Privacy policy

Last updated: 15 November 2026

This page explains what the Sultk app keeps about you, why we keep it, who helps us keep it, and how you can delete it.

Sultk is run by Mohamed Hisham, Yemen.

Who this is about

This page is about customers who use the Sultk mobile app. The Sultk team uses a separate dashboard. A team account keeps an email, a name and a role.

What we keep

Your account

Your email, how you sign in (a code by email, Google or Apple), your Google or Apple account id, the account status, when you last signed in, and when you asked to delete the account. We use this to sign you in and to protect your account.

Sign-in codes

We email you a one-time code. We keep it only in a form that cannot be read (a hash), with its expiry time and the number of tries.

Your devices

Each device you sign in on has a session. It keeps the device's IP address, the app's details (the "user agent"), a device name if there is one, when it was last used, and when it ends (after 30 days). We use it to keep you signed in and to let you sign out of other devices.

Your profile

Your full name, phone number, birth date and profile picture. All of them are optional. We show them in the app, and Sultk uses them to contact you about your orders.

Your addresses

Up to 10 addresses. Each one has a name (like "Home"), a pin on the map (latitude and longitude), building, street, floor and apartment. The app uses your phone's location only to place the pin, and only if you allow it. We use addresses for delivery and for local services.

Carts and favourites

The products and store links you save, with a copy of the page title and picture.

Orders

What you ordered, prices, fees, coupons, how it is delivered, the name and phone of the person who receives it, a copy of the delivery address, your note, and every change of status. We use this to deliver the order and to keep accounts.

Payments

You pay by bank transfer or a wallet app outside Sultk, then send us a proof: the sender's name, the transfer number, and, if you add one, a photo of the receipt. We also keep the amount, the currency and the exchange rate. We use this to check that the money arrived.

We do not keep card numbers.

Your Sultk wallet

Your balance and every movement: money you add, payments, refunds, and changes made by Sultk (always with a reason). When you add money, we keep the amount, the payment method and the proofs, as for payments.

Local services

The service, the city, a copy of the address, your note, up to 3 photos, Sultk's price offers, your answers (including why you said no), payments and proofs. We use this to price the job and to do it.

Support chat

One chat per customer: every message, the photos you or Sultk send, and when a message was seen.

Notifications

For each phone: the notification token from Firebase, Android or iOS, the app language, and when the phone was last seen. We also keep the notification groups you turned off, and the notifications we sent you. We use this to tell you about your orders, payments and support messages.

Server logs

For each request to our server: the method, the path, the result and the time. The line written by our host (Heroku) also has the IP address and the full address of the request. When an email fails to send, the log has the email address. We use logs to run the service and to find errors.

Services that help us

• Heroku (Salesforce) runs our server and our database (Heroku Postgres). It holds everything above, except pictures. It is in Heroku's EU region.
• Cloudinary keeps pictures. Profile pictures have a public link that is hard to guess. Receipt photos, chat photos and local-service photos are private: they open only through a link that works for a few minutes.
• Firebase Cloud Messaging (Google) gets your notification token and the text of each notification.
• Email: Resend today, moving to CloudMailIn. It gets your email address and the text of our emails, such as sign-in codes.
• Better Stack (Logtail) keeps a copy of the server logs for 8 days.
• Google Sign-In and Sign in with Apple, only if you choose them. We keep the account id and the email they send us.
• Sentry gets error and speed reports from the app, without who you are. It is in the EU (Germany). See below.

Each service keeps data in its own region. Our database is in Heroku's EU region.

Product prices and pictures from the stores (SHEIN, AliExpress, Amazon, Alibaba) are read through ZenRows. No customer data goes there. Exchange rates come from public sources, also with no customer data.

What the app sends to Sentry

Only the app versions in the stores send to Sentry.

• Sent: crash and error reports; speed reports for 20% of app sessions (one for each screen, plus the method, address and result of each network call); counts of sessions that worked or crashed; the last 100 steps before an error (screen changes, network calls with their method, address and result, and system events); server errors.
• Device facts: phone model, system and version, language and region, time zone, screen size, memory, app version and build.
• Not sent: your user id, email or name (the app never tells Sentry who you are); the app does not add your IP address; your sign-in token; the content of requests and answers; screenshots, screen layouts or recordings of your session.
• Note: a network call's address goes with everything written in it, like ids or search text. So these reach Sentry too.

How long we keep it

• While your account exists, we keep your data. Nothing is deleted on a timer, except what this list says.
• When you remove an address or a favourite in the app, you no longer see it, but it stays in our database until your account is erased. Old sign-in codes and old sessions (with their IP addresses) also stay until then.
• Server logs: Heroku keeps only the latest lines (about 1,500). Better Stack keeps them 8 days.
• After your account is erased, some records stay, but without any name, contact or address. See Delete your account.

Your choices

• You can change your profile in the app. For anything else, write to support@sultk.me or use the support chat in the app.
• You can turn off groups of notifications in the app.
• You decide if the app may use your location.
• You can delete your account in the app. See how.

Age

Sultk is for people aged 13 or older.

Changes to this page

When this page changes, we change the date at the top.

Contact

Email support@sultk.me, or write to us in the support chat in the app.