1. Scope and controller

This policy explains how the Abu Alaa app and website process personal data when you browse the menu, create an account, place or track orders, use delivery-location features, contact support, submit reviews, or receive notifications. The service is technically operated using the Orderics platform for Abu Alaa.

2. Data we process

• Account and contact: name, phone, optional additional/WhatsApp phone, email and authentication identifiers.
• Delivery and location: governorate, area, address details, building/floor/apartment/landmark and precise coordinates only when you choose a map location or allow location access.
• Orders: cart, items, options, notes, branch, order type, prices, fees, coupons, status, favourites and reviews.
• Payments: selected method, payment status and transfer-proof files. Full card details are processed by the selected payment provider and are not stored by the Abu Alaa app.
• Support and user content: support/complaint messages, images, files and review content.
• Device and security: Firebase notification token, device/session identifier, app version, network and technical logs needed for security and diagnostics.

3. Purposes

We use data to create and secure accounts, fulfil and deliver orders, calculate configured fees, process or verify payments, send transactional notifications, provide support, prevent abuse and fraud, diagnose errors, improve reliability and meet legal duties.

4. Sharing

We do not sell personal data. Necessary data may be shared with the responsible Abu Alaa branch, an assigned courier, Orderics and hosting providers, Firebase, map providers, payment providers, and authorities where legally required.

5. Permissions

Location is requested only to help select a delivery address. Notification permission is used for order and account updates. Photo/file access may be used when you choose a payment proof or support attachment. You can deny permissions, but related features may not work.

6. Retention and security

We retain data only as needed for service delivery, accounting, dispute handling, fraud prevention and legal obligations. Appropriate technical and organisational safeguards are used, although no electronic system is completely risk-free.

7. Your choices

You can update profile data in the app, manage notifications through device settings, and request access, correction or deletion where applicable.

8. Account deletion

Registered users can submit a deletion request from Account → Delete account inside the app or through the public page below. Personal data is deleted or anonymised after verification. Limited financial/order records may be retained when required by law, accounting, security or fraud-prevention obligations.

9. Children

The service is not intentionally directed to children below the legal age to enter transactions. Guardian supervision should be used where required.

10. Contact and updates

We may update this policy when the service or legal requirements change. Contact: wv.w33000@gmail.com — +20 11 5272 0555.