Privacy Policy
Last updated: October 28, 2026
1. Introduction
This Privacy Policy explains what personal data ESHI ("we," "us") collects when you use our website and our mobile app for Android and iPhone (together, the "Service"), why we collect it, and the choices you have. We process personal data in accordance with Jordan's Personal Data Protection Law (Law No. 24 of 2023). This Policy applies to members, retailer staff, and administrators who use the Service.
2. Information We Collect
Account information: your name, email address, and (if provided) phone number, along with your chosen password (which we never store in plain text), your locale/theme preference, and the date and time you agreed to our Terms of Service and this Policy. For shop staff and administrators we also keep your job title and the shop you work for. Usage and redemption data: which offers and retailers you favorite, when you generate and redeem a QR code (or the short code shown under it; we keep only a scrambled, one-way form of these codes), which retailer branch it was used at, and — only when the retailer chooses to record it — the transaction amount and discount applied, used to calculate your total savings. Device and security information: your IP address and browser information (used for rate-limiting and fraud prevention), and, if you use "remember this device," a device-recognition cookie for staff/admin accounts. Shop staff and administrators: the actions you take in the shop and admin pages (codes you scan, redemptions you confirm, offers you create or edit, staff you invite or remove, profile changes and exports) are recorded in an audit log for security and to resolve disputes. Pictures you upload (a shop logo, cover or offer picture) are stored and shown to members. The phone app: the app keeps your sign-in in your phone's secure storage and your choices (language, appearance, fingerprint or face lock) on your phone. If something goes wrong, the app can send us a crash report with technical details: the phone model, system version, app version and the error. We remove names, email addresses, login details and QR codes from these reports before they leave your phone, and they contain no screenshots. We do not collect or store payment card details — purchases happen directly between you and the retailer, outside the Service.
3. How We Use Your Information
We use your information to: operate the Service (create your account, generate and validate redemption codes, show your favorites and savings history); secure your account (password verification, email verification codes for admin/retailer accounts, detecting unusual activity); communicate with you about your account (confirmations, security codes, password resets) and, for shop staff and administrators, about offers (sent for approval, approved or sent back); and improve the Service, fix problems and understand how it's used in aggregate.
4. How We Share Your Information
With retailer partners: when you redeem an offer, the retailer branch that scans your code sees your redemption (and, if applicable, the transaction amount) so they can honor the discount and so both of you have a record of it. Retailers do not see your account password or other offers you've favorited elsewhere. With service providers: we use Supabase (database, authentication and file storage), Netlify (website hosting), Resend (sending our emails, such as confirmations, security codes, password resets and offer-approval notices), Cloudflare (bot/abuse protection on sign-in forms), and Sentry (error monitoring for the website and the app, which may receive technical details such as your IP address and browser, or your phone model and system version, when something goes wrong). When you choose a password, we also check it against the Have I Been Pwned breach list using a method that only sends the first five characters of a one-way hash of it — never your password itself. These providers process data on our behalf under their own security commitments and only for the purposes we direct. The app stores (Apple's App Store and Google Play) distribute the app and may collect their own data when you download or use it, under their own policies, which we do not control. We do not sell your personal data, and we do not share it with third parties for their own marketing purposes. We may disclose information if required by Jordanian law or a valid legal request, or to protect the rights, safety, or property of ESHI, our users, or the public.
5. Data Retention
We keep your account information for as long as your account is active. Redemption and transaction records are kept longer where needed for retailer reporting, dispute resolution, and fraud prevention, even after an account is deleted, but are disassociated from your direct identity where practical. When you delete your account, your name, email address and phone number are erased and your login is removed. Short-lived security records (such as sign-in attempt counters and one-time codes) are kept only briefly. Crash reports are kept by our error-monitoring provider for a limited period. Pictures uploaded by shops stay until the shop or ESHI removes them.
6. Your Rights and Choices
You can review and update your account information from your account page on the website, or the Account tab in the app, at any time. You can delete your account yourself, at any time, from the account page or, in the app, from Account > Delete my account — this is permanent and cannot be undone. Consistent with Jordan's Personal Data Protection Law, you may also request a copy of the personal data we hold about you, or ask us to correct it, by contacting us (see Section 11).
8. The Phone App
Permissions: the app only asks for what a feature needs, and you can change them in your phone's settings at any time. Camera: used only by shop staff, to scan members' QR codes at the till. The picture is processed on the phone and is not saved or sent anywhere. Photos: shop staff can choose a picture on their phone to upload as a logo, cover or offer picture; only the picture they choose is uploaded. Fingerprint or Face ID: an optional lock you can turn on in the app. Your phone performs the check; ESHI never receives or stores your fingerprint or face. We do not use your location, contacts or microphone, and the app contains no advertising or tracking software. The only monitoring tool in the app is the crash reporting described in Section 2.
9. Data Security
We use industry-standard measures to protect your data, including encrypted connections, hashed passwords, your sign-in kept in your phone's secure storage, database access controls, and (for admin/retailer accounts) a second verification step at login. No system is perfectly secure, but we treat security issues seriously and act promptly to address them.
10. Children's Privacy
The Service is intended for users 18 and older (see our Terms of Service) and is not directed at children. We don't knowingly collect personal data from anyone under 18.
11. International Data Transfers and Contact
Our infrastructure providers may process data outside Jordan; where that happens, we require providers to maintain appropriate security safeguards. For any question about this Policy, or to exercise your data rights, contact privacy@eshi.online.
12. Changes to This Policy
We may update this Policy from time to time. Material changes will be posted here with a new "last updated" date, and we'll try to also notify active members by email.