Privacy Policy

Sinbad Syria ("we", "us") operates the Sinbad Syria mobile app, which helps travelers discover and book travel experiences in Syria. This page explains what information we collect, why, and how you can control it.

1. Information We Collect

• Account information. When you sign in with Google or Apple, we receive your email address, display name, a unique account identifier and, for Google, your profile photo, through Firebase Authentication. If you use Apple's "Hide My Email", we receive only Apple's private relay address. We never collect a password; Google or Apple handles sign-in.
• Phone number (optional). After you sign in, we may ask for your phone number so our team can reach you about your bookings and give you support. You don't have to provide it, and you can change or remove it at any time under Me → My account → Phone number. Your phone number is visible only to the Sinbad Syria team. It is not shown publicly or to organizers.
• Preferences. Your chosen language, theme and display currency, so the app looks the same way next time you open it.
• Push notification token. A device token (through Firebase Cloud Messaging) that lets us send you notifications, such as new experiences from organizers you follow or updates on a booking you've made. You can turn notifications off at any time in your device's notification settings.
• Saved experiences and organizer subscriptions. Which listings you've saved and which organizers you follow.
• Booking activity and messages. When you book or contact an organizer, we create a booking record with your name, the experience, the organizer and timestamps. Your conversation with that organizer takes place in the app's chat and is stored so both of you can see it. After your trip, we may ask a short survey question (whether the trip matched what was advertised, and a rating). This helps us keep listings accurate and organizers accountable.
• Images you upload. If you choose to attach an image, for example a ticket or QR code in a booking, we store that image so it can be shown in the booking.
• Reviews. If you review an organizer, your rating and text are stored and shown publicly on that organizer's profile, attributed to your account.
• Crash and error reports. If the app crashes or hits an error, we collect technical details (device model, OS version, app version, and what went wrong) together with your account identifier. We use these only to find and fix problems. We use Firebase Crashlytics for this.

2. Information We Do Not Collect

We do not access your device's location or camera. We access your photo library only when you choose an image to upload, and then only that image. We do not use third-party advertising, analytics or tracking SDKs, and we do not track you across other companies' apps or websites. We do not process or store payment card information: bookings on Sinbad Syria are paid directly between you and the organizer, outside the app.

3. How We Use Your Information

• To operate your account and keep your preferences the same across sessions
• To send you notifications, which you can turn off at any time
• To connect you with organizers when you book or contact a listing
• To contact you about your bookings and give you support, if you've provided a phone number
• To check whether booked trips matched what was advertised, so we can keep listings trustworthy and accurate
• To show your reviews to other travelers
• To find and fix crashes and errors

We do not sell your information to third parties.

4. How Information Is Shared

• With organizers: the organizer of a listing you contact or book receives your name, your booking details and the messages you send them, so they can fulfil your request. Your phone number and email address are not shared with organizers.
• With our infrastructure provider: Google Firebase / Google Cloud Platform stores and processes app data on our behalf, under its own security and privacy commitments.
• Sign-in providers: Google's privacy policy (policies.google.com/privacy) and Apple's privacy policy (apple.com/legal/privacy) govern the sign-in process itself.

We do not share your information with advertisers or data brokers.

5. Data Retention and Deletion

You can delete your account at any time from within the app (see Section 6). Some data may be kept after you delete your account, because organizers and other travelers rely on that history: reviews you've posted, past booking records and chat messages with organizers. Kept data is no longer linked to an active account of yours. Crash reports are automatically deleted by Firebase Crashlytics after 90 days.

To request deletion of any data not covered above, contact us using the details in Section 10.

7. Notifications

Push notifications are sent through Firebase Cloud Messaging. You can turn them off at any time in your device's system settings and still use the app.

8. Children's Privacy

Sinbad Syria is not directed at children under 13, and we do not knowingly collect information from children under 13.

9. Security

We rely on Firebase's security infrastructure, including encrypted data transfer and access-controlled storage, to protect your information. No method of transmission or storage is 100% secure, but we take reasonable steps to protect your data.

10. Contact Us

Send questions about this policy or your data to contact@sinbadsyria.com.

11. Changes to This Policy

We may update this policy as the app evolves. Material changes will be reflected by updating the "Last updated" date above.