Maswa Tourism

This Privacy Policy explains how Maswa ("we", "us") collects, uses, and protects your information when you use the Maswa mobile apps and website. Maswa is a platform that connects travellers (guests) with accommodation owners (hosts), primarily in the Kurdistan Region of Iraq.

Important: Maswa does not currently process any payments in the app. During this period, payment for a reservation is arranged directly between the guest and the host. We do not collect or store card numbers or other payment credentials.

Information we collect

Account and identity data: your email address (used as your login, together with a password or an email one-time code) and your first and last name.

Profile data you choose to provide: a phone number (optional and unverified), national ID number, sex, date of birth, landline number, a short bio, and a profile photo.

Host data: if you list a property, information about that property and its location. Bank details (bank name, account number, IBAN) are only collected when payout features are active; while the platform is in its current free period these are not collected.

Booking and communication data: reservations you make or receive, and messages exchanged between guests and hosts through in-app chat.

Location data: approximate or precise device location, used to show nearby properties and to place properties and search results on a map. You can control this through your device settings.

Photos: images you choose to upload from your photo library (e.g. property or profile photos). We do not access your camera or microphone.

Device and technical data: device push token (for notifications), app version, language preference, and basic log data needed to operate and secure the service.

How we use your information

To create and manage your account and authenticate you via your password or an email one-time code (including account verification and password reset).

To let guests search, view and reserve properties, and to let hosts manage listings and reservations.

To enable guest–host messaging and to send you service and reservation notifications (push notifications).

To show location-based search results and maps.

To provide customer support, prevent fraud and abuse, and comply with legal obligations.

Payments

Maswa does not process in-app payments at this time and does not collect payment card data. Guests and hosts arrange and settle payment directly between themselves. Maswa is not a party to, and is not responsible for, any payment made outside the platform.

Third-party services

Maps: we use MapLibre and Google Maps to display maps and location. Their use of data is governed by their own terms and privacy policies.

Push notifications: we use Apple Push Notification service (APNs) on iOS and Firebase Cloud Messaging (FCM) on Android and web to deliver notifications. This involves a device push token.

We do not use advertising networks and we do not use third-party analytics or tracking SDKs. We do not sell your personal data.

Data sharing

Between users: when you make or receive a reservation, relevant details (such as your name and reservation details) are shared with the counterparty host or guest so the stay can be arranged.

Service providers: infrastructure, hosting and the map/notification providers listed above, acting on our behalf.

Legal: where required by law or to protect the rights, safety and security of users and the platform.

Data retention

We keep personal data for as long as your account is active or as needed to provide the service.

When you delete your account, we anonymize your personal data and deactivate the account. Certain records (such as reservations, messages and financial/ledger entries already shared with a counterparty) are retained in anonymized form for legal, accounting and dispute-resolution purposes.

Your rights and choices

You can view and edit most profile data in the app.

You can delete your account at any time from Profile → Delete account in the app, or by requesting deletion at https://maswatourism.com/en/delete-account. Deletion anonymizes your personal data as described above.

You can control location and notification permissions through your device settings.

For any privacy request or question, contact us at privacy@maswatourism.com.

Children's privacy

The service is intended for adults and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us so we can remove it.

Changes and contact

We may update this policy from time to time; the "last updated" date above reflects the latest version.

Data controller: Maswa (https://maswatourism.com). Contact: privacy@maswatourism.com.