Privacy Policy

1 · Introduction

Welcome to Wasel (“the app”, “we”, “us”). Wasel connects pharmacies with drug warehouses and provides pharmacies with accounting, point-of-sale, and inventory management. This policy explains how we handle your information.

By using the app you agree to the practices described here; if you do not agree, please do not use the service.

2 · Information we collect

We collect the following, depending on your role (pharmacy or warehouse) and how you use the app:

Account information: name, phone number, email, user type and role.
Business information: pharmacy or warehouse name, address, city/state and area, and licence documents provided at registration.
Operational data: orders, inventory and its movements, invoices, sales and returns, expenses, customer payments and balances, cashier sessions.
Usage data: catalogue searches, screens opened, technical error logs.
Device data: device identifier, operating system, app version, and the push notification token (FCM).
Uploaded files: invoice images, payment receipts and documents, stored in a private (non-public) bucket.
Location data: only with your permission, to determine your distribution area and delivery schedule.

We do not collect identifiable patient health data, and we do not ask for payment card numbers — subscriptions are collected outside the app.

3 · How we use your information

To operate the service (create your account, route orders to the right warehouse, update your inventory and accounting); to synchronise your data across your organisation’s devices after a connectivity gap; to send operational notifications (order status, inventory alerts, registration approval, system announcements); to improve the app and diagnose faults; and to protect the service and comply with legal obligations. We do not sell your data and we do not use it for third-party advertising.

A warehouse you send an order to sees that order, its items, your pharmacy name and the delivery address — it does not see your accounting, sales, inventory or your other suppliers. Pharmacies see a warehouse’s publicly listed items, quantities, prices and offers. Technical service providers (hosting and database, file storage, and Google Firebase for push notifications) process data on our behalf only. We disclose data to authorities only under a binding legal request.

5 · Local storage and offline operation

Wasel is designed to work offline: a copy of your operational data is stored in a local database on your device and uploaded to our servers when connectivity returns. Two consequences follow — securing your device is part of securing your data, and uninstalling the app clears the local copy but does not delete your account on our servers.

6 · Device permissions and notifications

Camera (barcode scanning and invoice capture — used live, no video is recorded), photos and files (selecting an invoice or document to upload), location (optional, to determine your distribution area), and notifications (order and inventory alerts). Each permission is requested only when needed and can be declined or revoked from your device settings.

7 · Data retention

We retain your data while your account is active. Following a deletion request we erase your account and personal data within 30 days, with one important exception: financial and accounting records tied to transactions that actually occurred (invoices, delivered orders, payments) may need to be retained for the period required by commercial and tax law, in a restricted form used only for that purpose.

8 · Your rights and account deletion

At any time you may:

access and request a copy of the data associated with your account,
correct inaccurate information from inside the app or by contacting us,
withdraw a permission you granted (location, notifications),
delete your account and data.

Deletion steps and what is erased are on a dedicated page: Delete your account.

9 · Security

Traffic is encrypted end-to-end over HTTPS; passwords are stored as one-way bcrypt hashes that nobody — including us — can reverse; sessions use short-lived JWTs with refresh tokens; per-role and per-user permissions restrict what each employee can see; and uploaded files are kept in a private bucket reachable only through short-lived signed URLs.

No system is 100% secure. We make a reasonable effort to protect your data — please protect your password and do not share it.

10 · Children

Wasel is intended for pharmaceutical businesses and their staff, not for anyone under 18. We do not knowingly collect children’s data, and we delete it if we become aware of it.

11 · Changes to this policy

We may update this policy. We will change the “Last updated” date above, and for material changes we will notify you inside the app before they take effect.

12 · Contact us

For any question about your privacy, or to request a copy of your data or its deletion:

Email: support@waselpharma.com
WhatsApp: +60 XX XXX XXXX
Address: Kuala Lumpur, Malaysia

Or via the contact page.