Privacy Policy

This Privacy Policy describes how Sama Investment Company, the operator of the Sky Cashback application ("App"), collects, uses, stores, and protects your personal information. By using the App, you agree to the practices described in this Policy.

2.1 Information You Provide

• Required to register: Full name, mobile number, and a password (stored encrypted).
• Optional, if you choose to add it later: Email address, address, gender, and a profile picture.
• Verification: One-time verification codes (OTP) sent via SMS for account verification.
• Support: The content of complaints and support requests, including any images or files you choose to attach.
• Split Payment application (only if you apply for financing): Employment and income information — employer name, job title, and monthly salary — together with any additional income or expense information requested in the application form at the time; your bank details — bank name, account holder name, and account number; and supporting documents you upload, being your national ID (front and back), your most recent payslip, and your bank statement for the last three months.

2.2 Usage-Generated Information

• Purchase transaction records (amounts, dates, relevant partner merchants).
• Cashback records, vouchers value, and cashback value.
• Voucher purchase, redemption, gift, and usage records.
• Transfer records for amounts you send to or receive from other users.
• Mobile recharge and bill payment records, including the mobile number you recharge.
• Return records.
• Split Payment records: your applications and their status, the financed purchases, and the related invoices.
• Referral records: the referral code issued to you, and the registrations completed through it.

2.3 Automatically Collected Information

• Device information (device type, operating system version, app version, language).
• Firebase Cloud Messaging (FCM) device token for sending notifications.
• App usage data and interaction logs.
• Crash reports and diagnostic data collected through Firebase Crashlytics to help us keep the App stable.

• The App can access your device's precise location only while the App is in use, and only after you grant permission.
• We use your location to show partner merchants and points of charge near you, and to center the map on your position. For the "nearby" feature, your coordinates are sent to our servers in order to return nearby results.
• We do not track your location in the background, and we do not build a history of your movements.
• You can revoke location access at any time from your device settings. The App remains usable without it.

We request the following permissions only when they are needed for a feature you use:

• Camera: To scan QR codes for payments, transfers, and prepaid card redemption. We process the code only; we do not record or store video.
• Photos and camera: To let you set a profile picture, attach an image to a complaint or support request, and upload the documents required for a Split Payment application. The camera is also used to scan QR codes.
• Notifications: To send push notifications about your transactions and your account.
• Biometrics (fingerprint / Face ID): Used, if you enable it, to unlock the App and to confirm payment operations. Biometric authentication is performed entirely on your device by the operating system. We never receive, see, or store your biometric data.

Each permission is optional and can be managed at any time from your device settings.

This section applies only if you apply for Split Payment. If you do not, none of the processing below takes place.

• Split Payment is financed by a Financing Bank on a Murabaha basis. To study your application, the Bank needs personal, employment, income, and banking information, and it makes the credit decision itself.
• We deliver to the Financing Bank: the information you entered in the application (employment, income, and any additional declared income or expenses), your bank details, the identity and income documents you uploaded (national ID front and back, payslip, bank statement), and, for the purchase itself, the invoice issued by the partner merchant together with the description of the goods and the photographs of them.
• The Financing Bank will contact you directly to complete the credit procedures. From that point, the Bank processes your data as an independent data controller, under its own privacy policy and its contract with you — not on our behalf.
• Because the Bank holds its own copy of your application, deleting your account with us does not delete the Bank's records. To exercise your rights over the data held by the Bank, contact the Bank directly.
• We use this information solely to submit and follow up on your application, to sell the financed goods to the Bank, and to pay the partner merchant. We do not use it for marketing and we do not sell it.

We use the information we collect for the following purposes:

• Account Management: To create your account, manage it, verify your identity, and authenticate your sessions.
• Transaction Processing: To sell and redeem vouchers, process purchases, calculate and add cashback, execute transfers and gifts, and process mobile recharge and bill payments.
• Financing: To submit and follow up on Split Payment applications with the Financing Bank, as described above.
• Referrals: To attribute registrations completed through your referral code and to grant the corresponding rewards.
• Communication: To send transaction confirmations, offer and promotion notifications, and important account-related alerts via push notifications or SMS.
• Service Improvement: To analyze usage patterns and improve the App's features, performance, and user experience.
• Security and Fraud Prevention: To detect, prevent, and address fraudulent or unauthorized activities.
• Legal Compliance: To comply with applicable laws, regulations, and legal obligations.

We do not use your personal information for third-party advertising.

We do not sell your personal information. We share your information only with the following parties and only to the extent necessary:

• Payment Providers: Payment information required to process voucher purchases through the method you choose — Paymera for card payments, or Sham Cash. Card details are entered directly with the payment provider; we do not store full card numbers.
• Telecom Operators and their Payment Gateway: The mobile number and amount required to execute mobile recharge and bill payment operations with MTN or Syriatel, processed through the gateway used by our servers (OzonePay).
• SMS Provider: Your mobile number, in order to deliver one-time verification codes.
• Google (Firebase): Your device push token for Firebase Cloud Messaging notifications, and crash and diagnostic data through Firebase Crashlytics.
• Google Maps: Location-related data to display partner merchant locations within the App.
• Financing Bank: If you apply for Split Payment — your application data, identity and income documents, bank details, and the purchase invoice with the description and photographs of the goods, so that the Bank can study the application and complete the financing. See the "Split Payment and the Financing Bank" section above.
• Partner Merchants: Transaction details necessary for completing purchases and processing returns. Personal contact information is not shared with merchants. For a Split Payment purchase, the merchant issues the invoice and provides the description and photographs of the goods.
• Legal Authorities: When required by law, court order, or government regulation, or to protect the rights, property, or safety of the Company, its users, or the public.

• The App does not contain any advertising network or third-party tracking SDK.
• We do not track your activity across other companies' apps or websites, and we do not share your data for cross-app advertising or data brokerage.
• We do not sell your personal information.

• Your personal data is stored on secure servers protected by industry-standard security measures.
• We use encryption for data transmission (SSL/TLS) and secure storage practices.
• Access to personal data is restricted to authorized employees who need it to perform their duties.
• Despite our efforts, no method of electronic storage or transmission is 100% secure. We cannot guarantee the absolute security of your data.

• We retain your personal information as long as your account is active and to the extent necessary to fulfill the purposes described in this Policy.
• Transaction records are kept for the period required by applicable financial and commercial laws in the Syrian Arab Republic.
• Split Payment applications, including the documents you uploaded, are retained for the period required by the applicable financial and commercial laws and for the duration of the financing. The Financing Bank retains its own copy under its own policy, which we do not control.
• After account closure, we may retain certain information as required by law or for legitimate business purposes (such as dispute resolution and fraud prevention).

You have the right to:

• Access: Request access to the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information. You can update your profile information directly from within the App.
• Deletion: Delete your account and request deletion of your personal data at any time, directly from Settings > Account and Security > Delete Account, or by contacting us at support@sky-cashback.com. Transaction records that we are required to keep under applicable financial and commercial laws are retained as described in "Data Retention". Deletion does not extend to the copy of a financing application held by the Financing Bank, nor does it cancel any obligations owed to it.
• Restriction of Processing: Request restriction of processing of your personal information under certain circumstances.
• Objection: Object to the processing of your personal information for marketing purposes.
• Withdrawal of Consent: Withdraw your consent to push notifications, location access, camera, or photo access at any time through your device settings.

To exercise any of these rights, contact us at: support@sky-cashback.com

The App is not intended for use by persons under 18 years of age. We do not knowingly collect personal information from children under 18. If we learn that a child under 18 has provided us with personal information, we will take steps to delete such information.

The App may contain links to third-party websites or services (such as partner merchant websites). We are not responsible for the privacy practices or content of third-party services. We encourage you to review the privacy policies of any third-party services you access.

• We use Firebase Cloud Messaging (FCM) to send push notifications regarding transactions, offers, promotions, and account-related updates.
• You can manage your notification preferences through your device settings at any time.

• We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws.
• We will notify you of material changes through the App or via your registered communication channels.
• Continued use of the App after changes constitutes acceptance of the updated Policy.

For any questions, inquiries, or requests regarding this Privacy Policy, contact us via:

• Email: support@sky-cashback.com
• Phone: 0995116600
• Landline: 2130100
• Address: Damascus – Customs Square – Free Zone – Sky Building – Ground Floor