Privacy Policy
Version 2.1 · Last updated: 7 October 2026
This policy explains what personal data we process through our internal analytics platform, the Al Jameel Sales app and our messaging assistant, why we process it, who can see it, how long we keep it, and how to contact us about it.
01Who we are
The data described here is controlled by AL JAMEEL FOR TRADE AND MANUFACTURING FOOD (L.L.C.), trading as Al Jameel International Egypt.
- Registered name
- AL JAMEEL FOR TRADE AND MANUFACTURING FOOD (L.L.C.)
- Headquarters
- Apt 11, Third Floor, Bldg 5, Al Gawhara Buildings, Block 18030, Nagib Mahfouz St., Ninth District, Obour City, Egypt
- egypt@aljameelfood.com
- Telephone
- +20 10 7000 0553
02Scope
This policy covers the company's internal analytics platform, the Al Jameel Sales phone app and our business messaging assistant. It applies to our employees and to our customers' business contacts.
These are internal business tools, not consumer products. There is no public sign-up: accounts are created by the company for its own employees.
03Data we collect
| Category | Examples | Source |
|---|---|---|
| Account | Name, work e-mail, role, mobile number | Company / employee |
| Sign-in and security | Sign-in activity, registered devices, record of administrative actions | Automatic |
| Live location | Coordinates, accuracy, speed and time — during working hours only | Representative's phone |
| Check-in points | The representative's position when a customer visit is recorded | Representative's phone |
| Shop locations | A customer's business location, saved at the first visit (not part of the representative's own location history) | Representative's phone |
| Photos | Photos for a visit, a return or a payment claim | Representative's phone |
| Business records | Orders, visits, promises, notes, invoices, customer details | Employee / company files |
| Device information | Device identifier, model, operating system, app version, notification token | Representative's phone |
| Usage and crashes | App and screen opens; crash reports (what went wrong, on which screen, in which app version), kept with the account they came from for 1 year so a fault can be traced and fixed, with e-mail addresses and phone numbers removed from the error text | Automatic |
| Web errors | The error message, where it happened in the page code, and the page path with numbers and identifiers removed; no name, no account, no IP address, no cookies | Automatic |
| Consent record | Acceptance of the location terms, their text and time | Employee |
| AI assistant and messages | Questions and answers; WhatsApp messages and voice notes from registered employees, and the daily summary we send them when it is switched on | Employee |
04Why we use it
| Purpose | Basis |
|---|---|
| Running sales, orders, returns, collections and reporting | Performance of the employment relationship and of customer contracts |
| Field supervision, representatives' safety and confirming the visits assigned to them (location) | Employer's legitimate interest, with the representative's recorded consent |
| Verifying returns and payment claims with photos | Legitimate interest |
| Security and audit: access control and a record of administrative actions | Legal obligation and legitimate interest |
| Notifications, keeping the apps working, fixing faults and support | Legitimate interest and performance of the relationship |
We do not sell personal data, we do not share it for advertising, and we do not use it to train AI models.
05Live location in detail
Live location is the most sensitive part of the app, so it is set out in full:
- When: location is recorded only during the representative's own scheduled working hours, never outside them — apart from the single point the representative records when checking in at a customer.
- How often: about every 2 minutes or every 100 metres, whichever comes first; readings taken offline are sent when the connection returns.
- Why: for representatives' safety and to confirm the visits assigned to them. We use it for nothing else.
- Who sees it: the representative's approver (direct manager), the company's CCO (chief commercial officer), the company's CEO and the platform administrator. No one else.
- How long: the location trail is kept for 90 days and then deleted automatically.
- Requirement: agreeing to the location terms and keeping location on are required to use the app during working hours, because the purpose is safety and verifying visits. The agreement is recorded with its text and time.
- Stopping it: you can switch location off at any time in the phone's own settings and recording stops at once; the app then cannot be used during working hours until it is back on, and your approver sees that location is off.
- Company switch-off: the platform administrator can switch location sharing off for everyone, or pause it for one representative; recording stops while it is off and location is not required during that time.
- Withdrawing: you can withdraw your agreement at any time from the working-hours screen in the app. The withdrawal is recorded alongside the earlier agreement, and the app cannot be used during working hours while the agreement is withdrawn.
- We do not track calls, messages or a representative's own photos.
06How long we keep it
| Data | Kept for |
|---|---|
| Live location trail | 90 days |
| Check-in points | 1 year |
| Place names on the team map (when enabled) | 30 days |
| Photos | 2 years |
| App usage events | 1 year |
| Crash reports | 1 year |
| Notifications | 30 days |
| WhatsApp daily-summary delivery record | 30 days |
| Web errors | 30 days from the last occurrence |
| Business records, shop locations and visit records | As long as accounting and tax law require |
| Account and security records | While the account exists, and afterwards where needed for security review |
| Record of agreement to the location terms | Kept permanently as evidence of consent |
07Who can see it
Access is limited by role. A representative sees their own data; an approver sees their team's; authorised management sees what its role needs; finance staff see the payment-claim photos they verify. We give no one else access.
08Service providers
We use service providers who process data on our behalf and on our instructions only, solely to deliver their service to us, and who are bound to protect it to the same standard as this policy.
| Role | Provider | What it processes | Location |
|---|---|---|---|
| Hosting, database and storage | Supabase | User accounts, business records, location and photos | European Union |
| Web hosting | Vercel | Serving the website and web application | European Union |
| AI analysis | Anthropic | Assistant questions and the data needed to answer them | United States |
| Business messaging | Meta (WhatsApp Business) | Registered employees' messages to the assistant and its replies, and the daily summary sent to them | United States / European Union |
| Voice notes | ElevenLabs | Speech-to-text and text-to-speech for the assistant | United States |
| E-mail delivery | Resend | E-mail address and the content of account e-mails | United States |
| Push notifications | Expo · Google FCM · Apple APNs | Notification token and the notification text | United States |
| Maps (when enabled) | Google Maps Platform | Displaying maps and place names | United States / European Union |
| Crash reporting (used only when enabled) | Sentry | Crash reports from the phone app | United States / European Union |
09Transfers outside Egypt
Some of these providers operate outside Egypt, in the European Union and the United States. We protect the data with contractual commitments to equivalent protection, and send a provider only what its service needs.
10Your rights
You may ask to see, correct or delete your personal data, object to its processing, withdraw your consent, and complain to Egypt's Personal Data Protection Centre.
To use a right, write to egypt@aljameelfood.com and we will answer within 14 days. For deletion, see the next section.
11Account deletion
You can ask for your account to be deleted in the app — More, Settings, Privacy, «Request account deletion» — or on the dedicated web page. What is deleted and what is kept is set out at the account deletion page.
12Children
The app and platform are for adult employees only. We do not knowingly collect data from anyone under 18.
13Security
Data is encrypted in transit, access is restricted by role and protected by sign-in, and administrative actions are logged. If a breach affects your data we will notify the authority and the people affected as the law requires.
14Changes to this policy
We change this policy when what we collect or how we use it changes, and update the version and date above. If the location terms change, we ask for your agreement again in the app.
Version history
- 2.1 · 7 October 2026 — Two corrections: crash reports are kept with the account they came from for 1 year, with e-mail addresses and phone numbers removed from the error text; and «battery level» was removed from the location data, because it is never sent.
- 2.0 · 5 October 2026 — Full rewrite: Arabic and English, live location during working hours, the processors table, retention, your rights and account deletion.
- 1.1 · 1 October 2026 — Plainer wording and stated retention periods.
- 1.0 · 25 September 2026 — First published version.
15Contact
Questions about this policy or about data we hold about you: egypt@aljameelfood.com
