Privacy Policy

Bank Alakhira ("we", "our", or "us") is a non-profit charitable organization based in Baghdad, Iraq. We operate the Bank Alakhira mobile application (the "App") to facilitate donations and connect supporters with humanitarian aid efforts across Iraq.

This Privacy Policy explains how we collect, use, and protect your personal information when you use our App or visit our website.

We collect only what is necessary to provide our services. This includes:

• Account information — name, email address, and phone number when you register.
• Payment information — processed securely through our payment provider; we do not store full card numbers.
• Donation history — records of your contributions for receipts and transparency reports.
• Device information — device type, operating system, and app version for technical support.
• Usage data — screens visited and features used (anonymised) to improve the App.
• Location — only if you explicitly grant permission, to show nearby campaigns.

Your information is used solely to:

• Process donations and send you official receipts.
• Maintain and personalise your account.
• Send donation updates, impact reports, and campaign alerts (you can opt out anytime).
• Comply with legal and financial reporting requirements.
• Prevent fraud and ensure the security of our platform.
• Improve the App based on anonymised usage patterns.

We do not share your personal information except in the following limited circumstances:

• Payment processors — to securely handle transactions.
• Cloud infrastructure — our hosting providers operate under strict data protection agreements.
• Legal obligations — when required by Iraqi law or a valid court order.
• Organisational transfers — in the unlikely event of a merger, your data stays protected under the same policy.

We retain your personal data for as long as your account is active or as required by law. Donation records are kept for a minimum of 7 years to comply with financial regulations.

You may request deletion of your account at any time. We will remove your personal data within 30 days, except where retention is legally required.

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — update or correct inaccurate information.
• Deletion — ask us to delete your account and personal data.
• Opt-out — unsubscribe from marketing communications at any time.
• Portability — receive your data in a commonly used, machine-readable format.

To exercise any of these rights, contact us at the email below.

We implement industry-standard security measures including TLS encryption for data in transit, encrypted storage for sensitive data, and regular security audits of our platform.

While we take every reasonable precaution, no system is completely infallible. Please use a strong, unique password and enable any available two-factor authentication options.

Our App is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page and, where appropriate, notify you via the App or email.

Continued use of our App after changes are posted constitutes your acceptance of the updated policy.