Privacy Policy

1. What We Collect

Information you give us: name, email address, password (hashed), and profile info.

Information generated by your use: activities created and joined, attendance records, reliability score, chat messages (ephemeral), and activity timestamps.

Technical data: IP address, browser/device type, pages viewed, and error logs. Used to keep the app running and detect abuse — not for advertising profiles.

2. Why We Collect It

Account login, activity coordination, reliability scoring, safety and abuse prevention, service communications, and app improvement. We do not use your data to serve advertisements or sell to data brokers.

3. Chat Messages

Chat is only available during the active window of an activity. Messages are stored for a short period after the window closes for safety review, then treated as transient. We do not guarantee deletion at a specific moment.

4. Who We Share Data With

We keep your data within Gawafa. Limited exceptions: our email delivery provider (transactional emails) and legal requests if required by law. We do not sell your data.

5. How We Protect Your Data

Passwords are hashed with bcrypt. HTTPS is enforced for all connections. Access to production systems is limited to a small team.

6. Data Retention

Account data is kept until you delete your account. Technical logs are kept up to 90 days. When you delete your account, your personal data is deleted or anonymized within a reasonable period.

7. Your Choices

You can update your name and email from profile settings. You can delete your account at any time from settings. You can request a copy of your personal data by emailing us — we aim to respond within 30 days.

8. Children's Privacy

Gawafa is not intended for anyone under 18. We do not knowingly collect data from minors. If we become aware that we have done so, we will delete that data promptly. If you believe a minor has created an account, please contact us.

9. Contact

For privacy questions, data requests, or concerns, email us at privacy@gawafa.app. We aim to respond within 30 days.