Zulal Apps Privacy Policy

Last updated: 2026-08-22

phi bit ("we") respects your privacy. This policy explains what data we collect through the Zulal apps (Customer app and Driver app) and how we use and protect it.

1. Data We Collect

• Phone number: to create your account and sign in via a one-time password (OTP).
• Location: in the Driver app, to navigate to customer addresses and complete deliveries. In the Customer app, we use your location once, on demand (foreground only) — when you tap "use my current location" — to pin your delivery address accurately. Neither app tracks your location in the background.
• Push notification tokens (FCM): to send order-related notifications (order confirmation, driver dispatched, task assignment).
• Order & cash data: order details (number of jugs, delivery address, order status) and cash amounts collected on delivery, for operational and accounting purposes.
• Crash reports: when the app stops working, an automatic technical report is sent containing the device model, its operating system, the app version, where in the code the failure happened, and an internal numeric account identifier. It contains no phone number, name or address. These reports are processed by Sentry.
• Anonymous usage statistics: which screens are opened and how far the ordering steps get (item added to basket, checkout started, order placed or failed with its failure code), so we can see where the experience breaks down. Only counts and codes are sent — no text you typed, and no phone number, name or address. Processed by PostHog, and switchable off at any time under Account → Share usage data.

2. How We Use Data

We use your data solely to: enable sign-in and app use; process and deliver orders and collect payment; send order/task notifications; find and fix app crashes and measure in aggregate where the experience breaks down; and improve our service.

3. No Sale of Data

We do not sell, rent, or trade your personal data with any third party for marketing purposes. We share the minimum data needed with technical service providers only to operate the service:

• OTPIQ — verification codes. Receives the phone number.
• Google Firebase (FCM) — order notifications. Receives the device push token and the notification text.
• Sentry — crash tracking. Receives device, version and crash location, plus a numeric account identifier.
• PostHog — aggregate usage statistics. Receives screen names, ordering steps and counts, plus a numeric account identifier.

Neither Sentry nor PostHog receives your name, phone number or address.

4. Data Retention

We retain your data for as long as you use the service and as needed for operational, accounting, and legal purposes. Order and cash records are kept as operational records; deactivated accounts may be hidden rather than deleted to preserve record integrity. You may request deletion of your personal data by contacting us, subject to legal and accounting requirements.

5. Data Security

We apply reasonable technical and organizational measures to protect your data against unauthorized access or loss. Data is transmitted between the app and our servers over an encrypted connection (HTTPS).

6. Children's Privacy

The app is not directed to children under 13, and we do not knowingly collect their data.

7. Changes to This Policy

We may update this policy from time to time and will post changes on this page with an updated "Last updated" date.

8. Contact Us

• Company: phi bit (PHIBIT LTD)
• Email: Info@phi-bit.com
• Website: phi-bit.com