Before store publication, the operator must configure the legal entity, support email and effective date in the production environment and have the policy approved.
Who we are
Eshteraket (اشتراكات) is a membership, class and attendance service by CodeIT. It connects activity-center customers and families with the centers, programs, schedules, registrations, attendance, balances and reminders made available for their account.
Information we may process
Depending on the account role and the features enabled by the activity center, we may process:
- Account and identity information such as name, email address, phone or WhatsApp number, account role, language and sign-in or verification records.
- Family and dependent-member information entered by an authorized guardian or center, such as a member name, birth date, age eligibility, relationship or application details.
- Membership and center-operation information such as plans, program applications, schedules, attendance, rosters, balances, receipts, reminders, messages and notes.
- Technical and security information such as IP address, timestamps, app version, authentication tokens, audit or security logs and errors where enabled.
- Information you choose to send to support.
How we use information
We use information to authenticate accounts and send one-time verification messages; show the memberships, programs, schedules, attendance, balances, receipts and reminders available to the account; process program or membership applications; provide support, security, fraud prevention, troubleshooting and service improvement; and comply with law while protecting users, centers and CodeIT.
The app does not currently process online card payments. A center may keep membership or receipt records when payment is handled outside the app.
When we share information
We do not sell personal information. We may share or make information available only when needed:
- With the activity center or business managing the relevant account, membership, program or member record.
- With service providers that process data on our behalf, such as hosting, security, OTP or WhatsApp delivery, email, support and infrastructure providers.
- With an AI provider only when an AI-enabled feature is turned on and the user sends a message. The feature is catalog-grounded and does not approve enrollment, create a subscription or charge a payment.
- With legal authorities when required by law or valid legal process, or with a successor during a merger or acquisition subject to appropriate protections.
Retention and deletion
We keep information while the account, center relationship, support request, security record or legal or accounting obligation requires it. Retention periods can differ by record type and by center.
To request account or personal-data deletion, use the account-deletion page linked below. We verify the request, delete or anonymize information that we are not required to keep, and explain records that must be retained. Deleting an account may not immediately delete a center’s lawful accounting or attendance records.
Security
We use reasonable technical and organizational safeguards, including access controls, role and center scoping, secure authentication and encrypted transport where supported by the production service. No internet service can guarantee absolute security. Report suspected unauthorized access through the support page.
Guardians and dependent members
Eshteraket is not directed to children. An authorized guardian or center representative may enter dependent-member information to manage a membership, program, schedule or attendance record. The guardian is responsible for having the authority and required consent. Contact support to correct or remove a dependent record.
Transfers, rights and changes
Our infrastructure and providers may process information outside your country. The operator will use safeguards required by applicable law. Depending on your location, you may request access, correction, deletion, restriction, objection, export or withdrawal of consent.
We may update this policy when the service or law changes. The effective date changes when a new version is published.
Contact details
Use the support page for service questions and the account-deletion page for deletion requests.