Privacy Policy
This policy explains what personal data Shisho collects when you use our apps, why we collect it, who we share it with and the choices you have. Shisho is operated by F & F s.a.r.l, a limited liability company registered in the Beirut Commercial Register, with its office in Badaro, Beirut, Lebanon ("Shisho", "we", "us").
1. Who this applies to
This policy covers customers using the Shisho app, drivers using Shisho Driver and shops using Shisho Store. Shisho is for adults only: you must be 18 or over to use it.
2. What we collect
| Data | From whom | Why |
|---|---|---|
| Phone number | Everyone | To sign you in with a one-time code sent by SMS, and so shops and drivers can reach you about an order. |
| Name | Everyone | To identify you on orders and runs. |
| Date of birth | Customers | To confirm you are 18 or over. |
| Delivery addresses and location | Customers | To show shops that deliver to you and to deliver and collect your order. We use your location only while you use the app. |
| Live location during a run | Drivers | To route the driver and to show the shop and the customer where their order is. Location is shared only while a run is in progress. |
| Handover photos | Drivers | As proof of each delivery and collection. |
| Shop details, location and ID photo | Shops | To check that each shop is a real business before it can sell on Shisho. |
| Orders, payments and wallet activity | Everyone | To process orders, cash collection, wallet balances, transfers and shop payouts, and to keep accounting records. |
| Chat messages | Customers and drivers | To let a customer and the driver visiting them message each other about that visit. |
| Device push token | Everyone | To send you notifications about your orders and runs. |
| Support messages | Everyone | To answer you when you contact us. |
We do not use your data for advertising, we do not track you across other companies' apps or websites, and we do not sell your personal data.
3. Who we share it with
We share only what is needed for an order:
- The shop and driver handling your order see your name, phone number, delivery address and order details.
- Customers see the driver's name and the progress of their delivery or collection, including the driver's location while the run is in progress.
We also use these service providers, who process data on our behalf:
- Microsoft Azure (servers and database, UAE region)
- Cloudflare (photo storage)
- Google (maps, address search and push notifications through Firebase)
- OpenStreetMap Nominatim (address lookup)
- Twilio (sign-in codes by SMS)
We may disclose data where the law requires it.
4. How long we keep it
We keep your account data while your account is open. When you delete your account, we delete or anonymise your personal data (name, phone number, date of birth, addresses and device tokens). We keep anonymised order and payment records for as long as accounting and tax law require (currently 10 years). Handover photos are kept with the order they belong to, for the same period. Shop owners' ID photos are deleted when the shop account is deleted.
5. Your choices and rights
- Delete your account at any time in the app (customers: Account, then Delete account; shops: Profile, then Delete account). You can also ask us by email.
- Access or correct your data. You can edit your name and addresses in the app, or ask us for a copy of your data.
- Location and notifications. You can turn these off in your phone's settings. Some features, such as delivery to your location, will not work without them.
6. Security
Data is encrypted in transit (HTTPS) and stored with access controls. No system is perfectly secure, so we limit the data we collect to what the service needs.
7. Changes
We will update this page when this policy changes and change the date at the top. If a change is significant, we will tell you in the app.
8. Contact
Questions or requests: fouad.halawi@gmail.com or +961 3 584 858.