سياسة الخصوصية

Who we are

Estasher is a Saudi application that connects people seeking engineering consultations with independent engineers and licensed engineering offices. It is operated by Estasher Establishment, registered in the Kingdom of Saudi Arabia and based in Najran.

Data we collect

We collect the following data only when you provide it or when it is required to operate the service:

• Account data: the mobile number used to register, display name, email address if you add one, profile photo if you upload one, and account type (client, independent engineer, engineering office).
• Optional data you may provide at sign-up: gender and date of birth.
• Request data: the description of your consultation or service, the engineering specialty required, the city and region you type in yourself, and any photos or plans you attach to your project.
• Offers and messages: offers exchanged between you and service providers, and the content of in-app conversations.
• Limited technical data: your internal account identifier, account creation date, and your device push-notification token so we can notify you about your requests.

Service provider data (engineers and offices)

If you register as an independent engineer or an engineering office, we require additional documents to verify your professional eligibility before activating your account. These documents are sensitive and handled with particular care:

• Independent engineer: full name, Saudi Council of Engineers membership number, engineering specialty and sub-specialties, region and city, a personal photo, an image of the national ID or residence permit, and an image of the Council membership certificate.
• Engineering office: office name, commercial registration number, engineering licence number, specialty, region and city, office logo, an image of the commercial registration, and an image of the engineering licence.

Why we collect this data

• To create your account and verify that you own the mobile number.
• To verify the eligibility of engineers and offices before allowing them to receive requests — this is the basis of trust in the app.
• To present your request to suitable service providers and let you receive and compare offers.
• To enable communication between you and the service provider inside the app.
• To send notifications related to your requests and offers.
• To issue a service invoice and comply with Saudi accounting and tax regulations.

Permissions the app requests

The app requests only two permissions, and functions without them apart from the related feature:

• Camera: to take a photo of your project or documents directly.
• Photos and files: to select an image or plan from your device and attach it to your request.

What we do not collect

We state explicitly what the app does not do:

• We do not collect or track your geographic location — the app never requests location permission, and city and region are typed in by you.
• We do not use advertising trackers and we do not display ads in the app.
• We do not sell, rent, or trade your personal data to anyone.
• We do not record your calls, and we do not access your contacts, calendar, or microphone.

Who can see your data

We share your data only to the extent necessary to operate the service:

• Service providers in the app: they see your request details, the images you attach, and what you write in the conversation, so they can submit a suitable offer.
• SMS provider: verification messages (OTP) are sent through a Saudi SMS gateway, which receives only your mobile number and the verification message text in order to deliver it.
• Google Firebase services: the app relies on Google's Firebase platform for authentication, database, file storage, notifications, and performance monitoring.
• Competent authorities: where a legal or judicial request requires it under the laws of the Kingdom of Saudi Arabia.

Where your data is stored

Data is stored on the cloud infrastructure of Google Firebase services, and may be processed or held on servers outside the Kingdom of Saudi Arabia depending on where those services operate. By using the app you consent to this processing to the extent necessary to operate the service.

Data protection

• Communication between the app and our servers is encrypted in transit.
• Files you upload are stored in a path tied to your account, which no other user can write to.
• Access to verification documents is limited to the purpose for which they were collected, namely eligibility review.
• Nevertheless, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

Data retention

We retain your data while your account is active. When you delete your account we delete your personal data as described on the Account and Data Deletion page, except for data we are legally required to keep — such as invoices and financial transaction records, retained for the period required by Saudi accounting and tax regulations.

Your rights

• Access your data and know what we hold about you.
• Correct or update your data from within the app.
• Request deletion of your account and data — via the steps on the Account and Data Deletion page.
• Object to or restrict processing of your data to the extent permitted by applicable regulations.

Children's privacy

The app is intended for adults, project owners, and engineers, and is not directed at anyone under the age of eighteen. If we learn that we have collected data from a minor without parental consent, we will delete it as soon as we become aware.

Updates to this policy

We may update this policy when app functionality or regulatory requirements change. The last-updated date appears at the top of this page, and continued use of the app after an update constitutes acceptance of the updated version.