Privacy Policy

1. Introduction

Welcome to Qist ("we," "our," or "us"). We are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application. By using Qist, you consent to the data practices described in this policy.

2. Information We Collect

We collect information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with you ("Personal Data"). Based on the installment and e-commerce services provided by Qist, this includes:

• Personal Identity Information: Name, National ID number, Passport number, phone number, and email address.
• Account Credentials: Passwords and security codes used for authentication.
• Financial Information: Details regarding your installment plans, credit assessment, payment history, due amounts, and transaction records.
• Biometric Data: If you enable biometric authentication (Face ID/Touch ID), we rely on your device's native biometric hardware. We do not store your actual biometric fingerprint or face data on our servers; we only receive an authentication token from your device.
• Order & Delivery Information: Delivery address, order details, and location data to facilitate shipping (e.g., sharing with drivers).

3. How We Use Your Information

We use the collected data for the following purposes:

• Account Management: To register your account and verify your identity (KYC compliance) for installment eligibility.
• Order Processing: To process your purchases, manage monthly installments, and deliver products.
• Notifications: To send order updates (e.g., "Order Shipped," "Order Rejected") and payment due reminders.
• Security: To prevent fraud, money laundering, and unauthorized access.
• App Functionality: To provide features such as biometric login and language preferences.

4. Sharing of Your Information

We do not sell your personal data. We may share information with:

• Service Providers: Third-party vendors who perform services on our behalf, such as delivery drivers, payment processors, credit bureaus (SIMAH or similar, if applicable), and cloud hosting services.
• Legal Authorities: If required by law or to protect our rights and comply with judicial proceedings.

5. Data Security

We implement industry-standard security measures (including encryption) to protect your personal information. However, please note that no method of transmission over the Internet is 100% secure.

6. Your Rights

Depending on your location and local regulations, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and data ("Right to be Forgotten") via the app settings.
• Withdraw consent for specific data processing.

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date in this policy.