Privacy policy

1. Data controller and contact

The data controller is FATH Services, the operator of AMBULANT SERVICES in Senegal. For any question about personal data or to exercise a right, write to contact@fath-services.com. To protect the account, reasonable proof of identity or control of the phone number may be requested without collecting more information than necessary.

2. Data we process

• Account and identity: display name, OTP-verified phone number, optional email, protected password, language, age and gender when provided, photo and account type.
• Provider profile: professional identity, verification documents, establishment, categories, service area, fixed contact details, availability, offers, products, images, events and online status.
• Activity: searches, favourites, bookings, conversations with support or the assistant, messages, reviews, reports and actions required for account security.
• Location: the customer’s search point, an establishment location and, for a mobile provider who voluntarily goes online, positions required for tracking and connection.
• Technical data: IP address while a request is handled, date and time, application version, device type, security logs, notification identifier and diagnostics when authorised by the user.

Do not send sensitive data that is not necessary for the service in profiles, messages or requests. In particular, the assistant must not receive a password, OTP code, bank details or a complete identity document.

3. Why this data is used

• to create, verify, secure and administer the account;
• to display nearby results, calculate a distance and enable a connection;
• to manage requested profiles, offers, bookings, availability, reviews, events and notifications;
• to prevent fraud, limit abuse, process reports and defend users’ rights;
• to provide support and, when the assistant is used, generate an answer from the message and strictly necessary context;
• to comply with a legal obligation or competent authority decision, or establish evidence of a transaction.

Depending on the feature, processing is based on your request to use the service, your explicit consent to an optional permission, a legal obligation, or the legitimate interest in securing the platform and recording exchanges. A new incompatible purpose will not be applied without notice and, where required, renewed consent.

4. Usage statistics and audience measurement

AMBULANT SERVICES offers one specific optional choice: application usage data, which helps us understand which features are used and improve journeys.

On first launch this choice is disabled. Taking no action or refusing means refusal and does not limit essential service features. Accepting the terms or this policy when creating an account never authorises this optional collection.

You may change this choice at any time in Settings. Disabling it immediately stops new Analytics transmissions; it does not reverse processing lawfully carried out before withdrawal. Native Crashlytics error reporting remains disabled in this version: no activation control is shown, no pending report is sent, and the application requests its deletion.

For safety, the optional Analytics permission is never automatically restored after the application is fully stopped or restarted. It is also reset to disabled on sign-out or account deletion, so another person using the same phone never inherits your permission.

5. Phone, GPS and visibility between users

When the account is created, you are told that phone and location data are necessary for the main features. The acceptance box confirms that you understand the processing and sharing described here; it does not by itself enable precise or background location, which remains controlled by Android or iOS and by your actions.

• Before a valid relationship: the phone number and exact contact details are hidden; a mobile provider appears at an approximate location.
• After connection: useful contact details may be disclosed to the customer or provider concerned by a matching search or accepted booking.
• Fixed provider: the selected business location is visible with the profile so customers can find it.
• Mobile provider: precise tracking works only while online and with the appropriate permission. Going offline or withdrawing permission stops new transmissions.
• Customer: their location is used for search and may be shared with the relevant provider where a feature requires it; it never enables provider-style background tracking.

No member account can be created without a verifiable number. Without location, general browsing may remain possible, but proximity results, directions and tracking features will be limited or unavailable.

6. Recipients, processors and transfers

Data is accessible only as needed by:

• the user connected with you, within the limits described above;
• the AMBULANT SERVICES team authorised for support, verification, security and administration;
• hosting, SMS/OTP, mapping, push notification, real-time messaging, mobile distribution, email, monitoring and backup providers;
• an artificial intelligence model provider when you voluntarily use the assistant, with only the necessary message and minimal context;
• an administrative or judicial authority where required by law.

Some technical providers, notably mobile, SMS, mapping or artificial intelligence services, may process data outside Senegal. Before production activation, FATH Services checks the applicable safeguards and completes required formalities with Senegal’s Personal Data Protection Commission. AMBULANT SERVICES neither sells nor rents personal data.

7. Retention periods

Retention is limited by purpose and the following constraints:

• OTP codes expire after 10 minutes and temporary registration proof after 5 minutes;
• the last real-time GPS presence in cache expires no later than one hour after the last position;
• raw journey GPS points are retained for 15 minutes and compacted history data for up to 24 hours;
• an expired search is removed no later than 24 hours after expiry;
• when enabled, daily country page-view counters are deleted after 90 days and contain no IP address or individual identifier;
• fixed contact details, the account, profile and published content are retained while the account or content remains active;
• bookings, messages, reports and security records are retained as long as needed for the service, a dispute, fraud prevention or a legal obligation;
• after a deletion request, data is erased or anonymised except where temporarily retained for a legal obligation, evidence or a limited-rotation backup.

Data may be kept longer where required by a dispute or authority request, then removed when that reason no longer applies.

8. Your choices and rights

Under the conditions of Senegalese law, you may request access to your data, object to certain processing, correct or update inaccurate information, and request that data be blocked or deleted. The profile can be corrected and the account deleted from the application; you may also write to contact@fath-services.com.

A written request receives a response within the legal period, normally one month. You may also withdraw location or notification permission in the device settings. Withdrawal does not reverse lawful processing already carried out, but may disable the feature that depends on it.

If the response does not satisfy you, you may contact the Personal Data Protection Commission of Senegal.

9. Security, children and policy updates

AMBULANT SERVICES uses access controls, communication encryption, phone verification, request limits, role separation and backup mechanisms. Mobile session tokens are stored in the device’s secure storage. No system can guarantee zero risk, so immediately report suspicious activity using the contact above.

The platform does not accept registration by a child under 16. Between 16 and the legal age of majority, permission from a legal representative must be obtained where necessary. A non-compliant account may be suspended and its data deleted.

This policy may be adapted following a change to the product, its providers or applicable law. A material change will be announced before taking effect and may require renewed acceptance. The applicable version is identified by the date at the top of the page.