---

Privacy Policy

Order of Pharmacists of Lebanon (OPL) Mobile App

Effective date: October 6, 2026 Last updated: October 6, 2026

---

1. Who we are

The OPL mobile app (the "App") is published by the Order of Pharmacists of Lebanon ("OPL", "the Order", "we", "us"). The App is for registered members of the Order. It lets members view their membership details and digital ID card, pay dues and fees, request Order services, follow continuing-education (CE) courses, and receive news and notifications from the Order.

This policy explains what information the App handles, why, and the choices you have. For questions, contact us using the details in section 12.

2. Information we collect

a) Information you provide or that the Order already holds about you

• Your OPL membership number, phone number and email address, used to sign you in.
• Your membership record as held by the Order: name (in English and Arabic), profile photo, membership status, and the details shown on your digital ID card.
• Dues, subscription, retirement and insurance information related to your membership.
• Documents and photos you choose to submit, such as certificates, attendance proofs for CE credit, and documents a service request requires.
• Delivery details you enter for a service request, including an address and a location you pin on the map yourself.
• Your CE activity: courses opened, progress, quiz and evaluation answers, and certificates earned.

b) Payment information

Payments are processed by BOB Finance, our payment provider. When you link a BOB wallet or pay through the App, the App shows your wallet accounts and the status of your payments. The App does not collect or store card numbers. BOB Finance handles your payment details under its own privacy policy.

c) Information collected automatically

• A push-notification token issued by Firebase Cloud Messaging (Google), so the Order can send notifications to your device.
• Crash reports and performance data sent to Sentry, our error-monitoring service. These contain technical information such as device model, operating-system version, app version and the error that occurred. They help us fix problems.
• Map tiles are loaded from OpenStreetMap when you use the delivery map. This shares your device's IP address with the tile server, as with any web request.

d) Information that stays on your device

• Biometrics (Face ID, Touch ID, fingerprint): if you turn on biometric unlock, your device's operating system checks your biometrics. The App never receives, stores or sends your fingerprint or face data. It only receives a pass/fail result from the device.
• Your sign-in session and local app password (stored only as a salted hash) are kept in your device's secure storage.
• Preferences such as language and light/dark theme.
• A cached copy of your digital ID card, so it can be shown offline.

3. Device permissions

The App asks for these permissions only when a feature needs them. You can refuse or withdraw any of them in your device settings. The rest of the App keeps working without them.

• Camera: to photograph documents you submit.
• Photos / media library: to attach documents you already have.
• Notifications: to show messages from the Order.
• Biometrics (Face ID / fingerprint): to unlock the App instead of typing your password.

The App does not use your device's GPS location. A location on the delivery map is one you pin yourself.

4. How we use your information

We use your information to:

• verify your identity and sign you in, including by sending one-time codes by SMS;
• show your membership details and digital ID card;
• process dues, fees and service payments, and show their status;
• handle the service requests, clearances and applications you submit;
• record your continuing-education progress and issue certificates;
• send you notifications about your account, payments, requests and Order news;
• keep the App secure and fix errors.

We do not sell your personal information. We do not use it for advertising, and the App contains no advertising or third-party tracking for marketing.

5. Who we share information with

We share information only as needed to run the App:

• BOB Finance, to process payments and link your wallet.
• Google Firebase, to deliver push notifications.
• Sentry, to receive crash and error reports.
• SMS providers, to deliver one-time sign-in codes.
• OpenStreetMap, which serves map tiles.
• Public authorities, where Lebanese law requires it.

These providers may process data outside Lebanon. Each is bound by its own privacy and security obligations.

6. Data security

All communication between the App and the Order's servers is encrypted in transit (HTTPS). Sign-in sessions and secrets are kept in the device's secure storage (Keychain on iOS, Keystore-backed storage on Android). No method of transmission or storage is completely secure, but we take reasonable measures to protect your information.

7. Data retention

Your membership record, payment history and CE records are kept by the Order for as long as you are a member and afterwards as required by the Order's regulations and Lebanese law. Crash reports are kept by Sentry for a limited period. Data stored on your device is removed when you sign out or uninstall the App.

8. Your rights and choices

You may:

• ask to access or correct the personal information the Order holds about you;
• ask us to delete your App account and the data associated with it, except records the Order must keep by law or regulation;
• turn off notifications, biometric unlock, camera or photo access at any time in your device settings;
• sign out to remove your session from the device.

To make a request, contact us using the details in section 12.

9. Account deletion

To delete your App account, send a request from the email or phone number registered with the Order to opl@opl.org.lb. We will confirm your identity and process the request within 30 days. Your membership with the Order itself, and records the Order must keep by law, are not affected by deleting your App account.

10. Children

The App is for licensed pharmacists who are members of the Order. It is not directed at children, and we do not knowingly collect information from anyone under 18.

11. Changes to this policy

We may update this policy from time to time. We will post the new version at the same address and change the "Last updated" date above. Significant changes will also be announced in the App.

12. Contact us

---

© 2026 Order of Pharmacists of Lebanon. All rights reserved.