Mabiaati privacy policy

Last updated: 14 October 2026

This policy explains what information Mabiaati, the cashier and point-of-sale app made by TAQNIYA AL-ALIYA LTD ("Taqniya", "we"), collects, how it is used, where it is stored and who it is shared with. The first part covers the Google user data Mabiaati uses for Google Drive backups.

In short: Mabiaati uses Google only to save, list, restore and tidy up its own backup files in your Google Drive, at your request. Your Google data and your backups travel only between your computer and Google; they never pass through Taqniya's servers, we never see them, and we never sell them or use them for advertising or to train AI.

1. Who is responsible

TAQNIYA AL-ALIYA LTD (trading as Taqniya), registered in England & Wales, company no. 17272167, 182-184 High Street North, London, England, E6 2JA. Contact: info@taqniya.net.

Mabiaati runs on the shop's own computer. The shop owner decides what goes into it (products, sales, customers, staff). For that shop data the shop is in charge; Taqniya only handles it where a feature described below sends it to us.

2. Google user data (Google Drive backup)

This part applies when a shop owner connects a Google account under Settings → Database → Connect Google Drive. Nothing is taken from Google until they do.

2.1 What Mabiaati accesses

Google permission	`https://www.googleapis.com/auth/drive.file` only. It lets Mabiaati create files in your Google Drive and see and manage only the files it created. Mabiaati cannot see any other file or folder in your Drive.
Files	The Mabiaati Backups folder and the backup files Mabiaati puts in it.
Account details	Your Google account's display name, email address and Drive storage usage and limit, read from Google Drive.
Sign-in tokens	The access and refresh tokens Google issues when you approve Mabiaati.

Mabiaati does not ask for your contacts, email, calendar, photos or any other Google data, and does not read the other files in your Drive.

2.2 How Mabiaati uses it

Backup files: to upload new backups of the shop's database, check each upload arrived intact, list the backups so you can choose one to restore, download a backup when you ask to restore, and permanently delete this computer's older backups beyond the number you chose to keep (or when your Drive is full).
Name and email: to show you which Google account is connected.
Storage usage and limit: to warn you, and to avoid a failed upload, when your Drive is nearly full.
Tokens: to keep Mabiaati connected so scheduled backups can run, until you disconnect.

We use Google user data only to provide the backup feature you turned on. We do not use or transfer it:

for advertising of any kind, including targeted, personalised, retargeted or interest-based advertising;
to sell it, or to give it to data brokers, information resellers or other third parties;
to determine credit-worthiness or for lending purposes;
to create databases or profiles about you; or
to develop, improve or train artificial-intelligence or machine-learning models. Google Workspace APIs (including Google Drive) are not used to develop, improve or train generalised or non-personalised AI or ML models.

No person at Taqniya reads your Google user data or your backups. We never receive them, so we could only see them if you chose to send us a copy yourself, for example for support.

2.3 Where it is stored and how it is protected

The sign-in tokens, account name, email and storage figures are kept only on the shop's computer, in a file in Mabiaati's data folder (on Windows, %APPDATA%\Mabiaati\data). The access and refresh tokens are encrypted on disk (AES-256-GCM). This file is never put into a backup.
Backups are stored in your own Google Drive, under your account and Google's protection. They are compressed but not encrypted by Mabiaati, so anyone who can open your Google Drive can open them: keep your Google account secure (a strong password and 2-step verification).
All traffic with Google goes directly from the shop's computer to Google's servers (oauth2.googleapis.com and www.googleapis.com) over encrypted HTTPS.

2.4 Sharing

Taqniya does not receive, store, sell, rent or share your Google user data or your Drive backups. No Taqniya server takes part in signing in, uploading, listing, downloading or deleting backups, and no Taqniya employee can see them. Mabiaati's phone apps, its online-store link and its in-app assistant have no access to your Google account or your Drive backups. We would only disclose information if the law required it, and only what it required.

2.5 Keeping and deleting

Backups stay in your Drive until Mabiaati removes older ones under your "keep" setting, or until you delete them yourself. Mabiaati deletes permanently (not to the bin) and only ever deletes backups made by the same computer.
Disconnect (in Settings → Database) deletes the sign-in, name, email and storage details from that computer. It leaves your existing backups in Drive and does not withdraw Mabiaati's access for other computers on the same Google account.
To withdraw Mabiaati's access completely, remove Mabiaati at myaccount.google.com/permissions. To delete the backups, delete the Mabiaati Backups folder in Google Drive. Uninstalling Mabiaati and deleting its data folder removes everything it stored on the computer.

2.6 Google API Services User Data Policy

Mabiaati's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. Other data Mabiaati handles

None of the following involves your Google account or your Drive backups.

Your shop's data stays on your computer. Products, sales, customers you record (such as names, phone numbers and delivery addresses), staff accounts and settings are kept in Mabiaati's database on the shop's computer, and in any local backups you choose to keep.
Phone apps (Mabiaati Manager and Captain). So the owner's and waiters' phones can show live figures and send orders, the till regularly sends a summary of the shop's data to Taqniya's relay server (relay.taqniya.net) over HTTPS: the shop's name and contact details, sales figures, recent orders with customer names and items, products, staff names and roles (never their PINs or passwords), activity, and repairs with customer names and phone numbers. The relay keeps the latest copy so the phones can read it, and Taqniya can see which shops are connected.
Online store (Matjari). If the owner turns on the online store, the till publishes the products it sells (name, price, stock, category, description and photo, never cost prices) so they appear in the shop's Matjari store, and customers' online orders come back to the till.
In-app assistant. If you use the built-in assistant, what you ask it is sent to Google's Gemini service to produce an answer; to answer questions about the shop it can look up product names, prices, stock and sales totals (cost and profit only for managers). It never receives your Google Drive data or backups.
Error reports. When the app hits an error, or when you send a problem report, the app sends Taqniya a short report: the error, the computer's hardware ID and Windows user name, and for reports you send, your shop's name, phone and address. We use these only to fix problems.
No advertising or analytics trackers are built into Mabiaati.

4. This website

taqniya.net uses a few small cookies and browser settings to work: taqniya_geo_lang remembers your language, taqniya_theme (stored in your browser) remembers light or dark mode, and tq_touch remembers that your device has a touch screen. We use your IP address, when you visit, only to pick your country's language and to apply the site's access settings; we do not keep it. There are no advertising cookies and no analytics trackers. If you contact us on WhatsApp, by phone or by email, we use what you send only to reply.

5. How long we keep data

Data on the shop's computer stays until the shop deletes it or uninstalls Mabiaati. The relay keeps only the latest summary for each connected shop, replacing it with each update; a shop can ask us to delete it at any time. We use error reports only to fix problems and delete them on request. Google Drive backups are covered in section 2.5.

6. Security

Connections to Google and to Taqniya's servers are encrypted with HTTPS. Google sign-in tokens are encrypted on the shop's computer. Taqniya's servers are access-controlled. No method is perfectly secure, so please also protect your computer, your Google account and your staff PINs.

7. Your rights

You can ask us for a copy of the personal data we hold about you, or ask us to correct or delete it, by writing to info@taqniya.net. Under UK data protection law you may also object to or restrict some uses, and complain to the Information Commissioner's Office (ico.org.uk). For data the app keeps on your own computer or in your own Google Drive, you can view, change or delete it yourself at any time.

8. Children

Mabiaati is a business tool for shops and is not meant for children. We do not knowingly collect children's data.

9. Changes

If we change how Mabiaati uses data, we will update this page and the date at the top before the change takes effect, and we will ask for your consent again where the law or Google requires it.

10. Contact

TAQNIYA AL-ALIYA LTD, 182-184 High Street North, London, England, E6 2JA. Email info@taqniya.net.