Partner Privacy Policy
1. About this policy
This Privacy Policy applies to the Hav-it Partner mobile app (also called Havit Partner / toukh_provider), bundle identifier com.vaxon.havitprovider. The app is for shops and home-service partners who register, manage menus or portfolios, and fulfill customer orders or service requests on the Hav-it platform.
It does not replace the general Hav-it website Privacy Policy for customers or drivers. If you use those apps, see their respective privacy pages.
2. Information we collect
Account and profile data you provide during registration and settings: phone number, password (processed by Firebase Authentication), business name, service category, contact details, opening hours, delivery or visit preferences, and related profile fields.
Identity and business media: photos of your ID (front/back) and business brand, menu, gallery, or portfolio images you upload via camera or photo library.
Operational data: orders and home-service requests assigned to you, statuses you set (accept, prepare, complete, quote, and similar), customer details needed to fulfill a request, and (where applicable) linked store drivers.
Device and usage data such as app version, device identifiers, and crash or diagnostics data used to operate and improve the Partner app.
Communications data when you verify your phone via OTP (WhatsApp or SMS through Twilio) or contact support.
3. Camera and photo library
With your permission through the device system dialogs, the Partner app may use the camera and photo library so you can capture or select ID documents and business media required for registration, verification, menu items, and gallery content.
These images are stored with our media and backend providers (including Backblaze B2 and Firebase) so our team can review your application and so customers can see your public business content where applicable.
You can deny or revoke camera and photo access in device settings; features that need uploads may then be unavailable until permission is granted again.
4. Location data
The Partner app does not request location permission on first launch. You can set your business or service location by placing a pin on the map or using a default city without granting GPS access.
If location permission was already granted at the system level, the app may use the device position only to help center the map when you choose to go to your current location. We do not require continuous background location for Partner accounts.
When you save an address or pin, we store coordinates and reverse-geocoded address text to determine service areas and to share pickup or visit locations needed to fulfill orders or home-service jobs.
Location data needed to fulfill a request may be shared with our backend (Firebase), Google Maps / geocoding providers, and customers or drivers involved in that request. We do not sell location data.
5. Notifications
The Partner app can send push and local notifications about new orders, home-service requests, reminders, and other operational alerts when notifications are enabled on your device.
The app does not force a notification permission prompt on first launch. If you later enable notifications, we may store a push token (for example via Firebase Cloud Messaging) so we can deliver those alerts.
You can change notification settings in the system settings at any time.
6. How we use information
We use your data to create and verify Partner accounts, review identity and business documents, operate order and request workflows, show your business to customers, provide support, prevent fraud, and send service-related messages.
Phone verification uses one-time codes delivered by WhatsApp or SMS (Twilio Verify).
Platform capabilities such as wallets, revenues, or payouts may store related balances or transaction records server-side when those features are available for your account.
7. Sharing of information
We share information only as needed to run the platform: with customers (order or request details they need), with drivers when delivery or pickup is involved, with our infrastructure providers (Firebase, Google Maps, Twilio, Backblaze), and when required by law or to protect safety and rights.
We do not sell your personal information.
8. Retention, security, and your rights
We retain Partner account, order, and media data as long as needed to provide the service and meet legal obligations. After account deletion, some records may remain as required by law.
You may request access, correction, or deletion of your Partner account. Use the Partner account deletion flow at /delete-account/provider/ or email support@toukh.com.
We apply technical and organizational measures to protect data, but no system is completely secure.
9. Children
The Partner app is intended for business operators and is not directed to children under 13. We do not knowingly collect personal information from children.
10. Contact
For privacy questions about Hav-it Partner, email support@toukh.com or visit the Partner Support page.