1. Information we process

Depending on the service and how it is used, Darik may process:

• Retailer and staff account data: name, email address, username, role, user ID, retailer ID, authentication/session information, and organization permissions.
• Business and storefront data: store name, business contact details, storefront settings, categories, products, prices for physical goods, inventory, delivery settings, and other information entered by the retailer.
• Product media and user content: product photos, supported short product videos, descriptions, colors, sizes, fitment details, and other catalog content uploaded or created by an authorized business user.
• Customer and order data: customer name, phone or other contact information, delivery address or delivery coordinates, ordered products, order status, fulfillment information, and payment-method or payment-confirmation records required to fulfill purchases of physical goods.
• Device and app data: app platform/version, an app-generated device identifier, push-notification token, and related operational identifiers used to keep sessions and order alerts working.
• Location information: on customer-facing web services, a customer may choose browser location or search for an address so Darik can determine which retailers can deliver there. The retailer iOS app does not request the retailer device's precise location for its core functions. Existing order coordinates may be displayed to authorized users and opened in a maps application for delivery.
• Payment proof and business records: where applicable outside the iOS retailer-app purchase flow, Darik may retain retailer-submitted payment references or receipt images used to verify business-service activation or account credits. Customer CliQ receipt records for physical-goods orders may also be displayed to authorized retailer users.
• Support communications: messages, store/account identifiers, attachments, and other information a user chooses to send to Darik Support.

2. How information is collected

• Directly from customers, retailers, staff, or drivers when they enter information, upload content, place or manage an order, or contact support.
• From the device when an optional app permission is granted or when the app creates operational identifiers needed for authentication or notifications.
• From Darik's servers when an authorized user signs in and retrieves store, catalog, order, staff, or delivery information already associated with the account.
• From service providers used to authenticate users, host the service, store files, deliver notifications, provide mapping/address tools, or perform an explicitly requested AI image enhancement.

3. How we use information

• Authenticate users, maintain sessions, enforce roles and permissions, and protect accounts.
• Operate retailer storefronts, catalog tools, physical-goods orders, fulfillment, pickup, and delivery workflows.
• Determine whether a customer address falls inside a retailer's configured delivery area.
• Send operational notifications such as new-order alerts when notification permission is granted.
• Provide support, investigate errors, prevent fraud or abuse, secure the service, and maintain reliability.
• Process an AI image-enhancement request only after the authorized user affirmatively chooses that feature and gives the disclosure/consent described below.
• Maintain records reasonably necessary for business operations, dispute resolution, security, fraud prevention, and legal obligations.

4. AI image processing and explicit consent

Darik offers an optional product-photo enhancement feature. The current service uses xAI's image service as the third-party AI processor. The feature is not automatic.

Before a selected product image is sent to xAI, the app identifies xAI, explains that the selected image will be transferred for image enhancement, and requires an affirmative user action for that request. Darik sends the selected product image and an image-enhancement prompt to xAI only to generate the requested enhanced product image. Users should not submit photos containing personal or sensitive information.

Darik creates a temporary square processing copy before the xAI request. The temporary processing copy is deleted after the xAI request completes. The original retailer product image and any enhanced image the retailer keeps may remain in Darik storage as part of the retailer's catalog until removed or otherwise deleted under Darik's retention practices.

5. Service providers and data sharing

Darik does not sell personal information to advertisers and does not use the retailer app for cross-app tracking or third-party targeted advertising. Darik shares information only when needed to operate the service, fulfill a user request, protect the platform, comply with law, or complete a business transaction such as a merger or acquisition subject to applicable law.

Current service-provider categories include:

• Supabase for authentication, database services, and file storage.
• Vercel for GetDarik.com and Darik server/API hosting.
• Expo and Apple Push Notification service for mobile application delivery and operational push notifications.
• Google Maps / Google Places when a user chooses mapping, address search, or navigation features.
• xAI only for an AI product-image enhancement that the user explicitly requests.
• WhatsApp when a user chooses to open Darik's WhatsApp support channel; WhatsApp then handles that communication under its own terms and privacy practices.

Darik requires third parties and service providers that receive personal data on Darik's behalf to provide the same or an equivalent level of protection for that data as described in this Policy and required by applicable law, consistent with the service they provide. Some providers may process information in countries outside Jordan.

6. Device permissions

• Camera: requested when a retailer chooses to take a product photo or record a supported silent product video.
• Photo library: requested when a retailer chooses product media from the device.
• Notifications: requested so the retailer can receive operational alerts such as new orders. Core account access does not require notification permission.
• Precise device location: not requested by the retailer iOS app for its core retailer functions.

Optional permissions can be changed later in the device's system settings.

7. Authentication and local device storage

Darik uses authenticated sessions to keep authorized business users signed in. If a user chooses “Keep me signed in,” the app may retain the username or email and session-related information on the device. The iOS app does not persist the user's password for autofill as part of Darik's own Remember Me storage.

8. Data retention and deletion

Darik retains information only for as long as reasonably necessary for the purposes described in this Policy, including operating the service, maintaining retailer/customer transaction records, protecting accounts, resolving disputes, preventing fraud, and meeting legal or accounting obligations. Different records can require different retention periods.

Retailer owner accounts for Darik Direct for Retailers are provisioned outside the iOS app. The iOS app does not provide owner or new-staff account creation. Authorized owners can remove existing organization-managed staff access from the Users area. A retailer or customer may also contact Darik Support to request access, correction, closure, or deletion of information where applicable. Darik may retain specific records when required by law or reasonably necessary for security, fraud prevention, financial records, or dispute resolution.

9. Security

Darik uses administrative and technical safeguards designed to protect account, business, customer, and order information, including authenticated access controls and role-based permissions. No internet service can guarantee absolute security. Users should protect their devices and account credentials and should promptly report suspected unauthorized access.

10. Your choices and privacy requests

• Choose whether to grant optional camera, photo-library, and notification permissions.
• Do not use the AI enhancement feature if you do not want the selected image sent to xAI.
• Ask Darik Support to review or correct account information where applicable.
• Request account/data deletion or closure where applicable, subject to records Darik must or is permitted to retain.

11. Children

Darik Direct for Retailers is a business application intended for authorized retailer personnel and delivery users, not for children.

12. Changes to this Policy

Darik may update this Policy when the service, providers, legal requirements, or data practices change. The current effective date appears at the top of this page. Material changes will be reflected in the published Policy before or when they take effect as appropriate.

13. Contact Darik

Privacy, access, correction, and deletion requests can be sent to Darik Support on WhatsApp at +962 79 300 9420. Include the store name or account identifier needed to locate the correct account, but do not send passwords or unnecessary sensitive information.