Privacy Policy

Last updated: 8 October 2026

Who we are

"Dawa" is an Android app for pharmacies in Syria. Privacy contact: support@dawasyr.com.

What we collect

• Google account: when you sign in we receive only your email address (and account ID), used to identify your account and manage your subscription and free trial. We do not read your email, contacts or other Google data.
• Registration details: pharmacy name, phone number, governorate, address and a device code, sent to our server (Supabase) to register the pharmacy and verify the licence. We also send the phone model, app version and app-integrity check results (e.g. modified app, emulator) to prevent licence tampering.
• Prescription word images: only if the pharmacist agrees in Settings (it can be turned off at any time). We send the image of a word the pharmacist confirmed and, sometimes, the full prescription image, to improve the prescription reader. We do not ask for patient names, and the images are not linked to the pharmacy name.
• Medicine contributions: a box photo or price of a medicine missing from our list, sent with a device code but without the pharmacy name.

What stays on your device

Sales, inventory, customer and invoice data are stored on the pharmacy device and are not sent to our server.

Google Drive backup

If the user enables backup, the app requests the drive.appdata scope: a private app folder in your Drive. The app cannot see your other files. The backup lives only there, under your control; we cannot access it.

Use of Google user data

We use Google user data (email address and account ID and, if backup is enabled, the app's private Drive folder) only to provide the app's features: sign-in, subscription management and restoring your backup. We do not share it with anyone, sell it, or use it for advertising. The app's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Sharing and sale

There are no ads and we do not sell your data or share it with advertisers. Data sent to us is stored on Supabase, which we use as a hosting provider only.

Retention and deletion

We keep registration data while your account exists. To request deletion of your account and data, see the data deletion page.

Changes

If this policy changes we will update the date above.