Legal
Privacy Policy
Last updated 6 August 2026
What we collect when you use تي شيرت, why we collect it, who else sees it, and how to get it deleted. We do not sell your data, and we never handle your card details.
01 Who we are
| Operator | تي شيرت (“T-Shirt”) |
|---|---|
| Address | Ramallah, Palestine |
| tahaynaobada@gmail.com | |
| Phone / WhatsApp | +972 59-571-7094 |
| Primary user base | Palestine — 13 years of age or older |
02 What we collect
You can browse products and use most of the app without creating an account. Some features need personal information.
Information you give us
| Category | Details | Required? |
|---|---|---|
| Sign-in | Your phone number, and a one-time SMS code to verify it. This is the only way to create an account — we do not use passwords. | Optional |
| Profile | Your name, and optionally your date of birth, gender and favourite teams | Optional |
| Order & delivery | Recipient name, phone number, full address, area, city, delivery notes | Required to order |
| Customization | The name and number you ask us to print, and the badges you select | Required for personalized items |
| Predictions | Predictions you enter, and the display name shown with them | Optional |
| Support messages | Anything you send us by email or WhatsApp | Optional |
Information collected automatically
| Category | Details |
|---|---|
| Push token | A device token from Firebase Cloud Messaging, used to send notifications. Opt-out available. |
| On your device | Language choice, session state and cart contents, stored locally |
We do not use analytics. Firebase Analytics collection is switched off in the app, in the Android manifest and in the iOS configuration.
Payment data — none
We do not collect, process or store any payment data. All orders are paid by cash on delivery. No card, bank or online payment details pass through the app at any point.
What we do not collect
We do not collect your precise or background location, contacts, calendar, microphone audio, SMS content, health data, biometric data, advertising identifiers or usage analytics. The app does not access your photo library or camera.
03 How we use your information
| Purpose | Legal basis |
|---|---|
| Create and secure your account | Contract performance |
| Process, deliver and support your orders | Contract performance |
| Produce personalized items with the name and number you supply | Contract performance |
| Show order history, saved addresses and wishlist | Contract performance |
| Run deals, coupons, referral credit and wallet balances | Contract performance |
| Operate prediction contests, points and rankings | Contract performance |
| Send transactional notifications about your orders | Contract performance |
| Send promotional notifications | Consent — withdraw any time |
| Detect and prevent fraud, referral abuse and contest manipulation | Legitimate interest |
| Keep purchase and invoice records for tax and accounting | Legal obligation |
Legal bases are named for transparency, following GDPR-aligned principles, although our primary jurisdiction is Palestine.
04 Information visible to others
Some information is public within the app by design:
- Your display name appears on prediction leaderboards and weekly rankings, visible to other users.
- A prediction card you choose to share is generated as an image you send through your own apps. We do not publish it for you.
If you would rather this were not visible, do not enter prediction contests, or change the display name on your account.
06 Data storage & international transfers
Your personal data is stored on Google Firebase infrastructure — Cloud Firestore, Firebase Authentication and Firebase Storage. Image delivery and link hosting use servers operated by Bunny.net and Vercel. These providers operate data centres outside Palestine.
Transfers outside Palestine occur only to these providers, which maintain recognised security certifications — Google Cloud holds ISO 27001 and SOC 2, among others.
07 Retention
| Data | Kept for |
|---|---|
| Account data | Until you delete your account, or after 24 months of inactivity |
| Order and invoice data | 7 years (statutory finance retention) |
| Delivery addresses | Until you delete them, or with your account |
| Predictions and points | Until you delete your account; may be retained anonymised |
| Wallet and referral records | Until account deletion, then anonymised after the statutory period |
| Push notification tokens | Until you disable notifications or uninstall the app |
When you delete your account we permanently erase your profile, saved addresses and wishlist. Order records are anonymised once the statutory retention period has passed. Any unused wallet credit is forfeited.
08 Your rights
Subject to applicable law, you may:
- access the personal data we hold about you;
- correct inaccurate or incomplete data;
- delete your account and associated data;
- withdraw consent to promotional notifications, at any time;
- object to processing based on legitimate interest;
- request a copy of your data in a portable format.
To delete your account — in the app or without it — see Delete my account. We respond within 30 days at the latest.
09 Security
We apply industry-standard safeguards:
- TLS 1.2+ encryption for all data in transit;
- AES-256 encryption at rest (Firebase default);
- sign-in by one-time SMS code, so there is no password to leak;
- server-side Firestore security rules restricting each user to their own records;
- role-based access control and least-privilege policies for staff accounts.
No system is completely secure. If we become aware of a breach affecting your personal data, we will notify you and any competent authority as required by law.
10 Children
The app is not directed to children under 13, and we do not knowingly collect personal information from anyone under 13. If we learn that we have, we delete it promptly. If you believe a child has provided us personal data, contact tahaynaobada@gmail.com.
11 Cookies & tracking
The app does not use cookies, advertising SDKs or usage analytics, and we do not track you across other apps or websites.
Our share and link pages set only strictly necessary technical storage.
12 Changes to this policy
We may update this Policy. Where changes are material we will notify you in the app and by email (if you have an account) at least 14 days before they take effect.
13 Contact us
Questions or complaints about this Policy or your personal data:
| tahaynaobada@gmail.com | |
| Phone / WhatsApp | +972 59-571-7094 |
| Address | Ramallah, Palestine |