Privacy policy

Tawzi3 mobile app and admin.tawzi3.app back-office — effective 6 November 2026.

The French version (Politique de confidentialité) is the reference text; this English version has the same content.

In short

Tawzi3 is a professional tool: your account is created by the distribution company you work for or with.
We process the data needed for distribution work: your account, the business data entered by the company, and your location only during a delivery round or a day of store visits, while the app is open.
No ads, no advertising trackers or audience analytics, no sale of data.
Location records are deleted automatically after 30 days.
To exercise your rights or delete your account: contact@hirodots.com or the Delete an account page.

1. Who is responsible?

Tawzi3 is a service published and operated by Hirodots LLC, Doha, Qatar (“Hirodots”, “we”). Contact: contact@hirodots.com.

The client distribution company (“the company”) decides which data it enters in Tawzi3 (its customers, orders, staff…) and why. It is the controller of its business data and of its users' accounts.
Hirodots hosts and runs the service on the company's behalf and on its instructions (as a processor). Hirodots is the controller for what it does itself: security of the service, support and this website.

2. Data processed

2.1 Your account

First and last name, phone number (sign-in identifier of the mobile app), e-mail address (sign-in identifier of the back-office, optional for a mobile account).
Password: never stored in plain text, only as a hash (PBKDF2-SHA256 with a per-account salt).
Company or companies you belong to, role (director, accountant, supervisor, warehouse keeper, delivery driver, pre-sales rep…), job title, assigned sector, language, last sign-in date.

2.2 Business data entered by the company

Depending on your role, you view or enter:

customers and points of sale: business name, code, address, municipality, province, phone, trade register and tax numbers, GPS coordinates of the store, credit limit, payment terms;
orders, route sheets and visits, shelf checks (in stock, out of stock);
delivery rounds, truck loading, truck and warehouse stock, returns;
delivery notes, invoices, credit notes, payments (method, amount, cheque or transfer reference and bank), receivables, reminders, cash hand-overs, expenses and accounting entries;
internal notifications (for example “round planned”, “credit limit exceeded”).

These documents carry the name of the person who created, delivered or collected them.

2.3 Device location

Only with your “while using the app” permission. Tawzi3 never asks for background location access.
Only while a delivery round is in progress (delivery driver) or a day of store visits still has visits left (pre-sales rep), and while the app is open in the foreground: about one position every 60 seconds, plus one when a round or visit starts, on arrival at a customer, when a delivery note is signed and when the round ends. As soon as the app goes to the background, sending stops.
Content: latitude, longitude, accuracy, and depending on the device speed and heading; the time of the reading; the activity (on round, on visit) and the related round or route sheet.
Use: computing the route and arrival time, time-stamping deliveries and visits, and letting your company's management follow the progress of the day (“Field tracking” screen).
Retention: 30 days, then automatic deletion every night.
You can refuse or withdraw the permission at any time in your phone settings; the app remains usable, without routing from your position.

2.4 Customer signatures

On delivery, the customer signs on the screen. The signature image (a small PNG) and the signatory's name are stored with the delivery note as proof of delivery, and kept with it.

2.5 Shelf photos

During a shelf check, the pre-sales rep may take a photo of the shelf (camera) or pick one from the photo library. For now, these photos stay on the device: our servers only receive a technical reference, not the image. If photo upload is introduced, this policy will be updated first.

2.6 Technical data

Session: a random sign-in token. The server only keeps a hash of it (SHA-256), with its expiry date (30 days) and the browser or app identification (“user agent”).
Failed sign-ins: the identifier entered and the IP address, kept for 1 day at most, to block repeated password guessing.
Idempotency keys: a random identifier attached to each operation (delivery, payment, order…) and the server's response, kept for 24 hours, so that an operation re-sent after a network drop is never recorded twice.
Hosting logs: our host Cloudflare processes the IP address and request metadata to route traffic and protect the service.

2.7 Biometrics

Unlocking with Face ID or fingerprint is optional and entirely handled by your phone's operating system. Tawzi3 never receives or stores biometric data; the app only remembers your choice (“Face ID”, “fingerprint” or none).

3. What stays on your device

The session token, in the iOS Keychain or the Android Keystore;
your preferences (unlock mode);
shelf photos, and positions not yet sent because of a lack of network.

Deleting the app erases this data; on iOS, the token kept in the Keychain is erased on the first launch of a new installation.

4. What we do not do

No advertising, in the app or elsewhere.
No audience analytics, ad measurement or cross-app tracking SDK; no advertising identifier.
No sale, rental or exchange of personal data.
No profiling for marketing; no automated decision producing legal effects on you.
No background location tracking and no tracking outside delivery rounds and days of visits.

5. Purposes and legal bases

Purpose	Data	Legal basis
Providing the service: sign-in, orders, rounds, deliveries, invoicing, payments, accounting	Account, business data, signatures	Performance of the contract between the company and Hirodots; the company's legitimate interest in organising its business
Routing, time-stamping deliveries and visits, day tracking by management	Location (during the round or day of visits)	Your location permission, which you can withdraw at any time; the company's legitimate interest
Security: account protection, sign-in rate limiting, duplicate prevention	Sessions, failed sign-ins, idempotency keys, logs	Legitimate interest (security of the service)
Keeping commercial and accounting records	Delivery notes, invoices, credit notes, payments, entries	The company's legal obligation
Support and answering your requests	E-mail exchanges	Legitimate interest; performance of the contract

6. Recipients and processors

Within your company: other users, according to their role. For example, the warehouse keeper sees no customer amounts, a delivery driver only sees the customers of their rounds, a pre-sales rep those of their sector.
Cloudflare, Inc. (United States): hosting of the API and back-office (Cloudflare Workers), database (Cloudflare D1), network and attack protection.
Google LLC (United States): maps (Google Maps SDK) are displayed in the app, and routes are computed by Google's Routes API. These calls go directly from your phone: Google receives your starting position and the coordinates of the stores on the route, as well as the technical data of any internet request. See Google's privacy policy. Our servers never contact Google.
Apple and Google, as distributors of the app (App Store, Google Play), under their own policies.
Authorities, only when required by law.

7. Transfers outside Algeria

Hirodots is established in Qatar and its processors (Cloudflare, Google) may process data in other countries. Algerian Law No. 18-07 of 10 June 2018 on the protection of natural persons in the processing of personal data governs such transfers. The client company, as controller, completes the formalities that apply to it with the National Authority for the Protection of Personal Data (ANPDP); Hirodots provides it with the necessary information on request. For users located in other countries, the equivalent local rules apply.

8. Retention

Data	Period
Device positions	30 days, then automatic deletion
Failed sign-ins (identifier, IP address)	1 day
Idempotency keys and related responses	24 hours
Sessions	Until expiry (30 days) or sign-out, then deleted within 30 days
User account	As long as the account exists; deleted on request (section 11)
Business data (customers, orders, rounds…)	As long as the company uses Tawzi3, then returned or deleted under its contract
Commercial and accounting records (signed delivery notes, invoices, credit notes, payments, entries)	The period imposed on the company by applicable commercial and tax rules (in Algeria, generally ten years)
Support exchanges	As long as needed to handle the request and keep a useful record of it

9. Security

All communications are encrypted (HTTPS).
Hashed passwords (PBKDF2-SHA256, 100,000 iterations, per-account salt); random session tokens, stored server-side as a hash, revocable.
Changing your password signs out your other devices; a director can disable an access immediately.
Access separated by company and by role, checked on every request.
Sign-in attempts limited (5 failures per identifier or 20 per IP address within 15 minutes).

No system is infallible; in the event of a data breach affecting you, we inform the company concerned without delay so that it can take the measures required by law.

10. Your rights

Depending on the applicable law (in particular Algerian Law No. 18-07 and, where it applies to you, the EU GDPR), you may:

be informed about and access your data;
have it corrected (your name and e-mail can also be changed in the app: Mon compte › Modifier le profil);
request its erasure or restriction;
object to a processing on legitimate grounds;
receive your data in a common format (portability), where this right applies;
withdraw your location, camera or photo library permission in your phone settings.

How: contact your company (the controller) or write to contact@hirodots.com from your account's e-mail address, or quoting your account's phone number. We may ask you to confirm your identity, and we forward to your company the requests that fall under its responsibility. We reply within one month.

You may also lodge a complaint with the data protection authority of your country — in Algeria, the ANPDP.

11. Account deletion

You can request deletion of your account and the data linked to it at any time: the steps, what is deleted and what must be kept are described on the Delete an account page.

12. Minors

Tawzi3 is intended for professional use only and is not directed at people under 16. We do not knowingly collect data about children; if this happened, write to us and we will delete it.

13. This website

The tawzi3.app website uses no cookies, no audience measurement and no third-party content. It is served by Cloudflare, which processes visitors' IP addresses to deliver the pages and protect the site.

14. Changes and contact

We will update this policy if the service changes (for example if shelf photos start being uploaded). The date at the top of the page shows the version in force; a significant change will be announced in the app or by your company.

Hirodots LLC — Doha, Qatar
E-mail: contact@hirodots.com
Version of 6 November 2026.