Privacy Policy

• Account: your name, email address, phone number and password. Passwords are stored only as a salted hash — never in readable form. If you sign in with Google we receive your name, email and profile picture from Google; we never receive your password.
• Email verification: a one-time code sent to your address, stored until it is used or expires.
• Becoming a host: your full name, national ID number, phone, address and (optionally) company name, submitted with your host application for review by our team.
• Identity verification: photographs of your identity document, where verification is required.
• Listings: property photos, description, address and map location, plus the ownership document you upload to prove you may list the property.
• Bookings and payment: stay dates, guest counts and prices. Payment is by Instapay bank transfer — we do not operate a card gateway and never receive or store your card details. We do store the transfer screenshot you upload as proof of payment, so the host can confirm it.
• Payouts: if you host, the payout details you provide so we can pay you.
• Messages: messages you exchange with hosts or guests through the app, and anything you send our support team.

• Sign-in records: the time and device of sign-ins, kept to secure your account and detect suspicious access.
• Device push token: if you allow notifications, an identifier from Firebase Cloud Messaging so we can deliver them.
• Approximate location: only if you grant permission, to show stays near you and centre the map. Your location is not stored on our servers.
• Essential cookies: a session cookie to keep you signed in and a cookie remembering your language. We do not use advertising or tracking cookies.

We do not run analytics, advertising or third-party tracking software on the website or in the apps, and we do not sell your personal data.

• To create and secure your account, and to verify your email address.
• To take, confirm and manage bookings, and to show hosts who is staying.
• To review host applications, listings and ownership documents before publishing them.
• To verify identity where required, and to investigate reports, disputes and policy violations — including keeping the platform safe from fraud.
• To pass messages between guests and hosts, and to send booking updates by email or push notification.
• To meet our legal, tax and accounting obligations.

Your public profile shows your first name and profile picture. When you book, the host sees your first name and your stay details; when you host, guests see your name and the listing you offer. A listing’s map pin is deliberately approximate — we round coordinates to roughly a one-kilometre grid so the marker sits in the neighbourhood rather than on the exact address. Your email address, phone number, national ID and identity documents are never shown to other users.

We share personal data only with the service providers that run the platform, and only as needed:

• Vercel — website and API hosting.
• Neon — the managed PostgreSQL database where your data is stored.
• Google Firebase Cloud Messaging — delivering push notifications.
• Google Maps — displaying maps and location pins.
• Google — only if you choose to sign in with Google.
• Our email provider — sending verification codes and booking notifications.

We may also disclose data where the law requires it, or to protect the rights and safety of our users. We do not sell or rent your personal data to anyone.

The providers above may process data on servers outside Egypt. Where that happens, we rely on those providers’ contractual data-protection commitments to keep your data protected to the standard described in this policy.

We keep your account data for as long as your account exists. Booking and payment records are kept for as long as required for tax, accounting and dispute-resolution purposes, even after you delete your account. Verification codes and expired sessions are removed automatically. Identity documents are retained only as long as needed for the verification they were submitted for, and to meet our legal obligations.

• Access and correction — view and edit your profile in the app at any time.
• Deletion — delete your account and its data from quickin-eg.com/delete-account, or in the app under Profile. Some records are retained where the law requires it.
• Notifications — turn push notifications off in your device settings at any time.
• Location — revoke location permission in your device settings; the app still works without it.
• Complaints — contact us first, and you may also complain to your local data-protection authority.

Traffic is encrypted in transit with HTTPS, passwords are stored as salted hashes, and access to identity documents and host applications is restricted to authorised staff, whose administrative actions are logged. No system is perfectly secure, so please use a strong, unique password and tell us immediately if you suspect someone else has access to your account.

QuickIn is not intended for anyone under 18, and we do not knowingly collect data from children. If you believe a child has given us personal data, contact us and we will delete it.

If we change how we handle personal data we will update this page and revise the date at the top. Significant changes will be announced in the app.

Questions about this policy or your data: quick.in.egy@gmail.com · 01013010119