Privacy Policy

Effective May 29, 2026

Daqqah is committed to protecting your privacy. This policy explains what data we collect, how we use it, and who we share it with.

1. Data we collect

a. Phone number

We use your phone number to create and verify your account via a one-time passcode (OTP) sent through Twilio Verify. We store the number in our database tied to your account so we can recognize you on subsequent sign-ins and match it against other users' contacts.

b. Contacts (phone numbers only)

When you grant Contacts permission, the app sends only the phone numbers to our servers to match against registered users. We do not store your contacts list or any names on our servers — we store only an aggregate count for admin analytics. Transmission is over encrypted HTTPS.

c. Precise location (when in use only)

The "Nearby" feature uses your precise location to find other users in the same place. We do not track location in the background and do not retain location history — it is used only during the active session for proximity calculation.

d. Name and profile photo

You choose your display name and optionally upload a profile photo. We store both to link to your account and show them to your friends.

e. Content you create

• Friend requests and your friends list
• Groups you create or join
• "Daqqah" emoji pings you send or receive
• Messages and announcements you post in groups
• Image attachments (stored on Cloudflare R2)

f. Operational usage data

We store lightweight indicators such as last-active timestamp, total daqqas sent/received, app version, and OS version. This data powers features (e.g., the streak counter) and admin-dashboard statistics.

2. What we do not collect

• No advertising identifiers (IDFA) and no cross-app or cross-site tracking
• No third-party analytics SDKs (Google Analytics, Mixpanel, Firebase Analytics, Sentry, Crashlytics, etc.)
• We do not read your private message content or metadata for advertising
• We do not sell your data to any third party

3. Who we share data with

We use technical service providers as data processors on our behalf, solely to operate the app:

• Twilio Verify — to send the OTP to your phone number during sign-in
• Twilio / Meta WhatsApp Cloud API — to send a WhatsApp invitation message to non-registered contacts (only when you explicitly initiate it)
• Apple Push Notification Service (APNs) — to deliver notifications to your device
• Cloudflare R2 — to store images you upload (profile photo, group photos, popup attachments)

These providers process data on our behalf and do not use it for their own purposes.

4. Data retention and deletion

We retain your data for as long as your account is active. When you delete your account (from in-app settings):

• Your profile, photo, and content are deleted within 30 days
• Group messages remain but are anonymized as "former member"
• Operational logs required for legal compliance are retained for no more than 12 months

5. Your rights

At any time you can:

• Access or edit your data from within the app (profile, settings)
• Delete your account entirely from in-app settings
• Revoke permissions (Contacts, Location, Notifications) from iOS settings
• Contact us to request a copy of your data

6. Security

We use HTTPS/TLS 1.2+ for every connection between the app and the server. Authentication uses short-lived JWT tokens, never plaintext passwords. Database access is reviewed periodically.

7. Children

Daqqah is intended for users aged 13 and older. We do not knowingly collect data from children under that age. If you discover a child has registered, please contact us to remove the account immediately.

8. Changes to this policy

We may update this policy from time to time. We will publish the updated version on this page with a new effective date above. Material changes will be communicated in-app.

9. Contact us

For any privacy question or to request data deletion:
Email: support@daqqah.app