Privacy Policy

Last updated: 5 September 2026

This policy explains how Saif Abbas (“e7jz”, “we”, “us”), based in Amman, Jordan, handles personal information when you use the e7jz reservation service.

Information we collect

• Account data: name, email address, Jordanian mobile number, internal account ID, and a securely hashed password. New diner accounts must confirm their email before first sign-in; the mobile number is not verified.
• Reservation data: venue, date, time, party size, notes, waitlist entries, cancellations, attendance, and venue reports.
• Optional coarse location: after you enable nearby offers, location is rounded before transmission and only the latest coarse point is stored. No location history is kept.
• Push token: a device push identifier linked to your account for service notifications and opted-in nearby offers.
• Venue content: business details and photos submitted by venue managers.
• Merchant purchase history: subscription status, transaction amount and currency, provider IDs, card brand, and last four digits. We never receive the full card number or security code.
• Optional diagnostics: Sentry crash and performance data, without an e7jz user identity, when crash reporting is enabled.

We do not collect precise location, contacts, full card details, or advertising identifiers.

How we use information

We use data to authenticate accounts, operate reservations and waitlists, calculate reliability and venue-compliance scores, deliver service messages, publish venue listings, administer venue subscriptions, prevent abuse, and maintain app reliability. With separate consent, we use the latest coarse location to send nearby venue offers. You can withdraw that consent at any time in Profile.

We do not sell or rent personal data and do not track people across apps or websites. Nearby offers are first-party e7jz marketing, not third-party ad-network tracking.

Who receives data

Venues you book can see the name, phone number, booking details, and reliability score needed to manage that booking. Service providers include Supabase/AWS for backend and storage, Firebase and Apple for push delivery, Resend for transactional email, Dodo Payments for merchant billing, and Sentry for optional diagnostics. We may disclose information when Jordanian law or a valid legal order requires it.

Storage and retention

Core service data is hosted through Supabase on AWS in Frankfurt, Germany (eu-central-1). Other providers may process limited data in other locations under their terms. Account and reservation history is retained while needed to provide the service. The coarse-location row is overwritten and deleted when nearby offers are disabled. Push tokens are removed on sign-out, deletion, or invalidation. Merchant billing records may be retained where accounting, tax, fraud-prevention, or legal duties require it.

Your choices and account deletion

You can disable nearby offers in Profile. You can permanently delete a diner account in Profile → Delete account. This removes the account and associated reservations, waitlist entries, reports, location row, push tokens, linked partnership applications and their notification snapshots, except data that must be retained by law. You may also request access, correction, or deletion at support@ehjezz.app.

Staff members and business owners can initiate deletion inside the app at Profile → Delete account → Request account deletion. Staff awaiting activation can also request deletion from the account-setup screen. We process these requests within 7 calendar days. Your receipt shows the expected completion date, status, and any action needed from you. We review business ownership, upcoming bookings, and subscription obligations before completion; requesting deletion does not automatically cancel a subscription. Completion removes work-account access, personal roster contact details, linked partner applications, and their notification snapshots. Records required for business accounting, security audits, or legal obligations remain limited to those purposes. We send completion confirmation to the account's real registered email address when one is available.

Children and security

e7jz is not directed to children under 16. We use TLS, hashed passwords, secure device storage, role-based access controls, and database policies. No system can guarantee absolute security.