Privacy Policy
Last updated: April 13, 2026
China Pack ("we", "our", "us") operates the China Pack mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App.
1. Information We Collect
Information you provide directly:
- Account information: Name, email address, and password when you register
- Profile information: Phone number and delivery address (optionally including precise GPS coordinates if you choose to drop a pin or share your current location for delivery)
- Order information: Products ordered, quantities, delivery preferences, and order notes
- Payment information: Payment is processed securely through our third-party payment provider (Whish Money). We do not store your full card number, CVV, or card expiry
- Communications: Messages you send to us via WhatsApp or email
Information collected automatically:
- Push notification token: A device identifier used to send you order updates and notifications. You can disable notifications in your device settings at any time
- Camera and photo library data: Only when you use the image-based product search feature. Photos are processed for search purposes only and are not stored permanently on our servers
- Precise location (optional): Only when you actively tap "Use my current location" or drop a pin in the map-based address picker. Your latitude and longitude are stored alongside your profile and order, and are used solely to help our delivery team find your address in Lebanon. We do NOT track your location in the background, and you can use the app without granting location permission by typing your address manually instead
- Crash reports: Anonymous crash and performance data via Sentry to help us improve app stability. No personally identifiable information is included
2. How We Use Your Information
| Purpose | Data Used |
|---|
| Process and deliver your orders | Name, address (and optional GPS coordinates if you set them on the map), order details, payment token |
| Send order status updates | Push notification token, email |
| Customer support | Name, email, phone, order history |
| Image-based product search | Photos you submit (temporary processing only) |
| Improve app stability | Anonymous crash reports |
| Account security | Email, hashed password |
3. Third-Party Services
We share limited data with the following third-party services, each of which has its own privacy policy:
- Whish Money — processes payments securely
- ImageKit — hosts product images
- Expo (Push Notifications) — delivers push notifications to your device
- Sentry — receives anonymous crash reports
- MongoDB Atlas — cloud database hosting
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
4. Data Security
We implement industry-standard security measures including:
- Passwords are hashed using bcrypt (we never store plaintext passwords)
- All data transmitted over HTTPS/TLS encryption
- JWT-based authentication with secure token handling
- Rate limiting on sensitive endpoints to prevent abuse
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services. Order records are kept for accounting and dispute resolution purposes. You may request deletion of your account and data at any time (see Section 7).
6. Your Rights
You have the right to:
- Access your personal data
- Correct inaccurate information in your profile
- Delete your account and associated data
- Opt out of push notifications via your device settings
7. Account Deletion
You can request full deletion of your account and all associated data by:
Deletion requests are processed within 7 business days.
8. Children's Privacy
Our App is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy in the App and updating the "Last updated" date.
10. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, contact us: