Privacy Policy

1. Data we collect

We collect the following data:

• Account data — name, phone number and email (optional).
• Delivery address — city, street and a point on the map.
• Order data — selected products, payment method and order status.
• Device data — OS version and device model (for debugging).
• Device advertising identifier (optional) — IDFA on iOS, GAID on Android; only with your consent, for advertising attribution (see section 4).

2. How data is used

• Processing orders and arranging delivery.
• Managing your account and verifying sign-in.
• Sending push notifications.
• Improving the app and fixing bugs.

3. Third-party services

The app uses the following trusted services:

• Woody backend (api.woody.uz) — authentication, catalog and orders.
• Firebase (Google) — push notifications, crash reports and analytics.
• Meta Platforms (Facebook) — advertising analytics and attribution (App Events SDK).
• Yandex Maps — picking the delivery address on a map.
• Cloudflare R2 — storing images and files.
• Eskiz — delivering the verification code (OTP) by SMS.

4. Advertising analytics and attribution (Meta / Facebook)

The app uses the App Events SDK from Meta Platforms (Facebook) to measure how our advertising campaigns perform. Meta receives your device advertising identifier (IDFA on iOS, GAID on Android) and in-app events: app launch, viewing a product, adding to the cart, starting checkout, placing an order (with its amount and product identifiers), registration, and use of the AR/AI features. This data is used to work out which advert led to an install and an order.

Woody does not send Meta your name, phone number or email address.

Nothing is sent without your consent, and you can withdraw it at any time:

• iOS — on first launch the app shows Apple’s App Tracking Transparency prompt. If you decline, nothing is sent to Meta; you can change the answer later in Settings → Privacy & Security → Tracking.
• On every device — the Settings → “Foydalanish statistikasi” switch in the app withdraws consent at any time; sending stops immediately and does not resume on later launches.
• On iOS both conditions must hold for anything to be sent: ATT permission and the in-app switch turned on.

5. Data retention

• Data is kept until you delete your account.
• When an account is deleted, personal data is removed within 30 days.

6. Sharing with third parties

We never sell your personal data. Your name, phone number and email address are not shared with third parties for advertising. Data is shared only when needed to fulfil an order (for example, with the delivery service).

The single exception is described in section 4: with your consent, your device advertising identifier and in-app events are sent to Meta for advertising attribution. That data is not accompanied by your name or phone number.

7. Your rights

• View and edit your data.
• Delete your account and all related data.
• Request a copy of your data.
• Withdraw your consent to advertising attribution (see section 4).

8. Contact

For privacy questions, contact us: info@woody.uz