Privacy Policy

This Privacy Policy describes how the Mekhmon platform (mekhmon.com) collects, uses and protects users' personal data. The platform operator and the party responsible for processing personal data is Khizmatrasonii Nav LLC (ООО «Хизматрасонии Нав»), Dushanbe, Republic of Tajikistan.

1. Operator and contacts

The personal data operator is Khizmatrasonii Nav LLC (ООО «Хизматрасонии Нав»). For data-related matters you can contact us at support@hizmatrason.tj. For certain data submitted by venues (e.g. for bookings or loyalty participation), the relevant venue may act as operator and Mekhmon as the processor acting on its instructions.

2. What data we process

We process: phone number and verification code (for OTP login), name, email address (if you provide it) and user profile, profile photo (avatar, if you upload one), user identifier, data about table bookings, orders, purchases and venue visits, order comments, reviews and ratings, loyalty data (points, accrual and redemption history), and technical data (IP address, device identifiers, device and browser type, access logs, crash logs and app performance diagnostics). We do not process biometric data.

We do not store payment card data. Payments, where made, are processed directly through a third-party payment provider (SmartPay), and your card details are never passed to the app or to our servers.

3. Purposes and legal basis

Data is processed for: account registration and login, creating and confirming bookings, accruing and tracking loyalty points, publishing reviews, ensuring security and preventing fraud, and complying with legal requirements. The legal bases are the user's consent, performance of a contract (provision of the service) and compliance with the law.

4. Sharing data with third parties

We do not sell personal data. Limited sharing may occur: with venues — to the extent needed to fulfil your booking or your participation in their loyalty programme; with infrastructure providers (hosting, SMS/notification and push delivery) — solely to operate the service; with Google Firebase (Google LLC) — for usage analytics, push notifications and crash reporting, whereby device identifiers, diagnostics, crash logs and anonymised events are transmitted to it (processing is governed by Google's policy: policies.google.com/privacy); with state authorities — upon lawful request.

5. Retention periods

Account data is retained while your account exists. Booking history and loyalty transactions are kept for as long as needed to provide the service and meet legal requirements. After account deletion, data is deleted or anonymised, except for information we are legally required to retain.

6. Security measures

We apply: encrypted connections (HTTPS/TLS), role-based access control, secure storage of passwords and codes, session expiration, activity logging and data backups.

7. User rights

You have the right to: obtain information about the processing of your data, request a copy of the data, ask for correction of inaccurate data, withdraw consent and delete your account, restrict processing, and lodge a complaint with the competent authorities or a court under the laws of the Republic of Tajikistan. To exercise your rights, write to support@hizmatrason.tj.

Data deletion. To delete your account and the related personal data, send a request to support@hizmatrason.tj (if in-app deletion is available, you can also do it yourself in the profile section). The request is processed within 30 days; some information may be retained to the extent and for the period required by law.

8. Minors

The service is not intended for persons under 18. If you become aware that a minor has provided us with data without the consent of a legal representative, please notify us and we will delete such data.

9. Governing law

Data processing is governed by the laws of the Republic of Tajikistan, including personal data protection rules and constitutional privacy guarantees.

10. Policy updates

We may update this Policy. The current version is always published on this page with the date of the latest update.

Last updated: 2 July 2026.