Privacy Policy

1. Who we are

Moaddi Solutions operates the platform. The goods in each machine are sold by the seller who runs that machine, whose name the app shows before you pay. For the orders you place with a seller, that seller receives the order details described under “Who sees it”.

Contact: info@moaddi.net

2. What we collect when you buy

• A device key. The first time the app opens it creates a random key that identifies your phone as a customer. We keep only a one-way fingerprint of it, never the key itself. There is no sign-up, no name and no password. To move to a new phone you can show a one-time code on the old one: it works once, for ten minutes, we keep only its fingerprint, and once the new phone uses it the old phone's key stops working and what the new phone had bought joins your account. On an iPhone the key can also travel with your phone's encrypted backup or a direct transfer to a new iPhone.
• Basic details about the phone: the language and region set on it and a short description of the device (for example “iOS 26”), plus the network address of each request, which we use only to protect the service from abuse.
• Your orders: the machine, the boxes, the price and the tax inside it, the time, whether the payment succeeded, any refund, and any report you make about an order, in your own words.
• Only if you choose to leave them: a phone number or an email address on a report, so the seller can reach you about it. We do not verify them, and we never send anything to them on our own initiative.
• If you write to us from the app (Settings, then “Contact us”): your message and, only if you choose to leave them so we can answer you, a name, an email address or a phone number, with your phone’s country, language and description. We do not verify them, and we use them only to answer that message.

3. What we do not collect

• Card details. You enter them in the payment provider’s own form (Stripe); they never reach our servers. We receive only whether the payment succeeded and its reference.
• Your location. The app uses Bluetooth only to connect to the machine in front of you, and never to find where you are.
• Photos or video. The camera only reads the code on the machine; nothing is recorded or kept. If you choose a photo of a code from your phone instead, the app reads the code on your phone and the photo is never sent or kept.
• Your face or fingerprint. If you lock the app with Face ID, a fingerprint or your passcode, your phone checks it; we never receive it, and whether the lock is on is kept only on your phone.
• Your contacts, microphone or other apps’ data.

4. Why we use it

• To show what a machine sells and its prices, take your payment and complete the sale.
• To open the box you paid for: our server builds the commands and your phone passes them to the machine over Bluetooth.
• To handle your reports and send money back when a box did not open.
• To read and answer what you write to us from the app.
• To keep the tax and accounting records the law requires of the seller and of us.
• To keep the service safe: limiting the number of requests and blocking a device that abuses it.

5. Who sees it

• The seller of the machine sees your order (what was bought, when and for how much). They see the phone number or email you left only on an order whose report is still open, and only to resolve it.
• The payment provider (Stripe) processes your payment under its own privacy policy.
• Our hosting and database providers store the data on our behalf and may not use it for anything else.
• What you write to us from the app is read by Moaddi’s own team, never by a seller. Our email provider delivers a copy of it to our mailbox, and carries our answer to the email address you left.
• Authorities, when the law requires it.
• We do not sell your data, we do not share it for advertising, and we do not use it to profile you.

6. People who work for sellers

Sellers, the people who fill their machines (restockers) and those who run the places machines stand in sign in with an email address and a password. We store the password only as a one-way hash, and what they do on machines is recorded in the seller’s own activity log.

7. Where it is kept

The platform’s servers and database are in Singapore (Amazon Web Services, through Vercel and MongoDB Atlas). Using the app therefore transfers your data to Singapore, where it is protected as this policy describes. If we move it, we will update this section first.

8. How long we keep it

Orders and payment records are kept for as long as tax and accounting laws require, even after you stop using the app; they identify a device, not a person. A phone number or email left on a report stops being visible to the seller as soon as the report is resolved, and you may ask us to delete it. A message you write to us is kept so we can answer it and know what was said, until you delete your account or ask us to delete it.

9. Security

Every connection is encrypted (HTTPS). The keys and passwords that open machines never leave our servers, and your device key is stored on your phone in its secure keychain (on an iPhone it may travel only inside an encrypted backup or a direct transfer to your new iPhone). No system is perfectly secure, but we design the platform so that what could leak is as little as possible.

10. Deleting your account

You can delete your account from the app at any time: Settings, then “Delete my account”. At that moment we delete the phone number, email and name you left, your name on your past orders, the messages you wrote to us, and your device’s key and description, and the key stops working. The sales records themselves — what was sold, its price and tax, the payment and any refund — stay with the seller without your name, because the law requires sellers to keep them. Your orders no longer show in the app afterwards, and this cannot be undone.

Sellers, restockers and the people who run places have accounts made by the business they work for, outside the app: to delete one, ask that business, or write to info@moaddi.net.

11. Your rights in the United States

If you live in California, or in another state with a consumer privacy law (such as Virginia, Colorado, Connecticut or Texas), you have the right:

• to know what personal information we collect, use and disclose, and to get a copy of it;
• to ask us to correct it;
• to ask us to delete it, except what a law requires us to keep (such as sales records);
• to opt out of the sale or sharing of your personal information for targeted advertising — we do neither;
• not to be treated differently for using any of these rights.

Write to info@moaddi.net. We answer within 45 days, may ask for details that let us find your device’s records, and accept a request from an agent you have authorised. Because the platform’s servers are in Singapore, your data is processed outside the United States as this policy describes.

12. Children

The app is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has given us personal information, write to us and we will delete it. Paying requires a payment card.

13. Changes

When this policy changes we publish the new version on this page with its date. If a change is significant we will also say so in the app.

14. Contact

Moaddi Solutions — info@moaddi.net