YOUR PRIVACY AT RINILI
Privacy Policy
Your information. How we use it. The choices you have.
No sale of personal dataNo targeted ads or cross-app advertising tracking.
Choices in your handsOptional permissions and a clear privacy request route.
Who we are
Rinili (رنلي) is an order-tracking and loyalty service operated by MUJEER FOR SOFTWARE (MUJEER), based in Amman, Jordan. This Privacy Policy explains how we handle information in the Rinili apps for iOS and Android, our connected services, and rinili.com.
Rinili helps you follow orders placed with participating restaurants, receive ready alerts, rate completed orders, and manage rewards. Restaurants are responsible for their own ordering, payment, and other independent data practices.
Information we collect
- Account and profile: phone number and country code, name, gender, birthday, and any email address or profile photo you provide. We keep verification challenge records, authentication/session records, and account preferences.
- Orders and rewards: linked order codes and identifiers, restaurant and branch, items, amounts and currency, status, timestamps, ratings and comments, points transactions, membership tier, and loyalty-card identifiers. Order details may be supplied by the participating restaurant.
- Messages and feedback: feedback you submit, support correspondence, and notification content, preferences, and delivery records.
- Device and technical information: device manufacturer, model and available device name; operating system, version and build; app version and build; language, time zone, appearance and notification-permission status; screen size, display scale, memory and processor information, supported architecture, power mode, and whether the device is physical, where available. This information is linked to your customer account and sessions when you sign in, register, or the app refreshes device information.
- Delivery and security information: app-installation identifiers (including Firebase installation IDs), push-notification tokens, Live Activity tokens, session identifiers, IP addresses and request/security logs. If you add a Wallet card, we also process its serial number, a hashed Wallet device-library identifier, registration records and update token.
We do not collect payment-card details through the current customer app, access your contacts, or request precise device location. We do not collect advertising identifiers or use the app for cross-app advertising tracking.
How we use information
We use information to verify your phone number; create, maintain and secure your account; link and display orders; deliver order updates and notifications; operate rewards and loyalty cards; save preferences; respond to feedback and support requests; diagnose compatibility and delivery problems; prevent abuse; and meet applicable legal obligations.
Where applicable law requires a legal basis, we process information to provide the service you request, for legitimate interests such as security and reliability, to comply with law, or with your consent for optional permissions. You can withdraw optional permissions in device settings.
Camera, photos and notifications
- Camera: used when you choose to scan an order QR code or take a profile photo. QR scanning reads the code on your device; we do not upload the live camera feed. The decoded order code is sent to link the order.
- Photo library: used to select a profile photo. The selected image is uploaded to Rinili; we do not upload your photo library. The app resizes and re-encodes the selected profile image to remove embedded metadata before uploading it.
- Notifications and Live Activities: optional device permissions and preferences control alerts, sound and supported Lock Screen updates. Notification delivery providers receive a device token and the content needed to deliver updates.
You can use manual order-code entry without the camera and keep an initial-based avatar without uploading a photo. Order information may be visible to anyone who can see your Lock Screen. Adjust notification previews and Live Activity settings on your device.
Apple Wallet and your membership QR
Adding a Rinili card to Apple Wallet is optional and available on supported Apple devices. The pass contains your name, membership identifier, tier, points balance and a unique QR code. Wallet registration and push-update information lets us keep the pass current. Apple processes Wallet information under its own privacy terms.
Presenting your membership QR code lets the participating business identify your loyalty membership. Treat it as personal account information. Removing the pass from Wallet does not delete your Rinili account.
How long we keep information
We keep account, linked order, rewards and service records while your account is active and as needed to provide the service. Verification codes expire after a short period; expiry does not itself erase the associated verification record. Technical logs, delivery records and audit history may remain for security, troubleshooting, dispute resolution and applicable legal requirements.
The current in-app account action deactivates the account and retains the account record and related history; it does not automatically erase all information. Retained information can include profile data and uploaded photos, orders, ratings, rewards, feedback, session/device records and audit records. Use the request route below to ask for account and associated-data erasure. There is no automatic erasure timetable for deactivated accounts at present.
When handling an erasure request, we assess any information that must be retained for legal, security or dispute purposes and explain the categories and applicable reason to you. We do not treat deactivation as completed permanent deletion.
Your choices and account deletion
You do not need the app installed. Email wecare@mujeer.com with the subject “Rinili account and data deletion request” and your account phone number, including country code. Specify whether you want your entire account and associated data erased or only particular information removed.
We may ask you to verify control of the account before acting. Do not send passwords, verification codes or payment details. We will respond with the steps, any information that needs to be retained and the expected completion timing, in accordance with applicable law.
Request deletionInside the app, open Profile → Personal information → the red trash icon and confirm “Delete my account.” This currently deactivates your account, signs you out, revokes sessions and device delivery access, and disables account notifications and Live Activities. Use the email route for permanent erasure.
You can edit profile information, change notification preferences, revoke camera/photo access in device settings, and remove a Wallet pass. Depending on your location, you may also request access, correction, a copy, erasure, restriction or objection to processing, or withdraw consent. Contact us to exercise these rights or raise a concern with the competent data-protection authority. Uninstalling Rinili alone does not delete your account or server records.
Security
We use HTTPS for data in transit, authenticated access, role-based restrictions and protected server storage. Session tokens are stored securely on the device where supported; backend session credentials are hashed and notification tokens are encrypted in storage. No internet service can guarantee absolute security. Protect your phone and verification codes, and contact us if you suspect unauthorized access.
Website storage and external links
The public website stores your language choice in browser local storage. It does not use advertising cookies or third-party analytics in its current implementation. Standard hosting logs record technical request information. Business dashboard sign-in uses necessary session and security cookies.
Contact links may open your email app, WhatsApp or another website. A prepared email draft is not sent until you choose to send it. External services have their own privacy policies.
Children
Rinili is not directed to children under 13, or below the applicable minimum age for providing consent in their location. If you believe a child has provided personal information without appropriate authorization, contact us so we can review and address it.
Changes to this policy
We may update this policy when Rinili or its data practices change. We will publish the revised policy here, update the date, and provide additional notice or request consent where required.
Contact us
For privacy questions or requests, contact MUJEER FOR SOFTWARE, the operator of Rinili.
wecare@mujeer.com+962 6 222 0747
53 Al-Fadeleyah Street, 2nd Floor
Shmeisani, Amman 11194, Jordan