Privacy Policy
Last updated: 28 October 2026
This policy explains what personal data EVAA ("we", "us") collects through the EVAA website, your EVAA account and the EVAA app, why we collect it, and how long we keep it.
1. What we collect
Your account
- Your name and Egyptian mobile number. The mobile number is your username, and we use it to contact you on WhatsApp.
- Your password, stored only in a one-way scrambled (hashed) form. We cannot read it, and we will never ask you for it.
- Your account status: when it was created, which payments were approved, and until when it is paid.
When you order or renew
- The screenshot of your InstaPay transfer and, if you give it, the transfer reference number.
- The order number, amount and time of the order.
When you sign in and use the app
- A security key that the app creates on your phone. We store a fingerprint of it to link your phone to your account.
- Your phone's model name, the app version, and a one-way scrambled identifier of the device, so reinstalling the app on the same phone is recognised as the same phone.
- When the phone signs in, signs out and checks in with our service, and the last time EVAA was used to connect to a car (also when it was used offline).
- Your approximate location at city level (for example "Cairo, EG"), worked out from your connection by our hosting provider when the app or website contacts us. We do not use GPS and do not track where you drive.
- A notification token from Google Firebase Cloud Messaging, so we can tell your phone when your payment is approved or your account was signed in on another phone.
- When you start the free trial, a one-way scrambled identifier of your device, so each device gets only one trial.
Technical data
- Your IP address is used briefly to block abuse, such as too many sign-in attempts or orders from one connection. We keep it only in scrambled form for about an hour.
- Our hosting provider, Cloudflare, processes basic technical data needed to deliver the website and service.
- The website stores your language choice and, while you are signed in, a sign-in token in your browser. Signing out removes the token.
EVAA does not send your contacts, calls, messages, music or navigation to us. That content stays between your phone and your car.
2. How we use it
- To create and run your account, process your orders, confirm your payments, and activate or renew your account.
- To contact you on WhatsApp about your orders, password resets and support.
- To let your account work on one phone at a time, and to notify your phone about approvals and sign-outs.
- To detect and stop account sharing, fraud, abuse and repeated free trials. For example, we look at how often an account changes phones, how many phones use it, whether a signed-out phone keeps being used, and whether two phones use it from different cities at the same time.
3. Who we share it with
We do not sell your data. We share it only with services we use to run EVAA:
- Cloudflare, which hosts our website, account service and database.
- Google Firebase Cloud Messaging, which delivers notifications to your phone. It receives your phone's notification token and the notification itself (for example, that your account is active until a date), not your name or number.
- Telegram, which we use to receive new-order and account-security alerts, including your name, number and payment screenshot, in our own private chat.
- WhatsApp, when we message you about your order, account or support.
- InstaPay and the banks involved in your transfer, which handle the payment itself.
We may also disclose data if the law requires it.
4. How long we keep it
- Payment screenshots are deleted automatically from our order system 90 days after the order is approved or rejected. Copies in our Telegram notifications stay until we delete them.
- Routine app check-ins are deleted after 60 days. Other account history, such as sign-ins, sign-outs and approvals, is deleted after 12 months.
- Website sign-ins expire after 30 days.
- Your account, phone records and order records (name, number, amount, order number) are kept while your account exists, and afterwards for as long as we need them for accounting, support and resolving disputes.
5. Your rights
You can ask us to show you, correct or delete your personal data or your account, subject to records we must keep by law or for accounting. We handle personal data in line with Egypt's Personal Data Protection Law (Law No. 151 of 2020). To make a request, contact us on WhatsApp from the mobile number of your account.
6. Security
Our website and service use encrypted HTTPS connections, passwords are stored only in hashed form, repeated wrong passwords temporarily lock sign-in, and access to orders and accounts is limited to us. We reset a password only when the request comes from the account's own WhatsApp number. No system is perfectly secure, but we work to protect your data.
7. Children
EVAA is meant for drivers and is not directed at children.
8. Changes
We may update this policy and will post the new version on this page with a new date. See also our Terms of Service.