سياسة الخصوصية

Privacy Policy

Last updated: 30 October 2026

Tasheel is a local services and information directory for Idlib (website and mobile app). You can browse without an account. An account is optional and is used only for posting, saving, and alerts.

What we collect

• If you choose Google or Apple sign-in: your name, email address, and the provider’s user ID (Google or Apple subject). We never receive your provider password.
• Device ID: a random identifier generated and stored on your device. It is sent with requests to enforce the daily limit on revealing contact numbers, and to attach guest activity to your account if you later sign in. It is not your phone number or a hardware identifier.
• Phone number, only if you add one, so people can reach a post you publish.
• Content you create while signed in, and technical logs (IP address and user agent) to protect the service.

Why

To run the directory, to confirm a sign-in token was issued for the Tasheel app, to apply contact-number limits, and — for Apple users — to revoke the Apple token when you delete your account, which Apple requires.

No sale or sharing

We do not sell, rent, or share your data with advertising networks, and we do not use it to track you across other companies’ apps or websites. The host that runs the service processes the technical data needed to operate it. We may disclose the minimum required by a valid legal process. Google and Apple receive only what their sign-in flows require, under their own policies.

Retention

Account data is kept until you delete the account in the app or ask us by email. The device ID stays on your device until you clear the app data. Quota logs tied to it, and technical logs, are kept for at most 90 days and then deleted or aggregated. After deletion, backup copies may remain for up to 30 days and are then overwritten.

Deletion

In the app open Account → Delete account and confirm by typing the Arabic word for delete. Steps are also on the account deletion page. Deletion permanently removes the account, name, email, saved phone, provider user ID, access tokens, sessions, posts you created and their photos, saved items, interests, assistant chats, and service requests tied to the account. For Apple sign-in we revoke the Apple refresh token when the server has the Sign in with Apple key configured. A public directory listing you managed is detached from the account and stays visible so the neighborhood does not lose a service; email us if you also want that listing removed.

Analytics and cookies

Public website pages use Google Analytics to see which pages are opened and how the directory is used, so we can improve it. Google sets a cookie and receives device type, pages you visit, and an approximate city. We do not send your name, email, or phone number to analytics, and we do not use it for advertising or to track you across other sites. You can block cookies in your browser settings.

The mobile app uses Firebase Analytics for the same purpose: screen views and actions such as choosing a province, searching, applying a filter, tapping call, opening a source link, and signing in, signing out, or deleting an account. We do not collect the advertising identifier (IDFA), we do not show Apple’s tracking prompt, and these events are not linked to your account.

Google user data

When you choose “Sign in with Google”, Tasheel requests only the basic scopes (openid, email, profile). We receive your name, email address, profile picture, and Google account ID. We do not request access to Gmail, Drive, Contacts, Calendar, or any other Google data.

• Use: to create your Tasheel account, sign you in, and show your name on what you publish. Nothing else.
• Storage: stored in the Tasheel database on our servers, transmitted over HTTPS, and accessed only by our moderation team when needed.
• Sharing: we do not sell, transfer, or share it with any third party, we do not use it for advertising, and we do not use it to train AI models.
• Deletion: permanently deleted when you delete your account (see Deletion). You can also revoke Tasheel’s access at any time from your Google Account permissions.

Tasheel’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact

Privacy questions and deletion requests: info@tasheeltech.sy