Privacy Policy

Mashrouei app — last updated: October 25, 2026

This page explains what data the Mashrouei app collects and how we use and protect it. The app is published by United Suppliers for Trade and Investment SPC, Sultanate of Oman ("we").

1. Data we collect

• Account data: your email address, and your name if you sign in with Google. Your password is stored encrypted by Google Firebase and we cannot see it.
• Business data you enter: business name, country and currency; tax number, commercial registration and bank details if you enter them; items and stock; customers and suppliers and their phone numbers; invoices, quotes, purchases and payments; your logo, signature and stamp.
• Staff data: email, name and the permissions set by the business owner.
• Device information: device identifier, model and last use. Used only to protect your account (each account works on one device) and to prevent account sharing.
• Subscription data: plan, dates and renewal status. Payment is handled by Google Play; we never see your card details.

2. Camera and photos

• Camera: used only to scan barcodes when you tap the scan button. Barcodes are read on your device; no image is saved or uploaded.
• Photos from your device: only when you choose a logo, signature or stamp to show on your invoices.

3. How we use data

• To run the app: save your invoices and data and sync them between your staff's devices.
• To protect accounts and prevent fraud.
• To activate and verify subscriptions.
• To answer your questions and requests when you contact us.

We do not sell your data, we do not use your business data (customers, invoices, amounts) for any other purpose, and we do not share it with advertisers.

4. Who can see your data

• You, and the staff you add, each according to the permissions you set.
• Each business's data is fully separate and protected by server-side security rules that block access from any other business.
• We do not look at your business data unless you ask us for help, to carry out a deletion request, or if the law requires it.

5. Service providers

We use trusted services that process data only on our behalf:

• Google Firebase (sign-in, database and server): data is stored on servers in Europe.
• Google Play: payments and subscription management.
• RevenueCat: subscription status checks (business ID, plan and dates only).

6. On-device storage and security

• The app keeps a copy of your data on your device so it works offline, then uploads changes when you are back online.
• All connections are encrypted (HTTPS).

7. Retention and deletion

• We keep your data while your account exists.
• In the app: Settings → Delete account. If you are the business owner, the whole business is deleted (invoices, customers, items and staff). If you are a staff member, only your own account is deleted.
• Without the app: use the data deletion request page. We complete requests within 30 days.
• Technical backups kept by our service provider may remain for up to 30 days, then are deleted automatically.

8. Your rights

• View your data and download a full copy from inside the app (Settings → Download a copy of your data).
• Edit your data at any time.
• Delete your account and data.

9. Children

The app is made for business owners and is not directed at anyone under 18.

10. Changes

If we change this policy, we will update this page and the date at the top.

11. Contact us

United Suppliers for Trade and Investment SPC — Sultanate of Oman
Email: contact@unitedsuppliersoman.com