Privacy Policy

Last updated: June 2026 At Tawasul, we respect your privacy and are committed to protecting your personal data. This policy explains what we collect, why, how we use it, and your choices. 1. Who we are (data controller) Operator: Tawasul — jobs and services platform. For privacy inquiries, use in-app support or the contact details on the About page. 2. Scope This policy applies to: — The Tawasul mobile app on Android and iOS. — The API (e.g., percentyemen1-002-site5.itempurl.com or the official production domain). — Public web pages (Terms, Privacy, About). It does not cover third-party sites or services linked from the App. 3. Data we collect 3.1 Account data: name, email, phone (if provided), account type (job seeker / company / service provider), profile photo. 3.2 Google Sign-In: Google ID, name, photo, email — when you choose Google login. 3.3 Company data: company name, industry, city, location, logo, apply contact (email/phone). 3.4 Jobs and applications: posted jobs, applications, cover letter, application status. 3.5 CV/resume: files you upload voluntarily; stored on our servers and visible to employers you apply to. 3.6 Device and session: device ID, platform (Android/iOS), app version, locale, FCM token for push, approximate IP, last active time. 3.7 Usage data: recent searches (if enabled), saved jobs, in-app notification history. 3.8 Advertising data: ad identifiers that Google AdMob may collect under Google policies (we do not control all AdMob collection directly). 4. How we collect data — Directly from you when registering, updating profile, posting jobs, or applying. — Automatically when using the App (device sync, FCM token). — From Google when using Google Sign-In. — From job import sources (public company/job data) per operator settings. 5. Why we use your data (legal bases) — Service delivery: your account, applications, status notifications, jobs and services. — Consent: push notifications, CV upload, Google Sign-In. — Legitimate interests: security, fraud prevention, product improvement. — Legal obligation: when required by competent authorities. 6. Sharing data We do not sell your personal data. We may share limited data with: — Firebase / Google: FCM push, Google Sign-In, and possibly Analytics depending on configuration. — Google AdMob: ad serving (subject to Google policies). — Hosting providers: secure storage for files and database. — Companies: when you apply to a job — the employer sees relevant profile/application data. — Authorities: when legally required. 7. Push and in-app notifications We store FCM tokens linked to your account to deliver notifications. Application submit/accept/reject events are also recorded in the in-app notification inbox. You can delete in-app notifications in the App; disable push via device settings. 8. Storage and security Data is hosted on secured servers; API traffic uses HTTPS. Passwords are hashed; we never store plain-text passwords. Files (images, CVs) are stored in protected server storage. No system is 100% secure — contact us immediately if you suspect account compromise. 9. Retention — Active account: for as long as you use the service. — After account deletion: we delete or anonymize within a reasonable period unless law requires retention. — Technical logs and backups: limited periods for security and operations. 10. Your rights Depending on your jurisdiction, you may have the right to: — Access a copy of your data. — Rectify inaccurate data. — Delete your account and data. — Object to certain processing or withdraw consent (e.g., push). To exercise rights, contact support with identity verification. 11. Children The Platform is not directed at users under 18. If we learn we collected a child’s data without parental consent, we will delete it. 12. International transfers Data may be processed on servers outside your country (e.g., Google services). We apply reasonable safeguards. 13. Cookies and similar technologies The public website may use essential cookies/sessions. The mobile app uses device and session identifiers rather than traditional browser cookies. 14. Changes to this policy We may update this policy. Material changes will be communicated via the App or email when possible. See “Last updated” at the top. 15. Security incidents If we discover a security breach that may affect your personal data, we will take reasonable steps to contain it and notify authorities as required by law. Affected users may be informed via the App or email when appropriate, with guidance to protect the account (password change, session review). 16. Automated decisions We do not use automated systems to make binding hiring decisions on behalf of employers. Accept or reject decisions on applications are made by the employer or their representative; in-app notifications only inform you of status. 17. Contact For privacy questions or rights requests, see the About page and in-app support channels. By using Tawasul, you acknowledge that you have read this Privacy Policy.