Wein privacy policy

Effective date: 28 October 2026. Last updated: 28 October 2026.

Wein (وين) is a navigation app for drivers in Iraq. This policy explains what Wein collects, why, who else receives it, how long it is kept, and how you can delete it. "We" means the operator of Wein: Oritool, Baghdad, Iraq. Questions and requests: info@oritool.com.

In short

• No ads, no selling or renting of your data, and no tracking across other apps or websites.
• You can use the map, routes, search and reports without an account. An account (your phone number) keeps your saved places across phones.
• Your position is used to guide you. Live traffic samples are anonymous and never include the first or last 500 m of a trip. Other drivers may see your car on their map as a small face with no name, delayed, and you can turn that off.
• Voice search first uses your phone's own speech recognition. Only when that does not work is the short recording sent to Google's Gemini to understand the place name; we do not store it.
• You can delete your account at any time, in the app or at wein.clinora.site/delete-account.

What we collect and why

Your account (optional)

• Phone number: to sign you in. We send a 6-digit login code to it over WhatsApp. Codes are stored only as a hash and expire after 5 minutes.
• Saved places: home, work and other places you save (name, address and position), so they follow you to a new phone.
• The time you confirmed being 18 or older, if the app asked you to.
• Your role (driver or admin) and points.

Your device

• A random install ID that the app creates when it is first opened. It is not your phone's hardware ID or advertising ID, and it changes if you reinstall the app.
• Platform (Android or iOS), app version and when the app was last used.
• A trust score and any temporary suspension, used only to limit abuse of reports and requests.

We use these to run the service, to limit how often one phone can send requests, and to prevent abuse.

Your location

• Your phone uses its location to show where you are and to guide you. It is not sent while the app is closed or in the background.
• When you plan a route, the start and destination are sent to our server. The planned route is kept for 30 minutes so the app can follow it, then deleted.
• When you search for a place, your position may be sent so that nearby results come first. We do not keep a history of your searches; results are cached for 10 minutes without your device or account.

Live traffic ("Help with traffic")

• While "Help with traffic" is on (it is on by default; turn it off in Settings at any time), the app is open and the car moves faster than 5 km/h, the app takes a point about every 5 seconds: time, position, accuracy, speed and heading.
• The points are sent every 60 seconds without your name, phone number or device ID. The first and last 500 m of every trip are never sent, so a trip does not reveal a home or workplace.
• The points are matched to roads in memory and then discarded. We keep only road speeds: per road segment for 30 minutes, and hourly averages with no driver in them for 8 weeks. Distinct cars are counted with a coded key that changes every day and cannot be traced back to you.
• Where the phone's motion sensors feel a speed bump, the app sends the bump's position, heading, speed and strength. It is kept for 30 days under a coded key that changes every month, so that confirmed bumps can be added to the map.

Other drivers on the map ("Show me to other drivers")

• Like Waze, Wein shows other drivers round you as small faces on the map. Only cars that are moving (faster than 10 km/h) with "Help with traffic" on are shown, and only while "Show me to other drivers" is on too (it is on by default; turn it off in Settings at any time, or turn "Help with traffic" off).
• What is shared: the server takes, from the traffic points above, one position of your car on the road: where it was at least 30 seconds earlier, snapped to the road, rounded to about 10 m, with its direction and a face colour picked at random for the trip.
• What is not shared: no name, phone number, account or device ID, and never a position in the first or last 500 m of a trip or within 500 m of where it started. Other drivers see only the face, its position and its direction.
• The server keeps only your car's latest position, under a random code the app makes for each trip (the server stores only a scrambled form of it), and deletes it after about 2 minutes without a new one. A new trip gets a new code, so trips are not linked to each other or to you.

Road reports and votes

• When you report something on the road (an accident, a jam, police, a checkpoint and so on), we store its type, position, direction, time and the device that sent it, and your account if you were signed in. Other drivers see the report, never who sent it.
• Votes (still there / not there) are stored with the voting device.
• Reports and their votes are deleted 30 days after the report ends. Votes on a road feature (for example a speed camera) are deleted 30 days after the feature is removed.

Voice search

• Voice search first uses your phone's own speech recognition (Google on Android, Apple on iOS), under their terms.
• If that is not available or does not understand you, the app sends the short recording (a few seconds) to our server, which sends it to Google's Gemini to get the place name. The app asks for your consent before the first time. We do not store the recording: it is deleted as soon as the text comes back.

The spoken route report

• The route report is written and voiced either by Google's Gemini or by our own Iraqi templates. Gemini receives only road facts (street names, minutes, distances and how much of the route has traffic data), never your position, account or device ID.
• The voiced report is kept for 1 hour so that it can be played again, then deleted.

Offline maps

• The offline pack (about 450 MB of maps, roads and places for Iraq) is downloaded from our server. The download request carries the device's token only to limit downloads.
• Once it is downloaded, offline maps, search and routing run on your phone and send nothing to us.

Technical logs

• Our server logs errors and the paths of failed requests, never phone numbers, positions, device IDs, speech or recordings.
• The web server in front of Wein may record IP addresses and requests for security, for up to 30 days.

Who else receives data

We use these service providers (processors). They may process data only to provide their service to us.

• Google (Gemini API): voice-search recordings (only when your phone's recognition did not work) and the road facts for the spoken report. Google processes them outside Iraq under its Gemini API terms.
• WhatsApp (Meta): we send your login code from our WhatsApp number to yours, so WhatsApp handles your number and that message under its terms.
• Our hosting provider: the servers that run Wein, in Germany (European Union).

Map data comes from OpenStreetMap and is downloaded to our servers; nothing about you is sent to OpenStreetMap. We disclose data to authorities only when Iraqi law or a valid order requires it. We do not sell or rent personal data and we have no advertisers.

Where your data is processed

Wein is offered in Iraq, but your data is not processed only in Iraq: Google and Meta process data outside Iraq, and our servers are located in Germany (European Union).

How long we keep it

• Account, saved places and 18+ confirmation: until you delete your account.
• Login codes: 5 minutes. Sign-in sessions: up to 30 days unless renewed.
• Device record: while the app is in use; a device not used for 12 months is deleted.
• Planned routes: 30 minutes. Search results cache: 10 minutes.
• Traffic: points are not stored; road speeds 30 minutes; hourly averages 8 weeks.
• Your car's position shown to other drivers: about 2 minutes.
• Speed-bump positions: 30 days.
• Reports and votes: 30 days after the report ends.
• Voice-search recordings: not stored. Voiced route reports: 1 hour.
• Database backups: 30 days.

Security

All connections to Wein are encrypted (HTTPS). Login codes and sign-in tokens are stored only as hashes. Access to the servers and the admin tools is restricted.

Your choices and rights

• Turn off "Help with traffic" in Settings at any time; routes and reports keep working.
• Turn off "Show me to other drivers" in Settings at any time to stop your car being shown to other drivers; hide other drivers on your own map with "Wazers" in the map layers.
• Allow or refuse location and microphone access in your phone's settings, and the Gemini voice search in the app.
• Ask us for a copy of your data or to correct it: info@oritool.com.
• Delete your account in the app (Settings → Delete account) or at wein.clinora.site/delete-account. Deletion is permanent and happens at once: your phone number, account, saved places and sign-in sessions are deleted, and you are signed out on every phone. Your road reports stay, without your account, until they are deleted 30 days after they end. A record that an account was deleted is kept, with counts only and no phone number. Your phone stays registered as a guest so the app keeps working without an account.

Age

Wein is intended for people aged 18 and over. Google's terms for Gemini require users to be 18 or older.

Changes

We will publish any change to this policy on this page and update the date at the top. For significant changes we will also tell you in the app.

The law

We handle personal data in line with the applicable laws of the Republic of Iraq.

Contact

• Oritool, Baghdad, Iraq
• Email: info@oritool.com