Mobile apps privacy policy

1. What this policy covers

Both apps are part of a hotel service: they exist so the hotel can deliver the service you booked, and they collect nothing for any other purpose.

The apps carry no advertising, do not read advertising identifiers, and do not track user behaviour for marketing.

• «Safora» — the guest app (package: uz.safora.safora_guest)
• «Safora Cleaning» — the housekeeping staff app (package: com.safora.safora_housekeeping)

2. What «Safora» (guest app) collects

You sign in by scanning the QR code in your room and confirming the last 4 digits of your phone number. No separate registration, password or email address is required.

• Name, room number, check-in and check-out dates — supplied by the hotel system to show your booking; kept in secure storage on the device
• The last 4 digits of your phone number — sent only to confirm sign-in, never stored in the app
• Camera — used only to read the QR code in your room; the image is never transmitted or stored
• Location (approximate or precise) — only when you order a taxi, to set the pickup point; the app never tracks location in the background
• Your chat with the reception — stored on the server so the service can be delivered
• Device notification token — used to deliver reception replies and taxi status

3. What «Safora Cleaning» (staff app) collects

This app is for hotel employees only. Access requires a work account issued by the hotel.

• Employee phone number and work account details — used to sign in
• Access token — kept in the secure storage of the device
• Camera and photo library — to photograph the state of a room for a task or attach an existing photo; photos are sent only to the hotel system
• Device notification token — used to announce new tasks
• This app does not request or collect location data

4. Why the data is used

• Showing your booking and stay details
• Delivering service orders (room service, housekeeping, spa, restaurant) to the hotel
• Placing a taxi order and showing its status
• Delivering messages between you and the reception
• Sending notifications related to the service
• Security and abuse prevention

5. Third-party services

The apps rely on the services listed below. No data is shared with any other external service.

• Yandex MapKit — the map and location on the taxi screen; the technical data required to render the map reaches Yandex servers
• Google Firebase (Cloud Messaging) — notification delivery; the device token is processed on Google infrastructure
• Millenium (taxi provider) — only when you order a taxi: the pickup address and a contact phone number are passed to the driver
• The apps never call vendor services directly — every request goes through api.safora.uz

6. How long data is kept

• Stay details and chat history — on the server for as long as the hotel needs them for its records
• Device notification token — deleted at check-out
• Access token — removed from the device when the session ends or the app is uninstalled
• Camera image used for QR scanning — never stored at all

7. Security

All traffic between the app and the server is encrypted with HTTPS. Session data and personal details on the device are held in the platform secure storage (iOS Keychain / Android Keystore).

Vendor keys live on the server only and are never shipped inside the app.

8. Your rights and data deletion

The data in the app belongs to the hotel serving you. To see, correct or delete your data, contact the hotel reception or reach us directly.

You can send a deletion request through this channel: t.me/saforauz. Requests are handled within 30 days of receipt.

Uninstalling the app clears the session on the device but does not delete records held in the hotel system — that needs a separate request.

9. Children

The apps are not directed at children and no data is knowingly collected from them. A booking is made in the name of the adult who contracted with the hotel.

10. Contact

For privacy questions or requests, reach us through our official Telegram channel: t.me/saforauz.

11. Changes

When this policy is updated, the date on this page changes. Any significant change to how data is handled will be announced separately.