Privacy Policy

Application: Sayran (iOS com.sayran.sayranapp / Android com.sayran.app)

Last updated: 21 June 2026

This Privacy Policy explains how Sayran ("we", "us", "our"), the operator of the Sayran mobile application (the "App"), collects, uses, shares, and protects your personal information when you use the App to browse properties, make and manage bookings, list a property as a host, and pay for reservations.

By using the App you agree to this Policy. If you do not agree, please do not use the App.

Payments & card data. We use Rasedi as our payment processor for villa and property rentals. Card and payment-instrument details are entered directly on Rasedi's secure checkout page and are handled by Rasedi. The App never collects, sees, or stores your full card number, CVV, or other card credentials. See Payments below.

1. Who we are

The App is operated by Sayran, located in Kurdistan Region, Iraq. For any privacy question or request, contact us at support@sayran.com.

2. Information we collect

2.1 Information you provide

Phone number — required to create an account. We verify it with a one-time passcode (OTP).
Profile details — optional name, email address, gender, and preferred language.
Date of birth — optional. This is stored only on your device and is not transmitted to our servers.
Profile photo (avatar) — optional image you upload.
Booking information — check-in/check-out dates, number of guests, optional meal selections, and related reservation details.
Reviews and ratings — optional ratings and written reviews you submit about a stay.
Host listing information — if you list a property: title, description, address, property type, capacity, facilities, pricing, rules, payout method and payout phone number, and photos/videos of the property.
Communications — information you provide when you contact support.

2.2 Information collected automatically

Device & app data — platform (iOS/Android) and app version, sent to identify your session and device.
Push notification token — a device token (via Firebase Cloud Messaging) used to send you booking and account notifications.
Approximate/precise location — only when a host chooses to set a property's location on the map while creating a listing. Guests can browse the App without sharing location.
Authentication tokens — access and refresh tokens stored securely on your device to keep you signed in.

2.3 Photos, camera & media

With your permission, the App accesses your camera and photo library so you can upload a profile picture or property photos and videos. Media is uploaded to our cloud storage provider. The App requests these permissions only when you use a feature that needs them.

2.4 Payment information

When you pay for a booking, we store the booking amount, payment status, currency, and the transaction reference returned by Rasedi. We do not store your card number, expiry, or CVV — these are handled by Rasedi. See Section 5.

3. How we use your information

Purpose	Data used
Create and secure your account, sign you in	Phone number, OTP, auth tokens, device/platform
Show and manage bookings	Booking details, profile, payment status
Process payments for rentals	Booking amount/currency, Rasedi transaction reference
Display properties on a map and let hosts set a location	Location (host listing), property address
Send booking, account, and service notifications	Push token, language preference
Let you upload a profile picture or list a property	Photos/videos, listing details
Show the App in your language	Preferred language
Reviews and ratings	Ratings, review text
Prevent fraud, abuse, and meet legal obligations	Account, booking, and payment records

We do not use the App for advertising, and we do not use third-party analytics, ad networks, or behavioral tracking SDKs. We do not sell your personal information.

4. Device permissions

Permission	Why we ask
Location	So hosts can set a property's location on the map when creating a listing.
Camera	To take photos/videos for your profile or a property listing.
Photo library	To upload existing photos/videos for your profile or a listing.
Microphone	Used only if you record a video with sound for a listing.
Notifications	To send booking and account updates.

You can change or revoke these permissions at any time in your device settings.

5. Payments (Rasedi)

Rental payments are processed by Rasedi, a third-party payment provider. When you pay, the App opens Rasedi's secure checkout page where you enter your payment details directly. Your card and payment-instrument data are collected and processed by Rasedi under Rasedi's own privacy policy and security controls — not by us.

After payment, Rasedi returns a result and a transaction reference to our system so we can confirm your booking. We retain only the booking amount, currency, payment status, and that reference.

Please review Rasedi's privacy policy: https://rasedi.com/privacy-policy.

We share personal information only as needed to run the service:

Rasedi — to process rental payments.
Hosts and guests — booking-related details are shared between the relevant host and guest to complete a reservation (e.g., booking dates, guest count, and necessary contact/coordination details).
Google (Firebase Cloud Messaging) — to deliver push notifications. Apple Push Notification service is used on iOS for delivery.
Cloud storage provider — to store and serve uploaded photos and videos.
Map providers — Apple Maps (iOS) and Google Maps (Android) to display property locations.
Legal and safety — when required by law, regulation, legal process, or to protect rights, safety, and prevent fraud or abuse.

We do not sell or rent your personal information to third parties.

7. Data storage & security

Authentication tokens are stored using your device's secure storage (iOS Keychain / Android Keystore).
Data in transit is protected with TLS encryption.
Card data is handled by Rasedi, which is responsible for its own PCI-related security.

No method of transmission or storage is 100% secure, but we take reasonable measures to protect your information.

8. Data retention

We keep your personal information for as long as your account is active or as needed to provide the service, comply with legal, tax, and accounting obligations, resolve disputes, and enforce our agreements. When you delete your account, we delete or anonymize your personal data, except where we must retain certain records (for example, transaction records) to meet legal obligations.

9. Your rights & choices

Access & update — view and edit your profile in the App.
Notifications — turn push notifications off in your device settings.
Permissions — revoke camera, photos, or location access in your device settings.
Deletion — see Section 10.

Depending on your location, you may have additional rights (such as access, correction, deletion, portability, or objection). To exercise them, contact us at support@sayran.com.

10. Account & data deletion

You can delete your account and associated personal data directly in the App at any time: open Profile → Delete account. Deleting your account signs you out, removes your authentication and push tokens, and requests deletion of your account data from our servers.

You may also request deletion by emailing support@sayran.com. We may retain limited records where required by law (for example, payment and tax records).

11. Children's privacy

The App is not directed to children under 13 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact us and we will take appropriate steps to delete it.

12. International data transfers

Your information may be processed and stored in countries other than your own, including by our service providers (such as Rasedi, Google/Firebase, and our cloud storage provider). Where required, we take steps to ensure your information receives an adequate level of protection.

13. Changes to this Policy

We may update this Policy from time to time. We will revise the "Last updated" date above and, where appropriate, notify you in the App. Your continued use of the App after changes take effect means you accept the updated Policy.

14. Contact us

Sayran
Kurdistan Region, Iraq
Email: support@sayran.com