HIMAYA — Maxfiylik siyosati / Privacy Policy

Ushbu Maxfiylik siyosati HIMAYA mobil ilovasi (qurilmalarni sug'urtalash platformasi) foydalanuvchilari — agentlar (sotuvchilar) va servis xodimlari (baholovchilar) — hamda ular ro'yxatdan o'tkazadigan mijozlarning shaxsiy ma'lumotlari qanday to'planishi, ishlatilishi va himoyalanishini tushuntiradi. Ilovadan foydalanish orqali siz ushbu siyosatga rozilik bildirasiz.

1. Biz to'playdigan ma'lumotlar

Hisob ma'lumotlari: telefon raqamingiz (SMS-kod orqali kirish uchun), ism-familiya, rol (agent yoki servis xodimi) va ish joyingiz (do'kon/servis).
Mijoz pasport ma'lumotlari: sug'urta rasmiylashtirishda mijoz pasportining MRZ qatori kamera orqali skanerlanadi — F.I.Sh., pasport seriyasi va raqami, tug'ilgan sana. Skanerlash qurilmaning o'zida amalga oshiriladi (Google ML Kit); pasport tasviri tashqi OCR xizmatlariga yuborilmaydi.
Qurilma ma'lumotlari: sug'urtalanayotgan telefonning IMEI raqami, modeli va holatini tasdiqlovchi foto va videolar.
To'lov ma'lumotlari: to'lovlar va komissiya yechib olish uchun UZCARD/HUMO karta raqamlari. To'lovlar litsenziyalangan to'lov provayderlari orqali qayta ishlanadi; ilova karta CVV kodini saqlamaydi.
Texnik ma'lumotlar: qurilma modeli va operatsion tizimi haqidagi ma'lumot, push-bildirishnomalar uchun Firebase token.

2. Ruxsatlar va ulardan foydalanish

Kamera va mikrofon: pasportni skanerlash, IMEI shtrix-kodini o'qish hamda qurilma holatini foto/video orqali hujjatlashtirish uchun.
Galereya: mavjud foto/videolarni tanlab yuklash uchun.
Biometriya (Face ID / barmoq izi): ilovaga tezkor kirish uchun. Biometrik ma'lumotlar faqat qurilmangizda saqlanadi va bizga hech qachon uzatilmaydi.

3. Ma'lumotlardan foydalanish maqsadlari

Sug'urta polislarini rasmiylashtirish va sertifikatlar berish;
da'volarni ko'rib chiqish va zararni baholash;
agentlar va servis xodimlariga komissiya hisoblash va to'lash;
firibgarlikning oldini olish (IMEI tekshiruvi, foto/video dalillar);
xizmat haqidagi muhim bildirishnomalarni yuborish.

4. Ma'lumotlarni saqlash va himoya qilish

Sessiya tokenlari va boshqa maxfiy ma'lumotlar qurilmada shifrlangan xavfsiz omborda (Keychain / EncryptedSharedPreferences) saqlanadi. Server bilan aloqa HTTPS orqali shifrlanadi. Ma'lumotlar faqat xizmat ko'rsatish uchun zarur bo'lgan muddat davomida saqlanadi.

5. Ma'lumotlarni uchinchi shaxslarga berish

Biz shaxsiy ma'lumotlarni sotmaymiz. Ma'lumotlar faqat quyidagilarga oshkor qilinishi mumkin: to'lov provayderlari (to'lovni amalga oshirish uchun), sug'urta hamkorlari (polis va da'volarni rasmiylashtirish uchun) hamda qonun talab qilgan hollarda davlat organlari.

6. Uchinchi tomon xizmatlari

Google ML Kit — pasport matnini qurilmaning o'zida tanib olish;
Firebase Cloud Messaging (Google) — push-bildirishnomalar.

7. Sizning huquqlaringiz

Siz o'z ma'lumotlaringizga kirish, ularni to'g'rilash yoki o'chirishni, shuningdek hisobingizni bekor qilishni so'rashingiz mumkin. Buning uchun quyidagi manzilga murojaat qiling. So'rovlar 30 kun ichida ko'rib chiqiladi.

8. Bolalar maxfiyligi

Ilova 18 yoshdan kichik shaxslar uchun mo'ljallanmagan va ulardan ataylab ma'lumot to'plamaydi.

9. O'zgarishlar

Ushbu siyosat yangilanishi mumkin. Muhim o'zgarishlar haqida ilova orqali xabar beramiz; amaldagi tahrir sanasi sahifa boshida ko'rsatiladi.

10. Bog'lanish

Savollar uchun: xasanjon@himayaapp.uz

This Privacy Policy explains how the HIMAYA mobile application (a device-insurance platform for the Uzbek market) collects, uses, and protects personal data of its users — agents (sellers) and service staff (assessors) — and of the customers they register. By using the app, you agree to this policy.

1. Data we collect

Account data: your phone number (used for SMS-code login), full name, role (agent or service staff), and workplace (shop/service center).
Customer passport data: when issuing a policy, the customer's passport MRZ is scanned with the camera — full name, passport series and number, date of birth. Recognition runs entirely on the device (Google ML Kit); passport images are not sent to external OCR services.
Insured-device data: the phone's IMEI number, model, and photos/videos documenting its condition.
Payment data: UZCARD/HUMO card numbers for payments and commission withdrawals. Payments are processed by licensed payment providers; the app does not store card CVV codes.
Technical data: device model and OS information, and a Firebase token for push notifications.

2. Permissions and how they are used

Camera & microphone: to scan passports, read IMEI barcodes, and document device condition with photos/video.
Photo library: to upload existing photos/videos.
Biometrics (Face ID / fingerprint): for quick sign-in. Biometric data never leaves your device and is never transmitted to us.

3. How we use the data

To issue insurance policies and certificates;
to review claims and assess damage;
to calculate and pay commissions to agents and service staff;
to prevent fraud (IMEI verification, photo/video evidence);
to send important service notifications.

4. Storage and security

Session tokens and other sensitive data are stored on the device in encrypted secure storage (Keychain / EncryptedSharedPreferences). Communication with our servers is encrypted over HTTPS. Data is retained only as long as necessary to provide the service.

5. Sharing with third parties

We do not sell personal data. Data may be disclosed only to: payment providers (to process payments), insurance partners (to issue policies and handle claims), and government authorities where required by law.

6. Third-party services

Google ML Kit — on-device passport text recognition;
Firebase Cloud Messaging (Google) — push notifications.

7. Your rights

You may request access to, correction of, or deletion of your data, as well as account deletion, by contacting us at the address below. Requests are handled within 30 days.

8. Children's privacy

The app is not intended for persons under 18 and does not knowingly collect their data.

9. Changes to this policy

This policy may be updated. We will notify you of material changes through the app; the current revision date is shown at the top of this page.

10. Contact

Questions: xasanjon@himayaapp.uz