Tajwaal ("Tajwaal", "we", "us", or "our") operates the Tajwaal mobile application and the Tajwaal website (together, the "Service"), which lets travellers based in Iraq search and book flights, purchase eSIM data plans, and manage related orders. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and the choices you have. By using the Service you agree to the practices described here.
1. Information we collect
a) Account information you provide. When you create a Tajwaal account we collect your full name, phone number (used as your login identifier and verified by an OTP sent by SMS or a messaging app), email address, preferred language and preferred display currency.
b) Traveller and passenger details. To issue an airline ticket we collect each passenger's full name, date of birth, gender, nationality, passport number and passport expiry date. You may save these as reusable traveller profiles for faster checkout. Optionally you can scan a passport with your device camera; the image is processed to extract these fields and is not retained beyond what is needed to complete the booking.
c) eSIM and device information. When you purchase an eSIM we collect the package and country you selected and, after activation, the ICCID and usage metadata returned by our eSIM provider so we can show your remaining data and validity. To install the eSIM we may surface device-level identifiers such as your device model and operating system version.
d) Payment information. Payments are processed by our Iraqi payment partners. Tajwaal does not store full card numbers or wallet credentials. We receive a transaction reference, the amount, the currency and a status (success/failure) which we associate with your order.
e) Order and support information. We keep records of your bookings, eSIM purchases, refunds, loyalty point activity, promo codes you redeem, and any messages you exchange with our support team via in-app chat or messaging apps.
f) Device and usage data collected automatically. When you use the Service we collect your device type, OS version, app version, IP address, language settings, push notification token, and crash/diagnostic logs. We use app-integrity checks to confirm that requests originate from a genuine, unmodified Tajwaal app, and a push notification service to deliver booking and order notifications.
2. How we use your information
We use the information described above to: (i) create and authenticate your account; (ii) search inventory and complete bookings with airline GDS partners and eSIM providers; (iii) issue tickets, eSIM QR codes and receipts and send them to you over the Service, email and messaging apps; (iv) process payments, refunds and wallet credits; (v) provide customer support and resolve disputes; (vi) prevent fraud, abuse and unauthorised access; (vii) operate loyalty points and promotional codes; (viii) comply with legal, tax and regulatory obligations in Iraq; and (ix) improve the Service through analytics and crash reporting.
3. Sharing with third parties
We share the minimum personal information needed to deliver the Service with: airline GDS providers to search flights and issue tickets; eSIM providers to provision and manage eSIMs; payment processors; messaging and SMS providers to send tickets and OTPs; cloud and CDN providers to host static assets; and cloud services for push notifications and app integrity.
We do not sell your personal information. We may disclose information to law-enforcement, regulators or courts when required by Iraqi law or to protect the rights, property or safety of Tajwaal, our customers or the public.
4. International transfers
Some of our partners (airline GDS, eSIM, cloud and CDN providers) operate outside Iraq. When we transfer your information internationally we rely on the partner's standard contractual safeguards and limit the data shared to what is strictly necessary to deliver the requested service.
5. Retention
We retain your account, traveller profiles, bookings, payment records and support communications for as long as your account is active and for a reasonable period afterwards in order to honour refunds, respond to disputes, satisfy accounting and tax obligations, and defend legal claims. Diagnostic logs and analytics events are kept for a shorter window and are aggregated or pseudonymised where possible.
6. Your choices and rights
You can review and update your profile and saved traveller details from the Profile section of the app. You can manage push notifications from your device settings. To request a copy of your personal information, correction of inaccurate data, or to ask a question about this Policy, contact us at the address below.
7. Account deletion
You can request deletion of your Tajwaal account at any time from Profile → Security → Delete Account inside the app, or by emailing us. When you request deletion we immediately deactivate your account, sign you out of every device, and stop using your personal data to operate the Service. We retain order, payment and support records for the minimum period required by Iraqi tax and consumer-protection law and for fraud-prevention purposes; once that period expires the remaining personal data is permanently removed or irreversibly anonymised. Some information may persist in routine backups for a limited period before it is overwritten.
8. Security
We protect your information with TLS in transit, hashed credentials at rest, role-based access control on our backend, and app-integrity checks on every request from the app. No system is perfectly secure, and you are responsible for keeping your phone number, OTP codes and device protected.
9. Children
The Service is intended for users aged 18 and over. We do not knowingly collect personal information from children. A parent or legal guardian may use the Service to book travel for a minor; in that case the adult is responsible for the minor's information they provide.
10. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the latest version. If we make material changes we will notify you in-app or by email before they take effect. Continued use of the Service after the effective date means you accept the updated Policy.
11. Contact
Questions or requests about this Privacy Policy, including data access and deletion requests, can be sent to: support@tajwaal.com