Privacy Policy
Last updated: September 15, 2026
1. Introduction
This Privacy Policy describes how Sama Investment Company, the operator of the Sky Cashback application ("App"), collects, uses, stores, and protects your personal information. By using the App, you agree to the practices described in this Policy.
2. Information We Collect
2.1 Information You Provide
- Required to register: Full name, mobile number, and a password (stored encrypted).
- Optional, if you choose to add it later: Email address, address, gender, and a profile picture.
- Verification: One-time verification codes (OTP) sent via SMS for account verification.
- Support: The content of complaints and support requests, including any images or files you choose to attach.
2.2 Usage-Generated Information
- Purchase transaction records (amounts, dates, relevant partner merchants).
- Cashback records, vouchers value, and cashback value.
- Voucher purchase, redemption, gift, and usage records.
- Transfer records for amounts you send to or receive from other users.
- Mobile recharge and bill payment records, including the mobile number you recharge.
- Return records.
- Referral records: the referral code issued to you, and the registrations completed through it.
2.3 Automatically Collected Information
- Device information (device type, operating system version, app version, language).
- Firebase Cloud Messaging (FCM) device token for sending notifications.
- App usage data and interaction logs.
- Crash reports and diagnostic data collected through Firebase Crashlytics to help us keep the App stable.
3. Location Information
- The App can access your device's precise location only while the App is in use, and only after you grant permission.
- We use your location to show partner merchants and points of sale near you, and to center the map on your position. For the "nearby" feature, your coordinates are sent to our servers in order to return nearby results.
- We do not track your location in the background, and we do not build a history of your movements.
- You can revoke location access at any time from your device settings. The App remains usable without it.
4. Device Permissions
We request the following permissions only when they are needed for a feature you use:
- Camera: To scan QR codes for payments, transfers, and prepaid card redemption. We process the code only; we do not record or store video.
- Photos and camera: To let you set a profile picture, and attach an image to a complaint or support request. The camera is also used to scan QR codes.
- Notifications: To send push notifications about your transactions and your account.
- Biometrics (fingerprint / Face ID): Used, if you enable it, to unlock the App and to confirm payment operations. Biometric authentication is performed entirely on your device by the operating system. We never receive, see, or store your biometric data.
Each permission is optional and can be managed at any time from your device settings.
5. How We Use Your Information
We use the information we collect for the following purposes:
- Account Management: To create your account, manage it, verify your identity, and authenticate your sessions.
- Transaction Processing: To sell and redeem vouchers, process purchases, calculate and add cashback, execute transfers and gifts, and process mobile recharge and bill payments.
- Referrals: To attribute registrations completed through your referral code and to grant the corresponding rewards.
- Communication: To send transaction confirmations, offer and promotion notifications, and important account-related alerts via push notifications or SMS.
- Service Improvement: To analyze usage patterns and improve the App's features, performance, and user experience.
- Security and Fraud Prevention: To detect, prevent, and address fraudulent or unauthorized activities.
- Legal Compliance: To comply with applicable laws, regulations, and legal obligations.
We do not use your personal information for third-party advertising.
6. Information Sharing
We do not sell your personal information. We share your information only with the following parties and only to the extent necessary:
- Payment Providers: Payment information required to process voucher purchases through the method you choose — Paymera for card payments, or Sham Cash. Card details are entered directly with the payment provider; we do not store full card numbers.
- Telecom Operators and their Payment Gateway: The mobile number and amount required to execute mobile recharge and bill payment operations with MTN or Syriatel, processed through the gateway used by our servers (OzonePay).
- SMS Provider: Your mobile number, in order to deliver one-time verification codes.
- Google (Firebase): Your device push token for Firebase Cloud Messaging notifications, and crash and diagnostic data through Firebase Crashlytics.
- Google Maps: Location-related data to display partner merchant locations within the App.
- Partner Merchants: Transaction details necessary for completing purchases and processing returns. Personal contact information is not shared with merchants.
- Legal Authorities: When required by law, court order, or government regulation, or to protect the rights, property, or safety of the Company, its users, or the public.
7. Tracking and Advertising
- The App does not contain any advertising network or third-party tracking SDK.
- We do not track your activity across other companies' apps or websites, and we do not share your data for cross-app advertising or data brokerage.
- We do not sell your personal information.
8. Data Storage and Security
- Your personal data is stored on secure servers protected by industry-standard security measures.
- We use encryption for data transmission (SSL/TLS) and secure storage practices.
- Access to personal data is restricted to authorized employees who need it to perform their duties.
- Despite our efforts, no method of electronic storage or transmission is 100% secure. We cannot guarantee the absolute security of your data.
9. Data Retention
- We retain your personal information as long as your account is active and to the extent necessary to fulfill the purposes described in this Policy.
- Transaction records are kept for the period required by applicable financial and commercial laws in the Syrian Arab Republic.
- After account closure, we may retain certain information as required by law or for legitimate business purposes (such as dispute resolution and fraud prevention).
10. Your Rights
You have the right to:
- Access: Request access to the personal information we hold about you.
- Correction: Request correction of inaccurate or incomplete personal information. You can update your profile information directly from within the App.
- Deletion: Delete your account and request deletion of your personal data at any time, directly from Settings > Account and Security > Delete Account, or by contacting us at support@sky-cashback.com. Transaction records that we are required to keep under applicable financial and commercial laws are retained as described in "Data Retention".
- Restriction of Processing: Request restriction of processing of your personal information under certain circumstances.
- Objection: Object to the processing of your personal information for marketing purposes.
- Withdrawal of Consent: Withdraw your consent to push notifications, location access, camera, or photo access at any time through your device settings.
To exercise any of these rights, contact us at: support@sky-cashback.com
11. Children's Privacy
The App is not intended for use by persons under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that a child under 18 has provided us with personal information, we will take steps to delete such information.
12. Third-Party Links and Services
The App may contain links to third-party websites or services (such as partner merchant websites). We are not responsible for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any third-party services you access.
13. Push Notifications
- We use Firebase Cloud Messaging (FCM) to send push notifications regarding transactions, offers, promotions, and account-related updates.
- You can manage your notification preferences through your device settings at any time.
14. Changes to This Policy
- We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws.
- We will notify you of material changes through the App or via your registered communication channels.
- Continued use of the App after changes constitutes acceptance of the updated Policy.
15. Contact Us
For any questions, inquiries, or requests regarding this Privacy Policy, contact us via:
- Email: support@sky-cashback.com
- Phone: 0995116600
- Landline: 2130100
- Address: Damascus – Customs Square – Free Zone – Sky Building – Ground Floor