Privacy Policy

1. Information We Collect

We collect information you provide directly, information collected automatically, and information from third parties.

1.1 Information you provide

• Account information: phone number, name, email address, profile picture, and password (where applicable).
• Order information: delivery and pickup addresses, order details, special instructions, and recipient information.
• Payment information: payment method details (processed by our payment provider), billing addresses, and transaction history. We do not store full card numbers on our servers.
• Communications: messages, ratings, reviews, and support requests.
• For drivers: identity documents, driving licence, vehicle information, and bank or wallet details for payouts.
• For merchants: business information, store location, menu items, photos, and bank or wallet details for payouts.

1.2 Information collected automatically

• Location data: with your permission, we collect precise location to find nearby stores, deliver to your address, help drivers navigate, and let merchants set their store location. Drivers location is collected continuously during active deliveries — including when the app is in the background — to track delivery progress and share live updates with customers.
• Photos and camera: with your permission, we access your photo library and camera so you can upload payment receipts, profile pictures, and (for merchants) menu and store images.
• Device information: device model, operating system, app version, language, time zone, and unique device identifiers.
• Push notification tokens: we collect tokens assigned by Apple Push Notification service (APNs) and Firebase Cloud Messaging (FCM) to deliver order updates and important messages.
• Usage data: pages and features you use, search queries, taps, time spent, and crash reports.
• Network information: IP address, mobile network information, and approximate location derived from these.

1.3 Information from third parties

• Authentication providers: if you sign in with a third-party service, we receive the basic profile information permitted by that service.
• Payment providers: our payment partners share transaction status, masked payment details, and fraud signals.
• Analytics and crash reporting providers: we receive aggregate performance and stability data.

2. How We Use Your Information

We use your information to:

• Create and maintain your account and verify your identity.
• Process orders, payments, refunds, and deliveries; show available stores; and route drivers efficiently.
• Send transactional messages including order status, OTP codes, receipts, and important account or service notices.
• Operate, improve, and personalize the Service, including search results, recommendations, and offers.
• Detect, prevent, and respond to fraud, abuse, security incidents, and violations of our Terms of Service.
• Comply with legal obligations, enforce our agreements, and protect the rights, property, and safety of OnWay, our users, and others.
• Send marketing communications where you have consented or where permitted by law. You can opt out at any time.

3. How We Share Your Information

We do not sell your personal information. We share information only as described below:

• With merchants and drivers: to fulfill your orders. For example, your name, delivery address, contact number, and order details are shared with the merchant preparing your order and the driver delivering it.
• With customers and merchants (drivers): a driver's first name, photo, and approximate location are shared with the customer and merchant during an active delivery.
• Service providers: hosting, payments, mapping, push notifications (Apple, Google), analytics, customer support, communications (SMS, email), and identity verification — only the data they need to perform services on our behalf.
• Legal and safety: when we believe in good faith that disclosure is necessary to comply with applicable law, legal process, or government request, or to protect rights, property, or safety.
• Business transfers: in connection with a merger, acquisition, financing, or sale of assets, subject to standard confidentiality protections.
• With your consent: for any purpose disclosed at the time you consent.

4. Permissions on Your Device

The OnWay apps request the following device permissions, all of which you can manage in your device settings at any time:

• Location (when in use): all OnWay apps. Used to show nearby stores, set delivery and pickup points, and verify store location.
• Location (always / background): OnWay Iraq Driver only. Used during active deliveries to track route progress and provide live updates to customers.
• Photos and camera: to upload payment receipts, profile pictures, and merchant menu or store images.
• Notifications: to deliver order updates and important messages.

5. Cookies and Similar Technologies

Our website uses cookies and similar technologies to keep the site working, remember your preferences, and measure performance. You can control cookies through your browser settings; some features may not work without them.

6. Data Retention

We retain personal information for as long as your account is active and as needed to provide the Service. We may retain information after account closure to comply with legal obligations, resolve disputes, prevent fraud, and enforce our agreements. Backups and aggregated, de-identified data may be retained longer.

7. Your Choices and Rights

• Access and update: you can review and update your account information directly in the app.
• Delete your account: you can request account deletion from within the app or by contacting support@onwayiraq.com. Some information may be retained as required by law.
• Permissions: you can revoke location, camera, photos, or notification permissions at any time in your device settings. Some features will not work without them.
• Marketing: you can unsubscribe from marketing communications using the link or instructions in each message.

8. Children

OnWay is not directed to children under 13 (or the equivalent minimum age in your country). We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us so we can delete it.

9. Data Security

We use technical and organizational measures to protect your information, including encryption in transit (HTTPS/TLS), access controls, and monitoring. No system is perfectly secure, and we cannot guarantee absolute security.

10. International Data Transfers

Your information may be processed and stored in countries other than the country where you live, including jurisdictions where our service providers operate. Where required by law, we put appropriate safeguards in place for international transfers.

11. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by other means. The "Last updated" date at the top of this page indicates when the policy was last revised.

12. Contact Us

If you have questions or requests about this Privacy Policy or your personal information, contact us at support@onwayiraq.com.