Privacy Policy

The Service is operated by FSecurity, Arin Berd street 89/11, Yerevan, Armenia (“FSecurity”, “we”, “us”). FSecurity decides how and why your personal data is processed and is responsible for it.

For any question or request about your personal data, write to fsecurityapp@gmail.com.

We collect only the data we need to provide the Service:

• Account data: your mobile phone number, which you use to sign in. You sign in with a one-time code that we send to your phone by SMS. You can add your first and last name in your profile. An account created with a phone number has no email address; if you add one in the app, we keep it as well.
• Order data: the service you book, the pickup address and, if you enter them, the destination and stops, with their map coordinates; the date and time; the notes you add; the price; the status of the order and its history; the reason you give if you cancel; and the rating and comment you leave after the service, if you choose to.
• Payment data: card payments are processed by Ameriabank. You enter your card details on the bank's secure payment page, and we never receive your full card number or security code. From the bank we receive and keep the masked card number, the cardholder name, the amount, the bank's transaction references and the status of the payment. If you save a card, we keep the bank's reference to it so that you can pay with it later. When we issue an electronic fiscal receipt (e-HDM) for a card payment in Armenian drams or for a refund, we send it to your phone number by SMS and, if your account has an email address, by email.
• Location: the app asks for permission to use your location only while you are using it, to suggest your current position as the pickup address when you create an order. You can refuse and enter the address yourself. We do not track your location in the background. We store coordinates only for the addresses included in the orders you place.
• Device data: if you allow notifications, we store your device's notification token, the device type (iOS or Android) and model, and the app language, so that we can send you updates about your orders in your language.
• Security data: when you request an SMS code, make a payment or delete your account, we record the time, the IP address and the identifier of the app or browser (user agent) used for the request, to prevent abuse and protect your account.
• Your messages: if you contact us by email or phone, we keep your message and our reply in order to deal with your request.

We do not collect identity documents, dates of birth, photos, contacts or biometric data, and we do not use advertising or analytics trackers.

We use your data to:

• create your account and sign you in with SMS codes;
• accept, arrange and carry out your orders, including giving the assigned driver the details needed for the trip;
• take payments, release card holds and make refunds;
• send you notifications about your orders and, if your account has an email address, emails about your orders;
• answer your requests and handle cancellations, complaints and feedback;
• prevent fraud and abuse and keep the Service secure;
• meet our legal obligations, such as accounting and tax requirements.

We process your data to perform our contract with you (the Terms of Service), to comply with the law, and in our legitimate interest in keeping the Service secure. Access to your location and notifications is based on your permission, which you can withdraw at any time in your device settings.

We do not sell your personal data, we do not use it for advertising and we do not send you marketing messages.

We share personal data only with those who need it to run the Service:

• Our team and drivers: our operations staff see your orders in order to arrange them, and the driver assigned to your order receives what is needed to carry it out: your phone number and the pickup address and time. Your name is shared only if you have added it to your profile.
• Supabase, which provides our database, sign-in and server functions. Your data is stored on Supabase servers in the European Union (Frankfurt, Germany).
• Vercel, which hosts our website.
• Twilio, which sends the SMS sign-in codes and therefore receives your phone number.
• Ameriabank, which processes card payments, holds and refunds.
• PayX, which issues our electronic fiscal receipts (e-HDM) and registers them in the state e-HDM system. When we issue a receipt for a card payment or a refund, PayX receives the details of the payment and, to deliver the receipt to you, your phone number and email address.
• Expo, Apple and Google, which deliver notifications to your device.
• Yandex, whose maps and address search are used in the app and on the website, and LocationIQ, which provides address search when the app is in Armenian. They receive the part of the map you view and the addresses you search for, together with technical data such as your IP address. When you use your current location, your device's own location service (Apple or Google) converts it into an address.
• Resend, which sends our emails, if your account has an email address.
• Telegram: when a new order is paid, when you cancel an order or ask to cancel it, or when the bank declines your card, our operations team receives an automatic message in a private Telegram group. It contains your phone number (and your name, if you have added it to your profile), the service, the pickup address and time, the amount and, where relevant, the cancellation reason you gave or the bank's response. Card numbers are never included.

We may also disclose data when the law requires it, for example at the request of a court or another competent authority, or to protect the rights and safety of our users, our staff and FSecurity.

Some of these providers process data outside Armenia, for example in the European Union, the United States or Russia. We use them only to provide the Service.

• Account and device data are kept while your account exists.
• Orders, payment records, cancellation requests and feedback are kept as long as we need them for accounting, tax and dispute purposes. After your account is deleted, they are kept without the link to you, as described below.
• Electronic fiscal receipts are kept for as long as Armenian tax law requires. They are registered in the state e-HDM system through PayX and are also kept there, including after your account is deleted.
• Records of SMS code requests (phone number, time, IP address and user agent) are kept as security records to protect accounts and prevent abuse.
• Automatic alerts to our operations team are deleted from our systems 30 days after they are created. Messages already delivered to the Telegram group cannot be recalled and remain there, including after your account is deleted.

You can delete your account in the app, under Account → Delete My Account and Data. To protect you, we send an SMS code to confirm the request. You cannot delete your account while you have an active order, a pending cancellation request or a payment in progress; please wait until they are finished.

When you confirm the deletion:

• you are signed out on all devices and can no longer sign in;
• your notification tokens and saved cards are deleted at once, and we ask Ameriabank to deactivate your saved cards;
• your account is kept in a deleted state for 14 days. If you change your mind during this period, write to fsecurityapp@gmail.com and we can restore it;
• when the 14 days are over, we permanently delete your profile (name, phone number and email address), your in-app notifications and your sign-in account. Your orders, payment records, fiscal receipts, cancellation requests and feedback are kept for accounting and legal purposes but are no longer linked to you, and any contact names and phone numbers entered for order addresses are erased.

We keep a record of the deletion request (its date, the reason if you gave one, the IP address and user agent) as proof that we carried it out. If you cannot use the app, write to fsecurityapp@gmail.com and we will help you delete your account after confirming that it belongs to you.

How to delete your account, with or without the app

Under the laws of the Republic of Armenia, you have the right to:

• find out whether we process your personal data and receive a copy of it;
• correct inaccurate data (you can change your name in the app at any time);
• ask us to delete your data or to stop or restrict processing it, unless the law requires us to keep it;
• withdraw a permission you have given, such as access to your location or notifications;
• lodge a complaint with the Personal Data Protection Agency of the Republic of Armenia.

To exercise these rights, write to fsecurityapp@gmail.com. We may ask you to confirm that the request comes from the owner of the account.

Data is transmitted over encrypted connections. Access rules in our database allow each user to see only their own data, and only staff who need it have access to orders. Card details are handled by the bank and never reach our servers. No system is completely secure, but we work to protect your data, and if a data breach affects you, we will inform you and the competent authority as the law requires.

Our website does not use advertising or analytics cookies. It stores only what it needs to work: your sign-in session and your preferences, such as the language and colour theme. The app stores your sign-in session and settings on your device.

The Service is intended for people aged 18 and over. We do not knowingly collect personal data of children. If you believe that a child has given us personal data, contact us and we will delete it.

We may update this policy when the Service or the law changes. The date at the top of the page shows when it was last updated. We will announce significant changes in the app or on the website before they take effect.

FSecurity, Arin Berd street 89/11, Yerevan, Armenia

Email: fsecurityapp@gmail.com