Privacy Policy — Mahmal Zip
Last updated: 19 October 2026
This Privacy Policy explains what personal data the Mahmal Zip mobile application (Google Play package com.mahmalzip.mahmalzip) collects, how it is used and how it is protected. The app is developed and operated by «Mahmal Zip» HJ (Sinalco Türkmenistan).
This policy covers only this app and the mahmalzip.com.tm service. It does not cover the sinalco.com or sinalco.tm websites.
What the app is for
The Mahmal Zip app is used to browse our products and the selling points that offer them, to place orders, and to leave reviews and ratings for selling points.
What data we collect
- Account details: your name, username, password (stored only as a cryptographic hash) and your phone number if you provide one.
- Orders: the products you select, quantities, prices, order status and dates.
- Reviews and ratings: the review text you write about a selling point, the rating you give and any photos you attach.
- Notification token: a device token issued by Google Firebase Cloud Messaging, used only to deliver notifications about your orders.
- Technical data: IP address, request time and server error logs, kept for security and troubleshooting.
- Date of birth (optional): if you give it at sign-up, it is used only to decide whether 18+ products are shown to you.
Permissions the app asks for
- Notifications — to tell you the status of your orders. You can turn them off in Android settings at any time.
- Location — to show selling points on the map and near you. Coordinates are used only to look up nearby places at that moment; they are not saved to your account or stored in our database.
- Camera and photos — asked for only when you attach a photo to a review. The photo is uploaded to the server only when you post the review.
Age-restricted (18+) products
The app includes alcoholic drinks and other 18+ products, as well as selling points marked 18+. On first launch the app asks whether you are 18 or older. The answer is stored only on your device, is not saved on our server, and is used only to decide whether 18+ products are shown. You can change it in your profile. If you gave a date of birth, it is used instead. Users under 18, or who answer “I'm under 18”, are not shown 18+ products.
How we use the data
- To create your account and let you sign in.
- To accept, process and deliver your orders.
- To contact you about an order.
- To display your reviews and ratings in the app.
- To decide whether 18+ products can be shown to you.
- To keep the accounting records required by law.
- To keep the service secure and prevent abuse.
Who we share it with
- Employees of «Mahmal Zip» HJ who process orders.
- Google (Firebase Cloud Messaging) — receives the device token needed to deliver a push notification.
- Our internal accounting and warehouse system, which receives the order (products, quantities, total, selling point name) so it can be fulfilled and invoiced.
- Government authorities, where required by the law of Turkmenistan.
We do not sell your personal data, do not share it with advertising networks and do not use it for advertising or profiling.
How long we keep it
- Account data — until you delete your account.
- After deletion, order records are kept for accounting with your name, phone number and username removed, so they can no longer be linked to you.
- Reviews, ratings and the photos attached to them are deleted together with the account.
- Database backups may still hold a copy for up to 30 days, after which they are deleted.
Deleting your account and data
You can delete your account inside the app or at mahmalzip.com.tm/account/delete. You do not need the app installed.
You can also write to us at supply@mahmalzip.com.
Your rights
- Ask what data we hold about you.
- Have incorrect data corrected.
- Have your account and personal data deleted.
- Withdraw your consent to notifications.
Requests are accepted at supply@mahmalzip.com and answered within 30 days.
Security
- All traffic between the app and the server is encrypted with HTTPS (TLS).
- Passwords are stored only as hashes and cannot be recovered.
- Access to the data is limited to authorised staff.
- When an account is deleted, every access token issued to it is revoked.
Children
The app is not directed at children. Users under 18 are not shown 18+ products. We do not knowingly collect personal data from children; if you believe a child has given us data, contact us and we will delete it.
Changes to this policy
If this policy changes, the new version is published on this page and the date above is updated. Material changes are announced in the app.
Contact
For any privacy question, write or call us:
«Mahmal Zip» HJ
Türkmenistan, Aşgabat şäheri, Büzmeýin etraby, Abadan şaýoly, 254-nji "A" jaý
supply@mahmalzip.com · +993 12 33-54-64, +993 12 33-54-74
Account deletion page