Privacy policy

Last updated 17 September 2026

ALL IN is an online shop selling to customers in Palestine and Israel, at allin.ps and through the ALL IN app. This page says what we know about you, why, who else sees it, how long we keep it, and how to have it removed. It is written to be read, not signed.

The short version: we keep what a shop needs to deliver a parcel and nothing more. There is no advertising, no tracking, and no selling of your details to anyone.

What we collect, and why

To open an account: your first and last name, a mobile number, and a password. You can register with an email address instead of a number if you prefer. The number is the one the driver calls.

Asked once at registration, and you may leave both blank: your gender and your date of birth. Neither is required, neither is shown to anyone, and we do not currently use them for anything.

To deliver: your governorate, town and street. Each order also keeps the name, phone number and address you confirmed for that parcel, any note you typed for the driver, and the language you were shopping in, so that anything we send you about the order is in it.

Your orders: what you bought, when, for how much, and how far along the delivery is.

From your phone, only if you allow notifications in the app: a notification token, the app's language, and whether the phone is Android or iPhone. That is all — no device name, no model, no advertising identifier.

What we do not collect: your location, your contacts, your photos, your IP address, and no card details, because we take cash on delivery. Neither the website nor the app contains any analytics, advertising or tracking software.

What stays on your device

Your basket before you sign in, your wishlist, the products and searches the app remembers for you, and your language and theme choices are kept on your own phone or browser. They are never sent to us.

Who else sees your details

Supabase, which hosts our database and sign-in, in Frankfurt in the European Union. Everything above is stored there. Your password is stored only as a hash that cannot be turned back into the password.

Render, which runs the website, also in Frankfurt. Every page you open passes through it, and it keeps short-lived technical logs.

When your order moves, a notification reaches your phone through Expo's notification service and then through Apple or Google. They receive the notification token, the order number and the new status, and nothing else: not your name, phone or address.

The courier who delivers your parcel is given your name, phone number and address for that delivery. We hand these over ourselves, delivery by delivery; our software does not send them anywhere.

When we message you about an order, the message goes from the shop's own WhatsApp to your number. Our software sends nothing about you to WhatsApp or Meta; the link in the message opens a page on our own site.

Nobody else. We do not sell your details, share them with advertisers, or pass them to anyone not named here.

How long we keep it

Your account details, for as long as you have an account. You can close it at any time, below.

Your orders, as our sales records, including the name, phone and address each parcel was delivered to. We need these for our accounts and for returns, so they stay after an account is closed. Once you close your account they are no longer linked to you, and no longer visible to you.

Notification tokens, until you sign out on that phone or close your account.

Your choices

See and change your name, phone number, address and password at any time under Account, on the site or in the app.

Close your account yourself, in the app under Account, or on the site. Everything about you is deleted for good; your past orders stay as sales records, unlinked from you. The full explanation is at the link below.

Switch notifications off in your phone's settings, or sign out of the app; either one removes the token.

Ask us what we hold about you, or ask for a correction, at the contact details below. We answer within thirty days.

How to close your account

How it is protected

Everything travels over HTTPS. Each customer's rows in the database can be read only by that customer's own sign-in, which the database itself enforces on every query. The link we send to confirm an order works once and expires after three days.

Children

The shop is for adults placing orders. We do not knowingly open accounts for anyone under sixteen; if one has been opened, tell us and we will close it.

Changes to this page

If what we collect or who sees it changes, we update this page and the date at the top. We do not change it quietly.

Contact

Questions about your details, or about this page:

allin.ps@outlook.com059 865 4170