Privacy Policy

Last updated: 25 September 2026

This Privacy Policy explains how Scoteri ("Scoteri", "we", "us") collects, uses, and protects your personal information when you use the Scoteri mobile application and related services (the "Service"), an electric-scooter rental service operating in the Kurdistan Region of Iraq.

By creating an account or using the Service, you agree to the practices described here. If you do not agree, please do not use the Service.

1. Information we collect

• Account and identity data: your mobile phone number and country code (used to create your account and send you a one-time verification code), and, if you choose social sign-in, your name, email address, and profile photo from that provider.
• Identity verification (KYC) data: where identity verification is required, images of a government-issued identity document and, if you enable face sign-in, a mathematical representation ("descriptor") of your face used only to confirm it is you. We do not use this for any other purpose and do not share it.
• Location data: the location of your device while a ride is active, and when you open the app to find nearby scooters. Ride location is used to start and end rides, enforce parking and no-ride zones, calculate fares, and support safety and anti-theft functions.
• Payment and wallet data: your Scoteri wallet balance, top-up and charge history, and transaction records. Card and payment credentials are handled by our payment provider; we do not store full card numbers.
• Ride and usage data: ride start/end times, routes, distance, duration, scooter identifiers, and photos you submit (for example, an end-of-ride parking photo or a problem report).
• Support communications: messages, photos, and contact details you send us through in-app support.
• Device and technical data: device type and operating system, app version, language, a push-notification token, and diagnostic logs.

2. How we use your information

• To register and authenticate your account, including sending one-time verification codes.
• To provide the Service: locating scooters, unlocking, running and ending rides, and applying pricing.
• To take payment, maintain your wallet, and prevent fraud and abuse.
• To verify your identity where the law or our safety policies require it.
• To enforce parking zones, speed limits, and restricted areas.
• To provide customer support and respond to reports and disputes.
• To send service messages and, where you have opted in, operational notifications.
• To maintain security, investigate incidents, and comply with legal obligations.

3. How your information is shared

We do not sell your personal information. We share it only as follows:

• Messaging provider: we use the WhatsApp Business Platform (Meta Platforms, Inc.) to deliver one-time verification codes and service messages to your phone number.
• Payment provider: to process top-ups and charges.
• Infrastructure providers: cloud hosting and database providers that store and process data on our behalf under confidentiality obligations.
• Push and authentication services: Google Firebase, for push notifications and optional social sign-in.
• Authorities: law enforcement or regulators where required by law, or to protect the rights, property, or safety of Scoteri, our users, or the public (for example, in a theft or accident investigation).
• Business transfers: in connection with a merger, acquisition, or sale of assets, subject to this Policy.

4. Data retention

We keep personal information for as long as your account is active and for as long afterwards as needed to meet legal, accounting, tax, safety, and dispute-resolution requirements. One-time verification codes expire within minutes. Identity-verification documents are retained only for the period required to meet our verification and legal obligations and are then deleted or anonymised. Aggregated or de-identified data that cannot reasonably be linked to you may be kept for analytics and service improvement.

5. Your rights and choices

• You can access and update your profile details in the app.
• You can request a copy of your data or correction of inaccurate data by contacting us (see below).
• You can delete your account at any time in the app (Settings → Delete Account), or by following the steps at scoteri.com/delete-account. Your account is closed immediately. Within 30 days we erase your name, phone number, email, identity documents and the face data derived from them, your photos and your support messages. Ride and payment records are kept, without your personal details, where accounting, tax or legal obligations require it.
• You can control device permissions (location, notifications) in your device settings. Disabling location will prevent you from starting rides.

6. Security

We use technical and organisational measures to protect your information, including encryption in transit, access controls, hashed credentials, and restricted handling of identity documents. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

7. Children

The Service is not directed to children. You must be at least 18 years old, or the minimum age required to operate an electric scooter where you live, to use Scoteri. We do not knowingly collect data from children.

8. International processing

Your information may be processed on servers located outside the Kurdistan Region of Iraq, including by the service providers listed above. Where this happens, we take steps intended to ensure your information remains protected consistent with this Policy.

9. Changes to this Policy

We may update this Policy from time to time. When we make material changes we will update the "Last updated" date above and, where appropriate, notify you in the app. Your continued use of the Service after changes take effect means you accept the revised Policy.

10. Contact us

Questions or requests about this Policy or your data:
Email: info@scoteri.com
Scoteri — Erbil, Kurdistan Region, Iraq