Privacy Policy

Effective Date: July 22, 2026

Dar Amana ("Dar Amana", "we", "us", or "our") operates the dar-amana.com website, customer subdomains, and the Manager, Employee, and Customer mobile applications (collectively, the "Services") that provide exchange office and money-transfer management tools. This Privacy Policy explains what information we collect, how we use it, and the choices you have.

1. Information We Collect

Account & Business Information: name, company/office name, email address, phone number, WhatsApp number, business address, and login credentials for owners, managers, and employees.
Identity & Compliance Data: government-issued ID details and other Know-Your-Customer (KYC) information that exchange offices are required to collect for currency exchange and money-transfer compliance.
Transaction Data: currency exchange records, transfer details, amounts, exchange rates, receipts, and related financial records processed through the Services.
Device & Usage Data: IP address, device model, operating system, app version, crash logs, and usage analytics collected automatically when you use our website or mobile apps.
Communications: messages you send us via the contact form, WhatsApp, or email, and any information you choose to include in them.

2. How We Use Information

To provide, operate, and maintain the Services, including manager dashboards, employee workspaces, and customer-facing tools.
To process currency exchange and money-transfer transactions and maintain accurate financial records.
To verify identity and meet legal, regulatory, and anti-money-laundering (AML) obligations.
To communicate with you about your account, support requests, and service updates.
To monitor, secure, and improve the performance and reliability of our platform.
To send you information about new features or offers, where permitted, with an option to opt out.

3. How We Share Information

With the exchange office or company you transact with or work for, as necessary to deliver the Services.
With service providers who help us operate the platform (e.g., hosting, cloud storage, analytics, and messaging providers such as WhatsApp Business), under confidentiality obligations.
With regulators, financial authorities, or law enforcement where required by applicable law or to prevent fraud and financial crime.
In connection with a merger, acquisition, or sale of assets, subject to continued protection of your information.
We do not sell your personal information to third parties.

4. Data Retention

We retain account and non-essential personal data for as long as your account is active or as needed to provide you with Services.
Financial transaction history, exchange operations, and associated compliance/KYC records are retained for statutory period requirements (e.g., 5 to 10 years) as mandated by financial regulations and anti-money laundering laws.

5. Data Security

We use industry-standard technical and organizational measures — including encrypted connections, access controls, and role-based permissions — to protect information from unauthorized access, alteration, disclosure, or destruction.

6. Your Rights and Account Deletion

Access and Correction: You may access, update, or correct your personal information directly within your app profile or account settings.
In-App Account Deletion: You can request account deletion directly within our mobile application under Settings (MoreScreen).
Web Deletion Request: You can also request account deletion by emailing [email protected] or contacting us via WhatsApp at +964 751 063 4983.
Legal & Regulatory Data Retention Exception: Pursuant to applicable financial, accounting, and Anti-Money Laundering (AML) regulations, transaction records, exchange history, and regulatory audit logs are legally required to be retained and will not be purged upon account deletion.

7. Mobile Device Permissions & Data Usage

Camera & Storage: Used for scanning customer identity documents (KYC) and uploading receipt attachments or profile photos.
Device Info & Logs: Collected for security authentication, detecting fraud, and diagnosing crash reports.
We do not use device permissions for tracking or advertising purposes.

8. Children's Privacy

Our Services are intended for business use by adults operating or working at exchange offices and are not directed to children under 18. We do not knowingly collect personal information from children.

9. Cookies and Similar Technologies

Our website and web-based dashboards may use cookies and similar technologies to keep you signed in, remember preferences (such as language), and understand how our Services are used.

10. Third-Party Links and Services

Our Services may include links to third-party sites or integrate with third-party tools (such as WhatsApp for support, or mapping services for branch locations). We are not responsible for the privacy practices of third parties.

11. International Data Transfers

Dar Amana operates across Iraq and the MENA region. Your information may be processed or stored in a country other than your own under strict security standards.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the effective date above.

13. Contact Us

If you have questions about this Privacy Policy, requesting account deletion, or how we handle your information, contact us at:
Email: [email protected]
WhatsApp: +964 751 063 4983
Address: Erbil, Kurdistan Region, Iraq