1. Information We Collect
When you use Masnaya app, we may collect the following information:
- Your full name
- Your email address
- Your phone (if provided)
- Your account information and user ID
- Authentication information you provide during sign up, sign-in, password changes and account deletion
- Authentication tokens that we use to maintain your signed-in session
- Your profile photo (if uploaded)
- Discounts you save as favorites
- QR codes you submit to verify or redeem discounts
- Records of QR code scans and discount redemptions, including the applicable discount and redemption time
- Email address you submit for password recovery and customer-support requests
- Information needed to process and verify account deletion requests
- Changes you make to your account profile
2. How We Use Your Information
We use your information to:
- Create and manage your MASNAYA account
- Verify your identity and maintain your account secure
- Display and update your profile details and profile photo
- Provide available deals and manage your saved favorite discounts
- Verify QR codes and process discount redemptions
- Keep track of your redemption history
- Help with password-recovery, customer-support and account-deletion requests
- Protect the app, user accounts and services from unauthorized access, fraud, misuse and security risks
- Fix technical issues and improve the performance and reliability of our services
- Contact you regarding your account, security, support or service-related matters
- Follow legal obligations and enforce our terms and policies
3. QR Code Usage
When you scan a QR code, MASNAYA processes the code on your device and sends the required information to our servers. We use this information to:
- Check if the QR code is valid and active
- Identify the shop and discount linked to the QR code
- Determine whether you are eligible to use the discount
- Process and confirm the discount redemption
- Prevent duplicate, unauthorized or fraudulent redemptions
- Enforce applicable redemption limits and offer terms
- Maintain your redemption history
- Support security, troubleshooting and redemption-related customer support
4. Data Security
MASNAYA implements security measures to protect your personal information against unauthorized access, change, misuse and loss.
These measures include:
- Information exchanged between the MASNAYA mobile app and our servers is protected using HTTPS.
- Account passwords are not stored in original form. They are securely encrypted before being stored.
- Authentication is handled using signed JSON Web Tokens (JWTs) to protect your account access.
- Authentication tokens are stored on the user’s device using secure device storage.
- User accounts and services are protected through authentication and role-based access controls.
- Incoming data is validated and invalid requests are not processed.
- Password changes and account deletion require verification of the your current password.
- To permanently delete an account, you must confirm the request by entering "DELETE".
- Profile photo uploads are limited to one file up to 2 MB and support JPEG, PNG, and WebP formats only.
- Uploaded profile images are processed securely and stored with a randomly generated file name.
- Sensitive information, such as password data and internal storage details, is not shared in user-facing responses.
- Database updates are managed through controlled changes to maintain system reliability.
5. Profile Information
You may view and manage certain profile information through the Privacy section in the MASNAYA mobile app.
You may update:
- Your first name
- Your last name
- Your phone number
- Your password
- Your profile photo
Name and phone-number updates must satisfy MASNAYA’s requirements. Phone numbers must be entered in a valid international format.
To change your password, you must provide your current password. Your new password must:
- Be at least 8 characters long
- Include at least three of the following:
- Uppercase letters
- Lowercase letters
- Numbers
- Special characters
- Be different from your current password
- Match the password-confirmation
You may upload, replace or remove your profile photo. Images are processed and linked with your account. You should not upload sensitive or confidential images.
Your registered email address cannot currently be changed through the MASNAYA mobile app.
6. Third-Party Services
MASNAYA uses a limited number of third-party services to operate the application and store uploaded images.
Render:
MASNAYA's backend API is hosted on Render. Information transmitted between the mobile app and MASNAYA's backend passes through Render’s systems. Render may process information such as:
- Account and profile requests
- Authentication requests
- Saved favorite discounts
- QR code verification and redemption requests
- Password-recovery and account-deletion requests
- Technical information, such as IP addresses, timestamps and server logs
Render processes this information as a hosting provider to support MASNAYA’s services.
Supabase Storage:
MASNAYA uses Supabase Storage to store and display uploaded images, including:
- Customer profile photos
- Shop images
- Discount images
Uploaded profile photos are stored using randomly generated file names for better security.
Profile images are served through publicly accessible Supabase Storage URLs. Users should not upload sensitive or confidential images as profile photos.
Authentication and Analytics:
MASNAYA does not currently use any third-party authentication services. Account authentication is managed by the MASNAYA backend using password hashing and secure authentication tokens.
The MASNAYA mobile app and backend do not currently include a third-party analytics, advertising, crash-reporting or tracking tools. Any internal analytics used by MASNAYA are generated from our own systems and are not shared with external analytics providers.
Third-party providers only process information needed to provide their hosting or storage services and follow their own terms and privacy policies. MASNAYA will update this Privacy Policy if additional service providers are introduced.
7. Your Rights
Depending on applicable law, you may have the right to:
- Access the personal information associated with your MASNAYA account
- Correct or update your profile information
- Change your account password
- Upload, replace or remove your profile photo
- View your saved favorite discounts
- View your QR code redemption history
- Request a copy of personal information held about you
- Request correction of information that cannot be updated directly through the app
- Delete your MASNAYA account and related personal information
- Request deletion of specific personal information where applicable
- Manage camera or photo-library permissions through your device settings
- Request restriction on certain types of data processing where allowed by law
- Submit privacy-related complaints or contact the relevant data-protection authority
8. Children's Privacy
MASNAYA is not designed for children under the age of 13. We do not knowingly collect or store personal information from children. If we become aware that we have collected information from a child without proper consent, we will take steps to remove it.
9. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated revision date.
10. Contact Us
If you have any questions regarding this Privacy Policy, you can contact us through the support options available in the MASNAYA mobile app.