Privacy policy
Wasl is an app for neighbourhood generator owners, their collectors and their subscribers. This page explains what we store, why, and how to delete it.
Who we are
Wasl is made by Hasanain Abdullah Alhamedi, an independent developer in Basra, Iraq, who is responsible for your data in this app. You can reach him at support@hasanain.dev.
What we store
- Your account: the email or name that comes from Google, Apple or the email you signed up with. A subscriber who links with a receipt code has an account without an email.
- The generator's records that its owner and staff enter: subscribers' names, phone number, house and breaker number, amps, prices, subscriptions, payments and receipts, expenses.
- A number that tells your device apart so receipt numbers stay unique, the notification token Firebase gives your device, and notification topics for your generators.
- The payment accounts a generator owner lists (ZainCash, Qi, a bank account…) so their subscribers can see them, and the payments a subscriber reports, with a photo of the transfer if they attach one. Wasl does not move money.
Where it is kept
On your phone first (the app works offline); once you sign in it syncs with our servers on Cloudflare. Sign-in and notifications run through Google's Firebase. Confirmation and password-reset codes are emailed through Resend.
To make sure requests come from a genuine copy of the app, we use Google's Play Integrity and Apple's App Attest. We receive only the result of that check.
The person who runs Wasl can view account and generator data to keep the service running and protect it (for example, to stop fraud), and can send announcements about the service. Every change they make to an account, and every announcement, is recorded.
What we don't do
- We don't sell your data or share it for advertising.
- We don't use your location.
- We don't read your messages or contacts.
How long we keep it
For as long as your account exists. When you delete your account it is removed from our servers at once; a copy may remain in the database's automatic recovery log for up to 30 days, after which it is erased by itself.
A transfer photo a subscriber sends is deleted from our servers after 3 days, and a reported payment 90 days after it is answered.
This website
The Wasl website uses no cookies, trackers or ads, and serves its own fonts. Cloudflare delivers and protects the pages and, like any website, sees your IP address.
Children
Wasl is for adults who run a generator or pay for a line, and is not directed at children.
Changes
If we change this policy we update the date below, and if the change matters we tell you in the app.
Delete my account
- Open Wasl and sign in.
- Go to More, then Account.
- Tap “Delete my account” and confirm.
- If your account has an email, enter the code we send there, so we know the account is yours.