Privacy Policy

Effective date: 15 May 2026
Last updated: 7 October 2026

This policy explains what Pyro Business and Pyro Express ("the Service"), operated by Pyro for Agency & Commission Trade Co. in Kuwait, collect, why, and what choices you have. The Service is used by shops and their staff to run invoicing, point-of-sale, repairs, store management, and deliveries, and by carriers and their drivers to carry out those deliveries; it is not aimed at the general public.

Who this covers

Vendors and their team - the businesses and staff who sign in to Pyro Business.
Customers of vendors - the individuals a vendor sells to, buys from, or repairs for, whose details a vendor records on an invoice, repair, or delivery. Customers do not have accounts.
Carriers and their drivers - the delivery businesses and the drivers who carry out deliveries through Pyro Express.

You, the vendor, decide what customer information to collect and are responsible for obtaining your customers' consent. Pyro stores and processes that information on your behalf to provide the Service.

What we collect

About your account:

Your mobile number, which you prove is yours with a one-time code sent to it over WhatsApp. A business can be opened only from an account with a verified mobile number.
Your name, and your email address if you add one or were invited by email.
Your password. It is stored only in scrambled (hashed) form and cannot be read by us.
If you sign in with Apple or Google, where the app offers it: the account identifier Apple or Google gives us and, where you allow it, your name and email address (Apple may give us a private relay address instead of your real one). If you sign in with Apple, we may also keep a token from Apple for one purpose only: to revoke your Sign in with Apple authorization when your account is deleted. We do not keep any sign-in token from Google.
A record of the terms and privacy policy you accepted, and when.

About your business and team:

Business name, trade name (English and Arabic), and business category.
Owner and staff names, phone numbers, and email addresses where given.
The documents a business uploads for approval: its commercial licence and the civil ID of its authorised signatory. If you use invoice payment links, also your business's bank account (IBAN) document.
Your shop logo, signature, invoice branding, and your saved pickup locations (up to ten named business addresses, each with a contact phone and an optional map pin; the location you choose for a delivery is shared with the carrier and driver so they can collect the order).

About your customers (entered by you):

Full name and, where you record it, customer ID number, date of birth, and nationality.
Phone number and address.
Photos of the customer's ID card (front and back) and the customer's signature.
The identity details themselves are read on your own device, by the phone's built-in text recognition, from the machine-readable zone printed on the back of the card. The card is not sent anywhere to be read, and the front is kept as a picture only.

About transactions:

Invoice details: items, serial or IMEI numbers, condition, quantities, and prices.
Sell or buy direction, the payment method recorded (cash, KNET, or card), and any refunds, voids, or added service charges.

About your operating costs and purchases (entered by you):

Costs you record to work out your profit: a name, the amount, how often it recurs, and the day it falls due. A cost you name after a person - a salary line, for example - stores that person's name as you typed it.
Purchases from suppliers: the supplier name as you enter it, what was bought, the amount, and the date.
Records of costs marked as paid in earlier versions of the app are kept with your other records. They never change any figure.

About repairs:

The item taken in, its serial or IMEI number where recorded, the reported issue, photos of the item at intake, the promised ready-by date, the repair's status history, and the repair warranty period printed on the invoice.

About deliveries:

The drop-off area and address, the recipient's name and phone as entered, the delivery fee, the delivery's status history, and the photo the driver takes as proof of delivery.
For drivers: name, contact details, and the vehicle details the driver or carrier enters (type, plate, model, and colour).
For drivers, in the Pyro Express app only: the driver's current location while the driver is Online. Drivers start Offline each time they open the app and choose when to go Online. While a driver is Online, Pyro Express shares the location with the driver's carrier - including when the app is in the background and not in use - so the carrier can assign deliveries near the driver and see the driver on its fleet map; the platform team can also see it to operate the Service. It is not location history: only the latest position is kept, it is replaced as the driver moves, and the stored location is removed when the server processes the driver going offline, signing out, or being deactivated.
The Pyro Business app never collects location in the background. It uses your location only while the app is open, when you choose to place a pickup-point pin.

About your subscription and payments:

From the App Store or Google Play: a record of your subscription purchase - which subscription, its dates, its renewal status, and the store's transaction reference. We never receive your card or payment details.
Your platform credit balance and its history, and the records of payment links we send you and their outcome.
If you use invoice payment links: each link, whether and when it was paid, the fees, any refund owed to your customer, and the transfers of your proceeds.
Records of subscription terms paid to Pyro directly before subscriptions moved to the stores.

Flagged-device reports:

Serial or IMEI numbers you report as belonging to stolen devices, shared across the vendor network.

Technical:

Sign-in and security information needed to keep your account safe, including a short-lived record of each one-time code request (the mobile number, the time, and the internet address it came from), used to stop abuse.
A record of the WhatsApp messages we send for you, holding only the last four digits of the recipient's number, whether the message was delivered, and what it was for.
When and from where you use the Service: your internet address, your app or browser type, and the time.
A notification token for your device, so we can deliver app notifications.
Automatic crash and error reports when something goes wrong in the app: the device model, operating-system version, app version, and the technical trace of the failure. These carry no invoice, customer, or financial content, and we use them only to find and fix faults.

Your data belongs to you. We don't show ads, and we never sell, rent, or trade your information or your customers'.

Why we collect it

To create your account, sign you in, confirm that your mobile number is yours, and keep your account secure.
To review and approve a business before it can operate.
To create and store invoices, ring up sales, and keep your commercial records organised.
To run your repair and service jobs from intake to hand-back, including the photos and dates that document them.
To arrange, dispatch, and track deliveries, and to collect the delivery fee from your customer.
Where you use invoice payment links, to collect your customer's payment, pay your proceeds to your business, and record any refund owed.
To send documents you choose to send - such as an invoice PDF to your customer over WhatsApp.
To show you analytics about your own business.
To verify identity at the point of a transaction, as your business requires.
To operate the shared flagged-device registry that helps vendors avoid handling stolen goods.
To keep your subscription access in step with the store, manage platform credit, send service messages, and provide support.
To keep the platform secure and investigate misuse.

Where your data is stored

Database and sign-in: Supabase (Supabase Inc.), hosted in Frankfurt, Germany. Holds your account, invoices, customers, repairs and deliveries.
Files (logos, signatures, ID photos, business documents, repair intake photos, proof-of-delivery photos): Cloudflare R2 (Cloudflare, Inc.), stored privately and encrypted at rest. Files are reachable only through short-lived, signed links.
Email: Resend (Plus Five Five, Inc.), used to send service emails from noreply@pyro.com.kw, such as sign-in and password emails, invitations, receipts, and payment links.
WhatsApp messages: delivered through Wasender. One-time sign-in and security codes; invoice PDF documents, delivery-fee payment links, delivery status updates, repair received and ready messages, and invoice payment links sent to your customer at your instruction; and platform credit payment links we send you.
Sign in with Apple and Google: Apple (Apple Inc.) and Google (Google LLC), when you choose to sign in with them. They confirm who you are to us; we do not send them your business data.
Maps: map images in the app are loaded from OpenStreetMap (OpenStreetMap Foundation), which receives your device's internet address and the map area being viewed. When a driver taps for directions, the destination is opened in Google Maps (Google LLC).
Push notifications: Google Firebase Cloud Messaging (Google LLC), used to deliver app notifications. We send a device token and the message content; no other data is shared with it.
Crash reports (app only): Google Crashlytics (Google LLC), used to see why the app crashed so it can be fixed. It receives the technical crash trace, the device model and OS version, which app it was (Business or Express) and the app version. It is NOT sent your name, your email, your shop, or any invoice or customer data.
Subscription payments: the Apple App Store (Apple Inc.) and Google Play (Google LLC). You buy and renew your subscription with them, under their terms. Your payment details stay with Apple or Google; Pyro receives a record of the purchase - which subscription, its dates, its renewal status, and the store's transaction reference - to turn your access on and keep it in step with the store.
Other payments: UPayment, a licensed payment processor in Kuwait, used for platform credit top-ups, delivery fees, and invoice payment links. It receives the amount and what the payment is for, and the payer's details needed for the payment page: the customer's name and mobile number for a delivery fee, the customer's mobile number for an invoice payment link, and the business's name, email, and phone for a platform credit top-up. It also processed subscription payments made to Pyro before subscriptions moved to the App Store and Google Play; those records are kept with your billing history. Card details are entered with UPayment and are not stored by Pyro.
Website, dashboard, and invoice PDFs: Vercel (Vercel Inc.), served from Frankfurt, Germany. It hosts the website and dashboard and generates invoice PDF documents.
Reading an ID card: done entirely ON YOUR DEVICE, by the phone's own text recognition. The photo is not sent anywhere to be read.

These providers process data on our instructions to run the Service, and only for the purpose described beside each one. Your data is encrypted in transit and at rest.

How long we keep it

Invoices, customer records, repairs, and deliveries: kept for at least 5 years, in line with Kuwait commercial record-keeping expectations. Voided and refunded invoices are kept as part of this legal record.
Customer ID details (civil ID number, date of birth, and ID expiry) and ID photos are removed 5 years after the customer's last activity, or sooner if the customer record is deleted.
Repair intake photos, proof-of-delivery photos, and delivery dispute evidence remain with their record for as long as that record is kept.
Your costs and supplier purchases: kept alongside your invoices for as long as your invoices are kept, because they form part of the same commercial record.
Flagged-device reports: kept for at least 5 years.
Business approval documents (the commercial licence, the authorised signatory's civil ID, the bank account (IBAN) document, and any other document uploaded for verification): the current ones are kept while the business is active. A document that is rejected or replaced is kept for 90 days after it was rejected or replaced. When a business is deleted, its approval documents are kept for 1 year after the deletion is final. After that point, the files are deleted within about 30 days.
Subscription purchase records from the stores, platform credit history, and payment records are kept as part of your billing record.
One-time code requests: kept for 24 hours. A code itself expires within minutes.
Records of WhatsApp messages we send (last four digits of the number only): kept for 180 days.
Records of when and from where you used the Service (internet address and app or browser type): we keep the most recent 90 days for each account; older records are removed the next time the account is used, and all of them when the account is deleted.
In-app notifications you have read are deleted 90 days after you read them.
Notification tokens for a device that has not been seen for 60 days are deleted.
Security and activity logs: kept for 1 year. When a business is deleted, we keep a record that it was deleted, with its financial totals but without contact details.
An Apple or Google sign-up that never completed the mobile-number step is deleted after 7 days of inactivity.
Files no longer attached to anything - for example the photos from a scan you abandoned before saving - are found and removed automatically by scheduled housekeeping. A removed file is held in a private recovery area for 30 days and then permanently erased.
Delivery tracking links go dark shortly after a delivery completes or is cancelled. We keep only a driver's latest live location; the stored location is removed when the server processes the driver going offline, signing out, or being deactivated.
Account data: kept while your account is active, and handled as described under "Deleting your account" below.

Deleting your account

Deleting a business (owner). The owner can delete the business from Settings. Its access stops at once, and for 30 days the owner can restore it by signing back in. After 30 days the business, its team accounts, its customers, and its files are permanently removed, except its approval documents, which are kept for 1 year after the deletion is final (see "How long we keep it"). If the business has a subscription bought through the App Store or Google Play, the removal waits until the store confirms that the subscription has ended, so deletion may stay pending until then.
Deleting your own account (team member). A team member can delete their own account from Settings. They are signed out on every device at once, the account cannot be restored from the app (the owner can invite them again), and it is permanently removed after 30 days.
Carriers and drivers. To delete a Pyro Express account, contact your carrier or email info@pyro.com.kw.
What we keep after deletion. Invoices, including voided and refunded ones, and the payment and billing records linked to them, are kept for the record-keeping period above, even after the business is deleted, because they are part of the commercial record. The record that a business was deleted is also kept, without contact details. The business's approval documents are kept for 1 year after the deletion is final, as described under "How long we keep it".
Sign in with Apple. If we hold a token from Apple for your account, we use it to revoke your Sign in with Apple authorization when the account is deleted, and then delete the token. If we do not hold one, the app shows you how to stop using Sign in with Apple for Pyro in your Apple account settings.
Store subscriptions are not cancelled by deletion. Deleting your account or your business does not cancel a subscription bought through the App Store or Google Play. Turn off auto-renewal in the store's subscription settings as well.

Keeping customers separate

Each vendor's customers are private to that vendor. There is no shared customer directory, no cross-vendor lookup, and no merging of customers between vendors. The only information shared across vendors is the flagged-device registry, which holds device serial/IMEI numbers, not customer profiles.

Who we share with

We share data only with the service providers listed above, and only as needed to run the Service. When you schedule a delivery, the assigned carrier and driver receive what they need to deliver it: the recipient's name, phone, address, and the items summary. While a driver is Online in Pyro Express, the driver's carrier sees the driver's current location, as described under "About deliveries". We may disclose information where required by law, or to protect the platform, its users, or the public.

Your choices and rights

Access and export: request a copy of your data by emailing info@pyro.com.kw.
Correction: edit your business and customer information in the app.
Deletion: delete your account or your business from Settings, as described under "Deleting your account". Data is removed after 30 days, except records we must keep for the record-keeping period and a deleted business's approval documents, which are kept for 1 year (see "How long we keep it"); a business with a store subscription is removed only once the store confirms the subscription has ended.
Flagged-device disputes: if you believe a report is wrong, contact support so it can be reviewed.

Children

The Service is for businesses and is not directed at children. We do not knowingly collect data from anyone under 18 as a user of the Service.

Changes

We may update this policy from time to time. The current version is always available in the app and on our website, and material changes will be communicated through the app.

Contact

Questions about your privacy or this policy? Contact us at info@pyro.com.kw.