Privacy policy

1. Who we are and what this policy covers

PH Rewards ("PH", "we", "us", "our") is responsible for the personal data held in PH, as its controller.

This one Privacy policy covers all of PH:

• the PH Rewards mobile app;
• the PH Rewards web dashboards;
• the account deletion page at https://account.phrewardsapp.com/delete-account;
• the Website at https://phrewardsapp.com, where this policy and the Terms and conditions are published.

For any question about your data, write to support@phrewardsapp.com.

2. What PH is

PH is a recording tool. It lets the parties record the Scans and Reverses of labelled Units at pharmacies and shows each party the Points recorded for it, and only its own. No money, payment or contract passes through PH. The words used here (Provider, Provider Employee, Pharmacy, Pharmacy Employee, Item, Unit, Label, Scan, Reverse, Points, Statement, Month) have the meaning given in the Terms and conditions.

3. The information we hold and where it comes from

PH has no public sign-up. Most of the information below is entered by the business you work with or for, not by you.

• Account information: the name on the account, the username, the account type and its status (Active, Frozen, Disabled or Deleted). Your password is kept only as a one-way hash that cannot be turned back into the password; nobody, including us, can read it. Accounts are created by the PH admin, by a Provider or its Provider Employees, or by a Pharmacy for its Pharmacy Employees, and the person who creates an account enters its name.
• Pharmacy information: the pharmacy's name, the owner's name, the owner's phone number, the city, the area, an optional note and, if given, the pharmacy's Governmental Registration ID. These are entered by the PH admin, by a Provider or its Provider Employees, and kept up to date by the people allowed to change them.
• Provider information: the Provider's name and the Items it creates, with the Points it sets for them. These are entered by the PH admin and by the Provider.
• Activity records: the Scans and Reverses recorded in PH (which Units, at which pharmacy, by which account, whether the Label was scanned or its code typed, and the date and time), the Points recorded for them, Month totals, Statement rows and the Links between Providers and pharmacies. These are created when users record Scans and Reverses and manage their accounts.
• Technical information: PH's server keeps a log of each request it receives (the address requested, the result, the time it took and the IP address it came from), without passwords and without the content of what you send. The hosting provider also keeps its usual access logs, which include IP addresses. We use these logs to run the service, find faults and protect PH against misuse.

4. What we do not collect

PH does not collect your location, contacts, photos or files, does not use an advertising identifier, and has no analytics, crash-reporting or tracking tools in the app, the dashboards, the account deletion page or the Website.

If you sign in to the app with Face ID or your fingerprint, your phone checks it. PH never receives your face or fingerprint data.

5. The camera and label scanning

The app uses your phone's camera only to scan the QR code on a Label, and only after you tap Scan QR. The camera images are processed on your phone; PH receives only the code that was read, as part of the Scan or Reverse you submit. You may refuse camera access and type the code printed under the QR code instead.

• On iPhone, the scanning is done by Apple's own scanning tools built into the phone. Nothing about the scan is sent to Apple or to anyone else.
• On Android, the scanning is done by Google's ML Kit barcode scanning library, inside the app on your phone. The images stay on your phone, but ML Kit sends diagnostic information to Google, as Google describes it: details of the device and its operating system, the app's name and version, an identifier for this installation of the app, and performance, configuration and error information about the scanning. Google states that it uses this information to maintain and improve ML Kit and does not pass it to third parties. It cannot be turned off within the app.

6. Why we use information and on what basis

We use the information above only to:

• create and run the accounts, and let each person log in;
• record Scans and Reverses and show each party its own Points, Month totals and Statements;
• keep the records the Providers, the pharmacies and PH rely on to settle between themselves, outside PH;
• keep PH working, secure and free of misuse;
• meet our obligations under the law.

We process this information because it is needed to provide the service that a Provider or a Pharmacy has chosen to use and that you use in your work, because we have a legitimate interest in keeping complete and reliable records of what was recorded in PH, because the law may require it, and with your consent where the law requires consent.

We do not use your information to make automated decisions about you or to build a profile of you.

7. Who can see the information

Each party sees only what concerns it:

• a Pharmacy Employee sees their own Scans, Reverses and Points;
• a Pharmacy sees its pharmacy's Scans, Reverses and Points, its own Points and those of its employees, and its employees' accounts;
• a Provider and its Provider Employees see their own Items, the pharmacies Linked to them with those pharmacies' details, and the Scans and Reverses of their own Units with who recorded them, with the Points and Statements that concern them;
• the PH admin can see all information in PH, to run, support and protect the service.

We do not sell personal data. We do not share personal data for advertising, and we do not use it to advertise to you.

We disclose information outside PH only to the service providers named in section 8, or where the law, a court or a competent authority requires it.

8. Service providers and storage outside Jordan

We use a small number of service providers, each bound to protect the data and to use it only as needed for the service it provides:

• Hosting: PH's servers and database are run by our hosting provider, Render, in its data centre in the European Union. Your information is therefore stored outside the Hashemite Kingdom of Jordan. Render acts on our instructions as a processor.
• Scanning on Android: Google receives ML Kit's diagnostic information, as described in section 5.

The app stores, your phone's operating system and your internet provider handle data under their own terms and privacy policies.

9. How long we keep information

We keep information only for as long as its purpose requires:

• account and pharmacy details are kept while the account exists, and are erased when the account is deleted, as section 10 explains;
• Scans, Reverses, Points records, Month totals, Statement rows and Links are kept for as long as the Providers and pharmacies may need them to settle between themselves and as the law requires, with no fixed period, including after an account is deleted, under "Deleted user";
• copies in backups are gone within 7 days, so what a deletion erases is gone from the backups within 7 days of it;
• server logs, including the hosting provider's access logs described in section 3, are kept for 14 days.

10. Deleting your account

You can delete your own app account (Pharmacy, Pharmacy Employee or Provider Employee) at any time, in either of two ways:

• In the app: open Settings, tap Delete account, enter your password and confirm. This is offered while your account is Active or Frozen.
• On the web, without the app: open the account deletion page at https://account.phrewardsapp.com/delete-account, enter your username and password and confirm. This works whatever your account's status, including a Disabled account that can no longer log in.

If you have forgotten your password, ask whoever manages your account (your Pharmacy, your Provider, or the PH admin) to reset it, then delete the account. A Provider account is deleted through the PH admin: write to support@phrewardsapp.com. A Provider or a Pharmacy may also delete an employee account it manages, and the PH admin may delete any account, with the same result.

Deletion happens at once and cannot be undone. What is erased:

• your name, your username and your password;
• for a Pharmacy, also the owner's name, the owner's phone number and the pharmacy's note;
• every session of the account ends, and the account can never log in again or be re-activated.

When a Pharmacy is deleted, the pharmacy is closed: its employees can no longer log in and no Scan can be recorded there. The erased username and phone number may later be used by a new account, which is not linked to the deleted account's records.

What is kept, and why: every Scan, Reverse, Points record, Month total, Statement row and Link stays exactly as it was, and wherever your name was shown it reads "Deleted user". For a Pharmacy, the pharmacy's name, city, area and Governmental Registration ID also stay. We keep them because the other parties, the Providers, the pharmacies and PH, rely on these records for their own records and to settle between themselves, outside PH, and they must stay complete and auditable. Deleting an account does not change any Points.

An account that has no records at all (no Scan, Reverse, Points or Link) is removed entirely.

Records of past requests in the technical logs described in section 3 are not erased by the deletion; they are kept only for the period described in section 9.

11. Your rights

Under the Personal Data Protection Law of the Hashemite Kingdom of Jordan, and within its limits, you have the right to:

• know what personal data we hold about you, see it and obtain a copy of it;
• have it corrected, completed or updated;
• have its processing restricted;
• object to processing that is unnecessary, excessive or unlawful;
• have it erased, subject to the records we keep as section 10 explains;
• withdraw your consent where we rely on it;
• have a copy moved to another party where the law provides for it;
• be told if your personal data is breached.

To use any of these rights, write to support@phrewardsapp.com. We may ask you to confirm that the account is yours before we act. Many details, such as a name or a pharmacy's details, can also be corrected by whoever manages your account. Using your rights will not cost you anything or affect your use of PH beyond what the right itself requires.

If you believe your data has been handled against the law, you may complain to the competent authority in the Hashemite Kingdom of Jordan responsible for personal data protection.

12. Security

We protect personal data with technical and organisational measures, including:

• all traffic between the apps, the dashboards and PH's servers is encrypted;
• passwords are stored only as one-way hashes and never in readable form;
• each account can see only what its role allows;
• repeated failed logins are slowed down;
• changing or resetting a password, disabling an account or deleting it ends its sessions;
• on the phone, the sign-in details are kept in the phone's secure storage and are never backed up.

No system is completely secure. If a breach of personal data occurs, we will take the steps the law requires, including informing the people affected and the competent authority where the law requires it.

13. The Website and the dashboards in your browser

The Website at https://phrewardsapp.com collects nothing from its visitors. It has no login, form, analytics, cookie, tracker, advertising or content from another company, and it sends nothing to PH's servers. The only thing it keeps is your language choice, stored in your own browser and never sent anywhere. The hosting provider's usual access logs are the only record of a visit.

The dashboards use no cookies. They keep your sign-in session in the browser tab, which ends when the tab is closed, and keep your language choice and any save that has not yet been confirmed in your browser, so that it is not saved twice. The account deletion page keeps nothing in your browser.

14. Children

PH is a business tool for people working for Providers and pharmacies. It is not meant for children, and accounts are not created for them.

15. Changes to this policy

We may change this policy at any time. The date at the top of this page shows when it last changed, and the version published here is the one that applies. There is no separate notice or acceptance step. The Terms and conditions explain what using PH after a change means.

16. Language

This policy is written in Arabic and English. Where the two versions differ, the Arabic version prevails.

17. Contact

For any question about your data or this policy, or to use your rights, write to support@phrewardsapp.com.