Foundqi is operated by a hotel for its daily work: rooms, bookings, accounts and cash. This page explains plainly what we collect, why, who receives it, and how to delete your account. We do not sell your data and we use no advertising, tracking or analytics tools.

• Your phone number — your account identity; we send verification codes to it (sign-up, password reset, new device).
• Your password — never stored itself, only an irreversible cryptographic hash.
• Your name inside a hotel — entered by the hotel owner or manager.
• Hotel operating data — rooms, bookings (including guest or agency names as typed by the hotel), financial entries and staff pay records. This is the hotel’s own data; we store and process it on the hotel’s behalf only.
• Device information — a random app-install ID, platform and app version, IP address and a push-notification token, for security and to tell your known device from a new one.
• Activity log — who did what and when (with IP address). It is append-only and cannot be edited or deleted, for accountability and security.

Camera: used only when you run the “scanner” feature to photograph ID cards and passports. Photos go to the reception computer on your hotel’s local network; we do not receive or store them on our servers. We do not request location, contacts or files.

• OTPIQ (Iraq) — delivers verification codes by WhatsApp or SMS; receives your phone number and the code.
• Google Firebase Cloud Messaging — delivers notifications; receives the device token and notification text.
• HOSTKEY — server hosting; data is stored on a server in Istanbul, Türkiye.
• Cloudflare — domain name (DNS) service only.

We may disclose data if required by a valid legal order.

App–server traffic is encrypted (HTTPS); backups are encrypted; passwords are stored as hashes; each hotel has its own separate database; access is limited by each user’s role. No system is perfectly secure, but we apply and review these measures.

You can delete your account yourself in the app: Settings → Delete my account, or by request from outside the app as described on the account deletion page.

On deletion your phone number and name are anonymised, all your sessions and notification tokens end, the account is disabled, and you may register again with the same number.

What remains: the hotel’s financial records and booking history remain because they are the hotel’s accounts and must be kept, but they are no longer linked to your name or phone number. The activity log is append-only, so older snapshots may still contain data that was recorded at the time, kept for security and accountability.

Hotel owners can also delete their account in the app: if you are the only owner, your hotel is deactivated and no longer shown to anyone, its data is kept by us and can be restored at your request (contact us). A hotel that has another active owner keeps running.

The app is intended for hotel staff and owners, not for children under 13.

If we change this policy we update the date above. Support, questions, deletion or data-access requests: WhatsApp +964 784 414 1313 or email support@foundqi.com