Privacy Policy

[COMPANY LEGAL NAME], registered at [REGISTERED ADDRESS, CITY, COUNTRY], commercial registration [COMMERCIAL REGISTRATION / TRADE LICENCE NUMBER], is the controller of your personal data.

For any question about this policy, or to exercise any right described in it, contact [privacy@2go-eg.com]. Our data protection contact is [DATA PROTECTION OFFICER NAME AND EMAIL].

Account information: your email address, phone number, password (stored only as a cryptographic hash, never in readable form), the country you selected, and your chosen language.

Profile information you choose to add: display name, profile photo, date of birth, and gender. These are optional — the app works without them.

Location: when you ask to see offers near you, we read your device's location once to sort offers by distance. We do not track your location in the background or build a history of where you have been.

Device information: a device identifier and basic device details. We use these to keep you signed in, to send notifications you have asked for, and to detect abuse of the referral scheme.

How you use 2GO: which offers you view and save, vouchers you redeem, points and savings totals, reviews you write, and referrals you make.

Messages and attachments: messages you send to a vendor through in-app chat, and anything you send to our support team, including photographs you attach.

We do not ask for, and you should never send us, your card or bank details. Subscription payments are handled entirely by Apple and Google.

To provide the service: creating your account, showing offers, issuing and validating redemption codes, running your free allowance and any subscription, and operating referrals and loyalty points. This is necessary to perform our agreement with you.

To keep the service safe: detecting fraudulent redemptions and abuse of the referral scheme. This is a legitimate interest, balanced against your privacy.

To support you: answering your messages and investigating problems you report.

To send you messages: transactional notifications (a redemption confirmed, a message from a vendor) are part of the service. Marketing and promotional messages are sent only with your separate, explicit consent, and you can withdraw it at any time without losing access to 2GO.

To meet legal obligations: keeping records we are required by law to keep.

Where we rely on your consent — including for marketing messages and for any transfer of your data outside your country — that consent is specific, informed, and given by a clear action. We keep a record of it.

You can withdraw consent at any time by contacting us at the address in section 1, or by changing your notification preferences in the app. Withdrawing consent does not affect processing that already happened lawfully before you withdrew it.

Vendors: when you redeem a voucher at a shop, that vendor sees enough to confirm the redemption — a masked identity rather than your full personal details — together with the offer and the time. If you message a vendor through in-app chat, that vendor sees your messages.

Service providers who work for us: cloud hosting, push notification delivery, error monitoring, and email delivery. They act on our instructions and may not use your data for their own purposes.

Apple and Google: if you subscribe, they process the payment. We receive confirmation of the subscription, not your payment details.

Authorities: where we are legally required to disclose information, and only to the extent required.

We do not sell your personal data.

Your personal data is currently stored on servers operated by Amazon Web Services, Stockholm, Sweden (eu-north-1).

This means personal data collected in Egypt and the United Arab Emirates is stored outside those countries. Both Egypt's and the UAE's data protection laws place conditions on transferring personal data abroad — including, in Egypt, obtaining a licence from the Personal Data Protection Centre.

⚠️ PLACEHOLDER — REPLACE BEFORE PUBLICATION: state here the specific lawful basis relied on for this transfer, and the reference number of any licence obtained from the Egyptian Personal Data Protection Centre. Confirm the current position with qualified counsel in both jurisdictions before this page goes live.

We keep your account information for as long as your account is open.

Records of redemptions, subscriptions and payments are kept for as long as we are required to keep them for tax and accounting purposes.

⚠️ PLACEHOLDER — REPLACE BEFORE PUBLICATION: state the specific retention period for each category of data above. A policy that does not state a period does not satisfy either law.

You have the right to be told what personal data we hold about you and to receive a copy of it.

You have the right to have inaccurate data corrected.

You have the right to ask us to erase your data, and to withdraw consent you previously gave.

You have the right to object to processing, and to ask us to restrict it while a dispute is resolved.

You have the right to be told without undue delay if a breach of your personal data is likely to harm you.

To exercise any of these, write to [privacy@2go-eg.com]. We will respond within the period required by the applicable law. If you are not satisfied with our response, you may complain to the Personal Data Protection Centre in Egypt, or to the UAE Data Office, depending on where you are.

Traffic between your device and 2GO is encrypted in transit. Passwords are stored only as cryptographic hashes and cannot be read by us or recovered. Access to production systems is restricted to staff who need it.

No system is perfectly secure, and we do not claim otherwise. If a breach occurs that is likely to harm you, we will notify you and the relevant authority as the law requires.

2GO is not intended for children under 18, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

If we change this policy, we will update the date at the top of this page. Where a change materially affects your rights, we will tell you in the app before it takes effect.