Privacy policyMaxfiylik siyosati

This policy covers the SAIR mobile app (bundle id uz.sair.app) and this website. SAIR is a travel marketplace in Uzbekistan: independent tour operators list tours, places and gear, and travelers browse, book and message them.

Where this policy says "we" it means the team operating SAIR. You can reach us any time at [email protected].

Ushbu siyosat SAIR mobil ilovasi (paket identifikatori uz.sair.app) va ushbu veb-saytni qamrab oladi. SAIR — O'zbekistondagi sayohat platformasi: mustaqil tur operatorlari turlar, joylar va jihozlarni joylaydi, sayohatchilar esa ularni ko'radi, bron qiladi va yozishadi.

Ushbu siyosatdagi "biz" — SAIR'ni yurituvchi jamoa. Istalgan vaqtda [email protected] orqali bog'lanishingiz mumkin.

Creating an account

An email address or a phone number, which we verify with a one-time code. That is the whole requirement.

You can instead sign in with Apple, Google or Telegram. In that case we receive the identifier the provider gives us, plus your name and email address where you allow it. If you use Sign in with Apple and choose to hide your email, we only ever see Apple's relay address — never your real one.

The app also supports passkeys. A passkey stores a public key and a device label on our side. Your fingerprint or face never leaves your device and is never sent to us.

Your profile — all optional

First and last name, a username, a profile photo, a phone number, your region and district, education and occupation. You can leave every one of these empty, edit them, or clear them later.

What you create in the app

Bookmarks, reviews and ratings, twenty-four hour stories, messages you send to operators, bookings you make, and market orders you place.

Hisob ochish

Elektron pochta yoki telefon raqami — biz uni bir martalik kod bilan tasdiqlaymiz. Talab qilinadigan yagona narsa shu.

Buning o'rniga Apple, Google yoki Telegram orqali kirishingiz mumkin. Bunda biz provayder beradigan identifikatorni, shuningdek siz ruxsat bergan holda ismingiz va pochtangizni olamiz. Agar Apple bilan kirishdan foydalanib pochtangizni yashirishni tanlasangiz, biz faqat Apple'ning vositachi manzilini ko'ramiz — haqiqiy manzilingizni hech qachon emas.

Ilova passkey'larni ham qo'llab-quvvatlaydi. Passkey bizning tomonimizda ochiq kalit va qurilma nomini saqlaydi. Barmoq izingiz yoki yuzingiz qurilmangizdan chiqmaydi va bizga yuborilmaydi.

Profilingiz — barchasi ixtiyoriy

Ism va familiya, foydalanuvchi nomi, profil rasmi, telefon raqami, viloyat va tuman, ta'lim va kasb. Bularning har birini bo'sh qoldirishingiz, tahrirlashingiz yoki keyinroq o'chirishingiz mumkin.

Ilovada yaratgan narsalaringiz

Saqlanganlar, sharhlar va baholar, 24 soatlik hikoyalar, operatorlarga yuborgan xabarlaringiz, qilgan bronlaringiz va bozordagi buyurtmalaringiz.

Analytics

The app uses Google Firebase Analytics to tell us which parts of the app get used. It records the app version, device model, operating system version, language, country, which screens you open and which in-app actions you take, together with a Firebase installation identifier. When you are signed in, we associate those events with your account id so we can tell one person's session from another's. This data is not used for advertising and is not shared with advertisers.

Session analytics

Some builds of the app include Microsoft Clarity, which records a replay of the session — where you tapped and how you moved through a screen — so we can find the places where the app is confusing. Text you enter is masked in those recordings.

Server logs

Our servers record the usual request log: IP address, time, the endpoint called, and the app version. We use it to keep the service running and to investigate abuse.

Tahlil

Ilova Google Firebase Analytics'dan foydalanadi — bu bizga ilovaning qaysi qismlari ishlatilayotganini ko'rsatadi. U ilova versiyasi, qurilma modeli, operatsion tizim versiyasi, til, mamlakat, qaysi ekranlarni ochganingiz va qanday amallar bajarganingizni, shuningdek Firebase o'rnatish identifikatorini yozib boradi. Tizimga kirgan bo'lsangiz, biz bu hodisalarni hisobingiz identifikatori bilan bog'laymiz. Bu ma'lumot reklama uchun ishlatilmaydi va reklama beruvchilarga berilmaydi.

Sessiya tahlili

Ilovaning ayrim versiyalarida Microsoft Clarity mavjud — u sessiya takrorini yozib boradi: qayerga bosganingiz va ekran bo'ylab qanday harakatlanganingiz. Bu bizga ilovaning tushunarsiz joylarini topishga yordam beradi. Siz kiritgan matn bu yozuvlarda yashiriladi.

Server jurnallari

Serverlarimiz odatiy so'rov jurnalini yuritadi: IP manzil, vaqt, murojaat qilingan manzil va ilova versiyasi. Bundan xizmatni ishlashda saqlash va suiiste'molliklarni tekshirish uchun foydalanamiz.

The app asks for the camera and the photo library in exactly one place: when you set a profile picture. Nothing is read or uploaded until you pick an image, and declining the permission does not stop you using anything else.

Ilova kamera va galereyaga faqat bitta joyda ruxsat so'raydi: profil rasmini o'rnatganingizda. Siz rasm tanlamaguningizcha hech narsa o'qilmaydi va yuklanmaydi, ruxsat bermaslik esa boshqa hech nimadan foydalanishingizga to'sqinlik qilmaydi.

• No location tracking. The app never asks for location permission and does not collect your position.
• No advertising. There is no advertising SDK in the app, no advertising identifier is read, and there is no tracking prompt because there is nothing tracking you across other companies' apps.
• Nothing sold. We do not sell, rent or trade your data, and we do not work with data brokers.
• No push notifications. As of this version the app does not register for push notifications; notifications appear inside the app only.

• Joylashuv kuzatilmaydi. Ilova hech qachon joylashuvga ruxsat so'ramaydi va joyingizni yig'maydi.
• Reklama yo'q. Ilovada reklama SDK'si yo'q, reklama identifikatori o'qilmaydi va kuzatuv so'rovi ham chiqmaydi — chunki sizni boshqa kompaniyalar ilovalari bo'ylab kuzatadigan hech narsa yo'q.
• Hech narsa sotilmaydi. Ma'lumotlaringizni sotmaymiz, ijaraga bermaymiz va ma'lumot brokerlari bilan ishlamaymiz.
• Push bildirishnomalar yo'q. Ushbu versiyada ilova push bildirishnomalarga ro'yxatdan o'tmaydi; bildirishnomalar faqat ilova ichida ko'rinadi.

The operator you book with

When you book a tour, order from the market, or message a company, that company sees your profile name and photo, the details of the booking or order, and your messages. They need it to run the trip. They are independent businesses and handle your data under their own terms.

Other travelers

Your profile name and photo, the reviews you write, the stories you post while they are live, and your position on the leaderboard are visible to other people using SAIR.

Service providers

Google (Firebase Analytics), Microsoft (Clarity, where enabled), and the hosting provider that runs our servers and databases. They process data on our instructions and for no purpose of their own.

When the law requires it

We will disclose data if we are legally required to, or where it is necessary to protect someone's safety or to investigate fraud or abuse of the service.

Siz bron qilgan operator

Tur bron qilganingizda, bozordan buyurtma berganingizda yoki kompaniyaga yozganingizda, o'sha kompaniya profil nomingiz va rasmingizni, bron yoki buyurtma tafsilotlarini va xabarlaringizni ko'radi. Bu safarni tashkil qilish uchun kerak. Ular mustaqil tashkilotlar bo'lib, ma'lumotlaringizni o'z shartlari asosida qayta ishlaydi.

Boshqa sayohatchilar

Profil nomingiz va rasmingiz, yozgan sharhlaringiz, faol turgan hikoyalaringiz va reytingdagi o'rningiz SAIR'dan foydalanadigan boshqalarga ko'rinadi.

Xizmat ko'rsatuvchilar

Google (Firebase Analytics), Microsoft (Clarity, yoqilgan hollarda) va serverlarimiz hamda ma'lumotlar bazamizni yurituvchi hosting provayderi. Ular ma'lumotlarni faqat bizning ko'rsatmamiz asosida qayta ishlaydi.

Qonun talab qilganda

Qonun talab qilsa yoki kimningdir xavfsizligini himoya qilish, firibgarlik va suiiste'mollikni tekshirish zarur bo'lsa, ma'lumotni oshkor qilamiz.

Traffic between the app and our servers goes over HTTPS. Your sign-in token is stored in the iOS Keychain or the Android Keystore, not in ordinary app storage. Access to the production database is limited to the people who need it to operate the service.

No system is perfect, and we will not pretend otherwise. If a breach affects your data we will tell you.

Ilova va serverlarimiz o'rtasidagi trafik HTTPS orqali o'tadi. Kirish tokeningiz oddiy ilova xotirasida emas, iOS Keychain yoki Android Keystore'da saqlanadi. Ishlab turgan ma'lumotlar bazasiga kirish faqat xizmatni yuritish uchun zarur bo'lgan xodimlar bilan cheklangan.

Mukammal tizim yo'q va biz buni yashirmaymiz. Agar ma'lumotlaringizga ta'sir qiladigan buzilish yuz bersa, sizga xabar beramiz.

• Your account and profile — for as long as the account is open.
• Bookings and orders — kept after a trip, because the operator and we may need the record for accounting and for resolving disputes.
• Stories — visible for twenty-four hours, then removed from the feed.
• Server logs — roughly thirty days.
• Analytics — under Firebase's retention settings for our project.

• Hisobingiz va profilingiz — hisob ochiq turgan davrda.
• Bronlar va buyurtmalar — safardan keyin ham saqlanadi, chunki hisob-kitob va nizolarni hal qilish uchun yozuv kerak bo'lishi mumkin.
• Hikoyalar — 24 soat ko'rinadi, so'ng lentadan olib tashlanadi.
• Server jurnallari — taxminan o'ttiz kun.
• Tahlil — loyihamiz uchun Firebase saqlash sozlamalariga muvofiq.

You can close your SAIR account and have your personal data deleted. The steps, what goes, and what has to stay, are on the account deletion page.

SAIR hisobingizni yopishingiz va shaxsiy ma'lumotlaringizni o'chirtirishingiz mumkin. Qadamlar, nima o'chishi va nima saqlanib qolishi hisobni o'chirish sahifasida yozilgan.

You can edit or clear any profile field from inside the app, delete your own reviews and stories, and delete your account outright.

You can also ask us for a copy of the data we hold about you, ask us to correct it, or ask us to erase it. Write to [email protected] from the address or phone number on the account and we will answer within thirty days.

Istalgan profil maydonini ilova ichida tahrirlashingiz yoki tozalashingiz, o'z sharh va hikoyalaringizni o'chirishingiz hamda hisobingizni butunlay o'chirishingiz mumkin.

Shuningdek, biz saqlayotgan ma'lumotlaringiz nusxasini so'rashingiz, ularni tuzatishni yoki o'chirishni talab qilishingiz mumkin. Hisobga bog'langan manzil yoki raqamdan [email protected] ga yozing — o'ttiz kun ichida javob beramiz.

SAIR is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has created an account, write to us and we will delete it.

SAIR 13 yoshgacha bo'lgan bolalar uchun mo'ljallanmagan va biz ularning ma'lumotlarini bila turib yig'maymiz. Agar bola hisob ochgan deb hisoblasangiz, bizga yozing — o'chirib beramiz.

If this policy changes, the date at the top of the page changes with it. If a change materially affects what we collect or who sees it, we will say so in the app before it takes effect.

Ushbu siyosat o'zgarsa, sahifa boshidagi sana ham o'zgaradi. Agar o'zgarish nimani yig'ishimiz yoki kim ko'rishiga jiddiy ta'sir qilsa, kuchga kirishidan oldin ilovada xabar beramiz.