Privacy Policy

Last Updated: September 21, 2026. This Privacy Policy explains how Al-Miftah handles personal information and data provided or collected when using the application. It covers account information, user-generated content, location, technical information, interactions, and support services. This policy may be updated when needed to reflect changes in app features, data practices, or legal requirements.

When creating an account, we may collect your name, phone number, email address when provided, optional profile image, gender, birth date, and password in protected hashed form rather than plain text. The phone number is used for account verification, login, password recovery, and security procedures, while other account information is used to operate account features, support, and related functionality. Your gender and birth date are not visible to other users and are not displayed in listings.

OTP-related operations may involve the phone number, verification action, device identifier, IP address, request and expiration times, and verification attempts to protect accounts and prevent abuse and fraud. Technical information associated with the device and app version may also be processed to operate certain security and notification features.

Users may upload a profile image and listing photos. Selected images are uploaded to the platform servers and stored for account or listing functionality. Photos associated with approved listings may become publicly available as part of the listing, while profile images are governed by the display features available in the application.

When creating or editing a listing, we may collect the title, description, offer type, price, currency, vehicle or property information, features, photos, contact methods, selected contact phone number, address, region, coordinates, rental prices, listing status, moderation decision, and rejection reason when applicable. After approval, information the user chooses to publish may become available to other users according to the listing and app features.

Advertisers may provide a contact number different from the account registration number and choose the contact methods they want to make available. The selected contact number and methods may be visible to listing viewers so they can contact the advertiser directly. Users are responsible for having the right to use and publish the contact information they provide.

Adding a listing location is optional. When the user chooses to select a location, the app may use device location services to make point selection easier, and the coordinates associated with the listing are stored when the user chooses to provide them. The listing location may be shown to other users as part of the listing details. The app is not intended to continuously track the user in the background.

The app may store listings added to favorites and may record listing views to operate view counts, provide statistics, and help prevent abuse. A view may be associated with the user account or device identifier when the app is used as a guest. We do not currently use this information to create advertising profiles or track users across other apps or websites for advertising purposes.

Users may submit a complaint or support request within the application, and the request content and related information may be stored to review the issue and respond. Users may also contact external support channels such as WhatsApp, and information shared through those channels is subject to the external provider’s terms and privacy policy.

The app may use Firebase Cloud Messaging to deliver notifications, and a notification token may be stored and associated with the account and device when signed in. The app may also rely on map, OTP, hosting, storage, and other infrastructure providers to operate its services. These providers may process data only as necessary to provide their services under their own terms and policies.

We do not sell or rent users’ personal data for external marketing or advertising purposes. Information may be shared as necessary to operate platform functions and services, with technical service providers, to protect accounts and systems, prevent fraud and abuse, or respond to a valid legal or official request.

We use reasonable technical and organizational measures to protect data from unauthorized access, use, alteration, or loss, including protected password handling, verification controls, and server access controls. However, no transmission or storage over the internet can be guaranteed to be completely secure.

Users may request account deletion from within the application. When deletion is processed, the account is removed from active use and related sessions and tokens are revoked according to the deletion process. The platform may temporarily retain certain records, backups, or data needed to address reports and disputes, prevent fraud or abuse, or comply with law. When retention is no longer necessary, such data is deleted or de-identified according to the applicable retention and deletion procedures.

When an approved listing is published, the user chooses the content and information to make available to others, which may include photos, description, price, specifications, contact methods, and location. Users must not publish personal information belonging to others or content they do not have the right to publish. The administration may remove content or restrict an account when a violation, report, complaint, security concern, or legal requirement arises.

This Privacy Policy may be updated when new features are added, data practices change, or legal requirements require an update. The updated version and last revision date will be published. For privacy questions, data requests, or account deletion requests, users can contact us through the official support channels available in the app.