YallaCarry ("we", "us") operates the YallaCarry mobile application, an on-demand porter booking service for markets and shopping destinations in the United Arab Emirates. This policy explains what we collect, why, and your choices. It applies to both customers and YallaCarry Agents (porters) using the app.
| Data | When | Purpose |
|---|---|---|
| Phone number | Sign-in (OTP verification) | Account creation, authentication, fraud prevention |
| Display name (optional) | Profile edit | Shown to your matched Agent / customer during a trip |
| Language preference | Profile settings | Display the app in English or Hindi |
| Booking details | Each booking | Chosen market, time package, add-ons, meeting point text, instructions, price, timestamps — to deliver and support the service |
| Ratings & tips | After a trip | Service quality and Agent payouts |
| Agent profile (Agents only) | Agent registration | Name, badge number, chosen market, trip count, rating, online status — to operate the Agent marketplace |
| Subscription status | If you buy YallaCarry Pro | Entitlement management (see Section 4) |
What we do NOT collect: device GPS location (the app never requests location permission — maps display fixed market locations only), card or bank numbers (no payment card data ever touches our servers), contacts, photos, health data, advertising identifiers.
Account and booking data are stored on Supabase's managed cloud infrastructure with row-level security; our API runs on Railway. Authentication uses signed tokens stored in your device's secure keychain/keystore. Transport is encrypted with HTTPS/TLS throughout.
Account data is kept while your account is active. Trip records are retained for 30 days for safety and dispute purposes, then retained in aggregate for accounting as required by UAE law. You may request deletion at any time (Section 7).
Trip fares are currently settled in cash at the market booth — we never process or store card details in the app. The optional YallaCarry Pro subscription is billed by Apple App Store / Google Play and managed through RevenueCat, which processes your purchase history and an anonymous app user ID on our behalf (see RevenueCat's privacy policy at revenuecat.com/privacy). We never see your card details.
We do not sell your personal data, run third-party advertising, or use cross-app tracking. No data is used for tracking as defined by Apple's App Tracking Transparency framework.
Your display name is shown to the Agent matched to your booking (and the customer's name to the Agent). Agents see only what is needed to perform the trip: name, meeting point, and booking details — never your phone number or payment information. Our safety team can access trip records when you trigger SOS or report an incident.
You may access, correct, or delete your personal data, or object to processing, by emailing support@yallacarry.com from the account in question. Deleting your account removes your profile and personal identifiers; legally required transaction records may be retained in anonymized form. You can also simply log out at any time, which removes tokens from your device.
YallaCarry is not directed at children under 16, and we do not knowingly collect data from them.
We will post any changes to this policy here and update the effective date. Material changes will be announced in the app.
YallaCarry, Dubai, United Arab Emirates · support@yallacarry.com. This policy is governed by the laws of the United Arab Emirates.