Privacy Policy
Who we are
This Privacy Policy describes how Sharifi Neya Tourist & Travel Agency (“we”, “us”) collects, uses, shares, and protects personal information when you use our website at https://sharifineya.com, our Android and iOS apps (bundle ID com.sharifineya.mobile), and related booking services.
Operator: Sharifi Neya Tourist & Travel Agency. License: Afghan Tour Organization License No. ATO-KBL-1296. D-U-N-S Number: 851750834. Registered office: Office #126, Floor 2, Hakim Sanayi Market, Kote Sangi – Gulay Dawa Khana, Kabul, Afghanistan. Email: [email protected]. Phone: +93 79 800 4448.
Information we collect
Account and contact information: name, email address, phone number, user ID, password or authentication tokens, and optional profile details such as date of birth.
Travel and passenger details: names, gender, date of birth, nationality, passport number, passport issue and expiry dates, and related ticketing data needed to book flights, buses, and other travel services.
Financial and purchase information: wallet and ledger balances, booking amounts, payment method, transaction references, and purchase or booking history. Card or HesabPay checkout details are processed by the payment provider; we do not store full payment-card numbers in the app.
User content: photos you choose to upload (for example a profile picture or a deposit receipt), and messages you send in in-app inbox or support threads.
Device and log information: IP address, device or browser type, app version, language, approximate location derived from IP for session security, login session identifiers, and crash or error logs generated by our servers.
Search and booking activity: routes, dates, and other search or booking details you submit so we can complete your request.
Photos, Face ID, and device permissions
Photos are collected only if you pick them in the app (profile picture or payment receipts). On iOS the system photo-library permission is requested first. We do not access your camera or microphone.
If you enable app lock, Face ID, fingerprint, or your device PIN is used only on the device to unlock the app. Biometric data is not sent to our servers.
Device identifiers and push notifications
Our mobile apps collect device or other IDs required to deliver optional push notifications. These include Expo push tokens, Firebase Cloud Messaging (FCM) tokens on Android, Apple Push Notification service (APNs) tokens on iOS, and related app-installation identifiers.
These identifiers are sent off-device to our servers and to push delivery providers (Expo, Google, and Apple) so we can send booking alerts and other notifications you enable. Notification permission is optional. If you allow it, the token is stored until you turn notifications off, unregister the device, or request deletion.
We do not use the Android Advertising ID, Apple’s Identifier for Advertisers (IDFA), or App Tracking Transparency to track you across other companies’ apps or websites for advertising.
How we use information
We use this information to create and operate your account, complete bookings and ticketing, process payments with partners, show wallet and booking history, send service communications (email, in-app, and optional push), provide customer support, prevent fraud and abuse, keep sessions secure, improve reliability, and comply with tax, accounting, and legal obligations.
We do not use personal information for third-party advertising or sell it to data brokers.
How we share information
Travel suppliers: airlines, global distribution systems (GDS), bus operators, and similar providers as needed to search, book, and issue tickets.
Payment processors: HesabPay and other payment partners you choose at checkout.
Sign-in providers: Google, Facebook, or Microsoft if you use those buttons to create or access an account.
Push and infrastructure: Expo, Google Firebase Cloud Messaging, Apple Push Notification service, and our hosting providers, only as needed to run the service.
We may disclose information if required by law or to protect rights, safety, or the integrity of the service. We do not sell your personal information.
Retention and security
We keep account, booking, passenger, and payment records for as long as needed to provide the service and to meet operational, tax, and legal requirements. Push tokens are kept while the device is registered for notifications.
We use HTTPS in production, store mobile login tokens in the device secure store, and apply reasonable administrative and technical safeguards. No method of transmission or storage is perfectly secure.
Your choices and rights
You can review and update much of your profile in account settings. You can decline notification permission or turn notifications off in the app to stop collecting a push token for that device. You can revoke other logged-in sessions from Security settings.
Depending on applicable law, you may request access, correction, or deletion of personal data. Email [email protected] (or use in-app support) to exercise these rights. We may need to retain certain booking and financial records where the law requires it.
Account deletion
To request deletion of your account and associated personal data, contact us at [email protected] from the email on the account, or message support in the app. We will process verified requests and remove or anonymize personal data we no longer need to keep for legal or ticketing obligations.
Children
Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13 for account creation. Passenger details for a child traveling with an adult may be collected only as needed to issue a ticket, provided by the booking adult.
Changes
We may update this Privacy Policy when our practices or legal requirements change. The “Last updated” date at the top of this page will change when we do. The current version is always published at https://sharifineya.com/privacy and in the Android and iOS apps.