Privacy policy
Last edited:
This policy explains what the Al-Tali'a Scientific Library app collects, why, and who can see it.
What we collect
- Email and name: to create your account and sign you in. If you sign in with Google, we receive only your name and email from Google.
- Phone number and delivery address: to deliver your order. Only asked for at checkout.
- Location (optional): if you tap "Use my location" when entering an address, we store that point with the order so the courier finds you. We never read your location at any other time.
- Order history and loyalty points: the books you bought, amounts and status, and the points you earned and spent.
- Reviews and wishlist: only if you choose to use them.
- Notification identifier: a device token used to send order notifications, if you allow notifications.
We do not read your contacts, do not track you across other apps, show no advertising, and do not sell your data.
Payment
- Cash on delivery: paid to the courier; we collect no payment data.
- PayPal: the payment happens on PayPal's pages under PayPal's privacy policy. The amount is charged in US dollars at a fixed exchange rate shown to you before you pay. Your card or PayPal account details never pass through our servers; we receive only the payment confirmation and transaction reference from PayPal.
Who can see your data
- Authorised library staff: to fulfil orders and provide support.
- The delivery courier: sees the recipient's name, phone, address, delivery notes, the order contents and the amount to collect, for orders ready for delivery only. The courier does not see your email or purchase history.
- During delivery: the courier's position is shown to you on the map inside your order; it is collected with the courier's consent and only while they have sharing switched on.
- Service providers: Supabase (database and authentication), Render (server), Expo (notification delivery), Google (sign-in and maps) and PayPal (payments). Each processes only what its service needs.
Where it is stored
Data is stored with Supabase on servers in the European Union (Frankfurt) and transferred encrypted over HTTPS.
How long we keep it
Account data is kept while the account exists. Order records are kept for accounting after account deletion, with your personal details removed. The location point stored with an order is deleted when the account is deleted.
Your rights
You can view and correct your data in the app, and delete your account permanently via Account → Delete account, or through the account-deletion page on our website. You can also write to us from your registered email.
Children
The app is intended for people aged 13 and over; we do not knowingly collect data from anyone younger.
Changes
We may update this policy; the update and its date will appear on this page.
Last updated: 11 October 2026.
Contact: see the Contact page.