Privacy Policy

Last updated: June 12, 2026

This Privacy Policy describes how nahi abdelali ("we", "us", or "our") collects, uses, and shares your personal information when you use the Munasabat (مناسبات) mobile application (the "App").

1. Information We Collect

1.1 Account Information

When you register and use Munasabat, we collect the following personal information:

• Registration Data: Email address, password (encrypted), full name
• Role Selection: Your chosen role (Client or Vendor/Prestataire), selected once during registration
• Profile Information: Profile picture, phone number (optional)

1.2 Vendor Profile Information

If you register as a Vendor (Prestataire), we additionally collect:

• Business Details: Business name, service category (traiteur, photographe, DJ, salle des fêtes, etc.), city
• Portfolio: Photos and descriptions of your services uploaded to the App
• Documents: Professional documents uploaded for verification purposes
• Pricing: Starting price information for your services (optional)
• Verification Status: Whether your profile has been verified by our team

1.3 Booking Information

When a Client creates a booking request for a Vendor, we collect:

• Booking Details: Requested date, type of event (e.g., mariage, fiançailles, anniversaire), personal message to the vendor
• Booking Status: Whether the booking is pending, confirmed, or rejected
• Anti-Spam Limit: We track the number of pending bookings per client (maximum 3) to prevent abuse

1.4 Chat Messages

Munasabat provides an in-app chat system for communication between Clients and Vendors. We collect:

• Message Content: Text messages exchanged between you and other users
• Read Status: Whether messages have been read by the recipient
• Timestamps: When messages were sent

1.5 Event Planner Information

If you use the Event Planner feature as a Client, we collect:

• Event Details: Event name, date, city, type
• Event Slots: Vendor categories needed for your event (e.g., photographer, caterer) and their status

1.6 Location Data

• Geolocation: Your device location (with your permission) to sort vendors by proximity and show nearby services
• City Information: Your selected city for filtering services (Casablanca, Marrakech, etc.)

1.7 Last Minute Deals

If you are a Vendor and post Last Minute deals, we collect:

• Deal Information: Available date, discounted price, description of the offer

1.8 Usage and Technical Information

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: Features used, pages viewed, search queries, filters applied
• Preferences: Language settings, dark mode preference, notification settings
• Push Notification Tokens: For sending you notifications about bookings and messages (via OneSignal)
• Connectivity Status: Whether your device is online or offline

2. How We Use Your Information

2.1 To Provide and Improve Our Services

• Create and manage your account (Client or Vendor)
• Display vendor profiles and services to clients
• Process booking requests between clients and vendors
• Enable in-app chat communication
• Show nearby vendors based on your location
• Manage your event planner and vendor slots
• Display Last Minute deals from vendors
• Apply search filters (rating, budget, distance, verified status)
• Enforce anti-spam limits on bookings

2.2 To Communicate with You

• Send push notifications about new booking requests, confirmations, and rejections
• Notify you of new chat messages
• Respond to your inquiries and support requests
• Send important service announcements

2.3 For Safety and Security

• Verify vendor profiles
• Prevent fraud, spam, and abuse
• Enforce our Terms and Conditions
• Protect the rights and safety of our users

2.4 For Advertising (Future)

• We may display advertisements through Google AdMob in a future version of the App
• AdMob may collect device identifiers and usage data for personalized advertising
• You will be able to opt out of personalized ads through your device settings
• We will update this Privacy Policy before introducing advertising

3. How We Share Your Information

3.1 With Other Users

Vendor Profiles: If you are a Vendor, your business name, service category, city, portfolio, pricing, and rating are visible to all Clients in the App.

Client Information: When a Client sends a booking request, the Vendor can see the Client's name and booking details (requested date, event type, message).

Chat: Messages you send are visible to the other participant in the conversation.

3.2 With Third-Party Service Providers

We use the following third-party services that may process your data:

• Supabase: Authentication, database (PostgreSQL), file storage, and real-time features. Data is hosted on Supabase cloud infrastructure.
• OneSignal: Push notification delivery. OneSignal receives your device token and notification content.
• Google AdMob (future): Advertising. May collect device identifiers for ad targeting.

These services are bound by their own privacy policies and data processing agreements.

3.3 We Do NOT Share

• We do not sell your personal information to third parties
• We do not share your data with external marketing companies
• We do not use your chat messages for advertising purposes

3.4 For Legal Reasons

We may disclose your information if required to:

• Comply with legal obligations, court orders, or government requests
• Enforce our Terms and Conditions
• Protect our rights, property, or safety, or that of our users
• Investigate fraud or security issues

3.5 Business Transfers

If we are involved in a merger, acquisition, or sale of assets, your information may be transferred. We will notify you before your information becomes subject to a different privacy policy.

4. Data Storage and Security

4.1 Where Your Data Is Stored

• Account data, bookings, chat messages, and vendor profiles are stored on Supabase cloud servers
• Uploaded files (profile pictures, portfolio images, documents) are stored in Supabase Storage buckets
• Push notification tokens are stored by OneSignal

4.2 Security Measures

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of passwords using industry-standard hashing
• Secure HTTPS connections for all data transfers
• Row-Level Security (RLS) policies on the database to ensure users can only access authorized data
• Supabase Authentication security features
• Access controls and authentication for all API endpoints

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you services. Specifically:

• Account Data: Retained until you delete your account
• Vendor Profile: Retained as long as you maintain an active Vendor account
• Booking Data: Retained for the duration of the booking and for historical purposes
• Chat Messages: Retained as long as the conversation exists between the two users
• Event Planner Data: Retained as long as the event is active; archived events may be anonymized
• Uploaded Files: Profile pictures and documents are retained until you delete them or your account

When you delete your account, we will delete or anonymize your personal information within 30 days, except where we must retain it for legal compliance.

6. Your Rights and Choices

6.1 Access and Update

You can access and update your personal information through your profile settings in the App.

6.2 Privacy Controls

• Location Services: Control location access through your device settings. The App works without location but distance-based sorting will be unavailable.
• Push Notifications: Manage notification preferences in your device settings
• Profile Visibility: Vendor profiles are public by design. Client profiles are only visible to vendors they interact with.

6.3 Delete Your Account

You can delete your account at any time through the App (Profile → Delete Account). This will permanently remove your personal data. You can also request deletion by contacting us.

6.4 Data Portability

You have the right to request a copy of your personal data in a structured, machine-readable format.

6.5 Rights for EEA, UK, and Swiss Users

If you are located in the European Economic Area, United Kingdom, or Switzerland, you have additional rights under GDPR:

• Right to access your personal data
• Right to rectification of inaccurate data
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority

7. Age Requirements

7.1 Minimum Age

Munasabat is intended for users aged 16 and older. We do not knowingly collect personal information from children under 16. If you believe we have collected information from a child under 16, please contact us immediately at cryptotechworld9@gmail.com and we will delete it.

7.2 Parental Consent (EEA, UK, and Switzerland)

For users in the European Economic Area, United Kingdom, and Switzerland who are between 13 and 16 years old, we require verifiable parental consent before collecting personal data, as mandated by GDPR.

7.3 Reporting Underage Users

If you become aware of any user under 16 using the App, please report it to us immediately. We will investigate and take appropriate action, including account termination if necessary.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, where our servers and service providers are located. These countries may have data protection laws different from your country.

We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws, including:

• Standard Contractual Clauses approved by the European Commission
• Supabase's data processing agreements and security certifications
• OneSignal's data processing terms

9. Cookies and Tracking Technologies

We use the following technologies:

• Authentication: Supabase Authentication tokens to keep you logged in
• Preferences: Local storage (SharedPreferences) to remember your app settings (language, dark mode, onboarding status)
• Real-Time: WebSocket connections for live chat message delivery

You can manage some of these through your device settings, but disabling certain technologies may limit app functionality.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you through the app or by email for material changes
• Obtain your consent where required by law

Your continued use of Munasabat after changes constitutes acceptance of the updated policy.

11. Third-Party Links

The app may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read their privacy policies.

12. California Privacy Rights

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to say no to the sale of personal information (we do not sell your data)
• Right to access your personal information
• Right to delete your personal information
• Right to equal service and price

13. Legal Basis for Processing (GDPR)

For users in the EEA, UK, and Switzerland, our legal bases for processing your personal data are:

• Consent: You have given consent for location access and push notifications
• Contract: Processing is necessary to provide our services under our Terms and Conditions (account management, bookings, chat)
• Legitimate Interests: We have legitimate interests in improving our services, preventing fraud and spam, and ensuring security
• Legal Obligation: We must process certain data to comply with legal requirements

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

---

© 2026 Munasabat (···) by nahi abdelali. All rights reserved.