Privacy policy

City Services (“the app”) is the maintenance app for the residential buildings that use it, including Suli View, Mayorca, Grand Mayorca, Rovar, Mirvanos, MJ Towers, White Towers, and Kurdsat Towers. This page describes what the app and its server at api.getshar.online store. Last updated 30 September 2026.

Accounts

There is no public sign-up. The building office creates each account and gives the person a username or a phone number, plus a password. The person then sets their own password. We store the name, the username or phone number, the role (resident, staff, specialist, complex admin, or owner), and the building and apartment that role is tied to. The password is stored only as a hash. Staff cannot read it. If someone forgets it, the office sets a temporary password and the person must choose a new one at the next login.

Maintenance requests

When someone sends a request we store the description, the category (for example electrical or plumbing), the priority, the status, the building, the apartment, who created it, who it is assigned to, and the history of status changes.

Photos

A request can include up to five photos from the phone’s photo library (JPEG, PNG, or WebP, up to 2 MB each). Before a photo is saved, the server removes location and other camera metadata, including GPS. Photos are stored on our server as files, not inside the database. When a request is marked completed, those photos are deleted by a nightly cleanup. The written request can remain so the building has a record of the repair. Someone who can see the request can also remove a photo while the request is still open.

What stays on the phone

The login token is kept in the device’s secure storage so the person stays signed in. On the website version of the app, that token is kept in the browser’s storage instead. The chosen language is stored on the device. We do not use advertising, and the app does not include a third-party analytics tracker.

What we do not collect

We do not collect GPS or precise device location. “Location” inside the app means the building and apartment the office assigned. We do not sell personal data, and we do not share it with advertisers.

Who can see the data

A resident sees their own apartment’s requests. Staff and the admin of a building see the people and requests for that building. A specialist sees requests in their trade for that building. The owner can see all buildings on this account. People outside that building’s staff do not get access.

Where it is stored

The app talks to our server over HTTPS. Account and request records are in a MongoDB Atlas database. Photos sit on the same server that runs the API. Those providers process the data only so the service can run. Google Play and Apple process whatever their store requires to install the app. The app does not send tickets or photos to them.

How long we keep it

Account and request records are kept while the building uses the service. Ending a person’s link to an apartment removes that access. The phone number can be used again later if the office links that person to another apartment. Photos on a completed request are deleted as described above. To ask for your data, or to ask us to delete your account, contact the building office that created your login, or email indigtest13@gmail.com.

Children

The app is for residents and building staff. It is not directed at children, and we do not knowingly collect data from children.

Contact

For privacy questions about City Services, email indigtest13@gmail.com.

Changes

If this policy changes, the new text will be on this page with a new date.