TOP and Mazraati apps privacy policy

1. Account and profile

We process your phone number, country code, account identifier and verification information needed to sign in. OTPIQ, or the verification provider enabled for the service, delivers the login code. Do not share verification codes with support or another user.

Profile data includes information you provide, such as your name, date of birth or age, photo, city, saved addresses, email when added, and language/account preferences. We use it to manage the account, communicate and determine service eligibility. Linked services may use a shared TOP identity and wallet.

2. Rides, bookings, work and payments

We process transport/service requests and farm bookings, including times, pickup and destination locations, guest counts, notes, participants, status and cancellation. For drivers and farm owners we process work, vehicle or farm information and uploaded verification content. This may include a driver's identification, driving licence, vehicle registration, photographs and verification videos.

Financial records include transaction and wallet amounts, bookings, commission, earnings, incentives, refunds, payment references/status and payout details you provide. Your selected enabled payment gateway, such as Qi or ZainCash, handles payment under its own policy. Enter payment details only in the designated payment interface, not support messages. A deletion request does not automatically cancel financial obligations.

3. Location and device permissions

TOP Taxi uses approximate or precise location, depending on permission, to identify pickup points, search places and provide rides. Addresses or map points you enter manually are also processed.

TOP Captain collects and transmits precise location while a driver is available for requests or tracking an active ride, for dispatch, maps and ride tracking. On Android, a location foreground service with an ongoing notification can continue updates while the app is in the background. On iPhone, updates depend on system permission and work state. Going offline does not end tracking of a ride that is still active. When offline without an active ride, continued work-location broadcasting is not needed.

Mazraati for Business can use location with your permission when setting the farm's position. Farm coordinates and area information support bookings and directions; listing a farm does not mean the owner's device is continuously tracked. Manage location permission in device settings. Features requiring permission may be unavailable if you decline it.

4. Messages, media and reviews

We process messages, notes, support reports, ratings and photos, videos or attachments you choose to submit for requests and verification. Reviews and farm-listing content may be visible to other users. Verification documents are used for review and are not intended as public listing content.

When you choose TOP voice search, microphone input is processed with permission through the system speech-recognition service; Apple or Google may process it remotely depending on the device and settings. Voice search differs from recording an attachment: if you choose to record and send an attachment in a feature that supports it, that recording becomes part of the request content. We do not promise that all audio is processed on-device or never retained. Avoid submitting sensitive information unrelated to the service.

5. Automated assistance and review

Depending on service configuration, TOP may use Google Gemini and OpenAI for in-app assistance or review of registration details, driver documents, images, content and reports. Information relevant to that feature may be sent to the provider, such as your question and conversation context, or an image and details supplied for verification.

Automated results may affect acceptance of content or an account, or flag a case for administration. Contact company support for an explanation or to challenge a result affecting you. Do not put passwords, verification codes or payment-card details in assistant conversations.

6. Technical data and notifications

Apps use Firebase authentication, databases, storage and notifications as applicable, and Google or Apple maps/place services. Account and installation identifiers, notification delivery tokens, device/operating-system details and operational/error logs support service delivery and protection. Mazraati apps use Firebase Crashlytics for crash reporting and diagnostics.

Notification permission supports ride, booking and account alerts; manage it in device settings. Technical service logs may include network address, request time and diagnostics. Support-page hosting also processes connection information needed to deliver pages. The page itself has no login/payment form or automatic deletion endpoint.

7. Who receives data?

Information needed to fulfil a request is shared with its participants, such as rider and driver or customer and farm owner: name, necessary contact details, service location and status. Necessary information is also available to authorised support, review and administration staff.

Hosting/cloud providers, including Firebase/Google Cloud and AWS, and maps, verification, notification, payment and automated-processing providers process information needed for their roles. Processing may take place outside Iraq depending on their systems. External maps, payment and email services also apply their own policies. We may disclose necessary information for a binding legal obligation or to investigate fraud or a security incident.

8. Advertising and commercial use

TOP Taxi and TOP Captain may display advertisements or offers within the apps; this policy does not describe them as ad-free. We do not sell personal information. Service information supports fulfilment, support, security and improvement, not publication of identity or payment details.

9. Retention and deletion

Account/service information is retained while needed to operate the account and fulfil requests. On a deletion request, we review its scope and outstanding obligations, delete information no longer needed or remove its link to you where appropriate. Financial, transaction, dispute, security or fraud-prevention records may need to be retained for the period required by the relevant obligations. No single period applies to every record type; ask support for details of retained information, its reason and scope.

You can request deletion of your unified TOP account and associated data, or choose Mazraati-data-only deletion while preserving the TOP account, other services and shared wallet. Ownership and scope must be verified; do not attach identification or an OTP to the initial message. Uninstalling or signing out does not delete an account. Opening or sending an email is not confirmation that deletion is complete.

10. Your choices and data security

Edit available profile information, manage permissions in device settings, and contact support to request access, correction or deletion or to raise an objection about processing affecting you. We may request appropriate information to verify account ownership before acting.

Service communications use encryption in transit and account/service access controls. No communication or storage method guarantees complete security. Report suspected unauthorised access and do not publish account information or access secrets.

11. Age

Account creation and booking in these services are intended for adults aged 18 or over. This is a service-eligibility policy, not a claim that every store content rating matches it. Contact support if you believe a minor has supplied personal data so the situation can be checked and addressed.

12. Policy updates

Updates are published here with their date. A policy update is not a substitute for permission or consent required by a particular feature. Check the policy when using a new service and contact us if you need clarification.