Privacy Policy

• Registration & account data: full name, phone number, and email address. Drivers and advertisers also provide a national ID image, driver's license image, and vehicle registration image.
• Account identifiers: an internal user ID (account identifier) created at sign-up and used to link the account to its data.
• Location data: with your permission, we collect precise (GPS) and approximate location only while the app is in use, including during an active trip when a persistent notification is visible; we never collect location data when the app is closed, and we do not use "always-on" background location. Location data is collected to show nearby trips, display maps, calculate routes, and provide trip and geofencing features. You can disable location access in your device settings, though some features may then not work.
• Activity data: posted ads, trip searches, saved places, ride history, and interactions with other users.
• Payment data: for bus bookings only, the payment number or transaction ID from the payment provider. We do not store your card details on our servers.
• Device & technical data: device identifiers, app version, operating system, and a push-notification token used to send you trip and account notifications.
• Diagnostics & analytics: anonymous usage analytics and crash/diagnostic reports (via Google Firebase) to improve the stability and quality of the service.

• To operate, maintain, and improve the service.
• To verify the eligibility of drivers and companies posting ads.
• To show nearby trips, maps, and routes based on your location.
• To personalize your experience within the app.
• To send you important notifications, trip updates, and account alerts.
• To detect, prevent, and address fraud, abuse, and security issues.

We do not sell your personal data. We share data only with the following service providers and parties, and only as needed to run the service:

• Google Firebase (Google LLC): authentication, database and hosting, analytics, crash reporting, push notifications, and app-integrity checks. Data may be processed on Google servers outside Jordan.
• Mapbox: we send location and search queries to Mapbox to provide maps, geocoding, and route calculation.
• Payment provider: only when you make a bus payment, to process the transaction.
• Licensed bus companies: when you book a seat with them.
• Government authorities: when legally required or for compliance purposes.

• We use modern encryption (in transit and at rest) and security technologies to keep your data confidential.
• Access to your data — including verification documents such as national ID and license images — is restricted to a small, trusted administrative team.
• Your data may be stored on servers outside Jordan (such as Google Firebase servers), while ensuring appropriate security measures are in place.

We retain your data for as long as your account is active. When you delete your account or make a verified deletion request, we delete your personal data within 30 days, except where we are required to retain certain records (for example, financial or legal records) by law. Upon deletion, ride/trip history records are de-identified (permanently unlinked from name, email, phone number, and photo) and these de-identified records may be retained for analytics, service improvement, and research/product development. Driver verification documents are deleted upon subscription termination or upon your written request.

• You have the right to request a copy of your data.
• You have the right to correct inaccurate data.
• You have the right to request permanent deletion of your data (see § 7).
• You have the right to withdraw consent, including by disabling permissions such as location.

You can delete your account and associated personal data at any time:

• In the app: open Profile → Settings → Manage Account → Delete Account. This permanently deletes your account and personal data.
• By request: email [email protected] from your registered email address, and we will process your request within 30 days.

Upon deletion we remove your profile, contact details, saved places, uploaded photos, and verification documents; ride records are de-identified and retained per §5. Certain records may be retained only where required by law.

You must be at least 16 years old to use Shebak. Drivers and advertisers must be at least 18 years old. The app is not directed to children under 16, and we do not knowingly collect their personal data. If we learn that we have collected data from a child under 16, we will delete it.

Shebak is operated by Mohammad Al-Qatameen (Jordan). For any privacy questions, data requests, or complaints, contact us at:

• Email: [email protected]