the page is updated along with it.

If a change is material — such as collecting a new category of data or sharing it with a new party — we will tell you inside the app before it takes effect, and ask for your consent again wherever required. Continuing to use the app after the change takes effect means you accept it.

17Contact and complaints

For any question about your privacy, to exercise your rights, or to file a complaint:

Responsible party

Phone

WhatsApp

Address

Response time

Within 30 days at most.

If you believe our processing of your data breaches the law, you have the right to complain to the competent personal-data-protection authority in your country.