Skip to content
Get the app

Privacy policy

Last updated: 2026-11-13

1. Who we are

Qidda («قِدّة») is a job-costing app for fit-out contractors on web and Android, operated by HashStudio («we»). This policy explains what data we collect and how we use and protect it. It covers the website qidda.app, the web app app.qidda.app and the Android app (app.qidda). The service is for people aged 18 and over.

For anything about your data, contact admin@qidda.app.

2. Data we collect

  • Your account: name, email, the Google account ID if you sign in with Google, interface language, and the name of the device you signed in from (to manage and end sessions).
  • Your company: company name and country, plus phone, address and logo if you add them.
  • What you record in your work: projects and work items, money entries (client payments, expenses, petty cash), suppliers and craftsmen with their phone numbers, the project client's name, phone and site address, notes, and invoice and site photos.
  • Your team: member names, roles and permissions, and their invitations (by email or a personal link you send).
  • Purchases: the pack or project bought, amount, currency, date and payment status. We never see or store your card number.
  • Limited technical data: server errors for operation and security, and short-lived counters that prevent abuse. We do not log the content of your requests.

We do not collect your location or your contacts, and we use no advertising, no advertising ID and no behavioural tracking. The marketing site sets no tracking cookies; the web app stores in your browser what it needs to keep you signed in and to work offline.

3. Why we use your data

  • To run the service you asked for: your accounts, projects and reports, synced across your devices.
  • To sign you in and protect your account.
  • To process payments and refunds and keep purchase records required for accounting and the law.
  • To answer you and support you, and to send service messages (sign-in link, payment confirmation).

We do not sell or rent your data and we do not use it for advertising.

4. Your company and your clients

Your company data (projects, entries, parties, photos) is yours and you are responsible for it. We store and process it on your behalf, only to provide the service. If you enter other people's data (clients, suppliers, craftsmen), you are responsible for having the right to do so.

Your project and invoice photos are private to your company and never published. A client sees only what you choose in the client link, and you can switch the link off at any time. The company logo appears on your reports and in the client link.

5. Who processes your data with us

We use providers that process limited data, only as needed to deliver the service. They do not use it for their own advertising:

  • Google: sign-in with a Google account, and Google Play for buying projects in the Android app.
  • RevenueCat: confirms Google Play purchases and links them to your account. It receives our user ID and purchase data only.
  • Kashier: the card payment gateway on the website (Egypt). You enter card details with them directly and they never pass through our servers.
  • Vultr: hosts the servers where your data is stored.
  • Email hosting: to send service emails such as the sign-in link.

We may disclose data if the law or a competent court requires it.

6. Where your data is stored and how we protect it

Data is stored on a server rented from Vultr, and may be processed by the providers above outside your country. We protect it with: encrypted connections (HTTPS) at all times, sign-in sessions that can be ended on every device, role-based permissions so each member sees only what concerns them, strict separation between companies, and daily backups. No system is perfectly secure, but we work to reduce the risk and will tell you if an incident affects your data and requires notice.

7. Retention and deletion

  • We keep your data while your account and company exist. If a project ends or you stop using Qidda, we delete nothing: the project becomes read-only and exportable.
  • If you delete your company: it stays with you read-only and exportable for 30 days, during which you can cancel the deletion, then all its projects, entries and photos are deleted for good.
  • If you delete your own account: it closes at once and your email and Google ID are removed from our records; your entries stay in your company's books under your name only while the company exists.
  • Backups: deleted data rolls out of backups automatically within 14 days.
  • Payment records: we keep a minimal record (project bought, amount, date, payment status) with no personal data, for accounting and legal needs.

Full steps are on the Delete account page.

8. Your rights

You have the right to access, correct, export and delete your data, to withdraw consent and to object to processing. Export is always free from the app (More → Export all data). For any other request email admin@qidda.app from your account email; we reply within 30 days at the latest. We act in line with Egypt's Personal Data Protection Law No. 151 of 2020.

9. Children

Qidda is for people aged 18 and over and we do not knowingly collect data from anyone younger. If we learn of an account belonging to a minor, we delete it.

10. Changes to this policy

We may update this policy and will change the last-updated date above. For a material change we will tell you in the app or by email before it takes effect.

11. Contact

HashStudio, email: admin@qidda.app.

Questions? Email us at admin@qidda.app