Privacy Policy — Al Jaliya DZ Last updated: 26 Jul 2026 Al Jaliya DZ ("the app", "we", "us") is a private community app for Algerians living in Qatar. This policy explains what we collect, why, and your choices. The app is operated by Fares Laggoun. Questions: fareslaggoun@gmail.com. 1. Information we collect - Account: email address used for one-time-code sign-in. - Identity verification: the live identity flow processes a Qatar ID and, when required, an Algerian passport. It extracts your legal name, nationality, date of birth, document type and expiry. Al Jaliya DZ stores the verification result, these extracted profile details, risk signals, and a non-reversible fingerprint protected by a server-only secret solely to prevent the same identity document being used by multiple accounts. Al Jaliya DZ does not store any document-number fragment, document photo, selfie, or verification audio in its database. - Biometric processing: a live selfie, liveness check, and face comparison are processed by our identity-verification provider solely to confirm that the document belongs to you and to detect impersonation or copied documents. If a selected verification step requires audio-backed capture, the provider asks for microphone permission at that moment and receives audio together with the document or liveness video. Steps that do not require audio do not activate the microphone. - Profile: name, username, city in Qatar, wilaya of origin, profession, bio, languages, an optional avatar, and an optional phone number. You control whether your phone number is visible to other eligible verified members. - Content you create: posts, listings, announcements, events, questions/answers, messages, and reports you submit. - Location: if you allow it, your device location is processed on the device while the app is open to calculate prayer times and nearby mosques. It is not sent to our backend or stored as a location history. - Security and diagnostics: a resettable random installation identifier, account and authentication-session identifiers, platform, operating-system and app version, server-observed IP address, device push token when notifications are enabled, and limited crash/error details. The installation identifier and IP are cryptographically hashed; the IP is also encrypted and is never displayed to users. This data is used only for account security, abuse investigation, notifications, reliability, and fraud prevention. The remittance section is information only; we do not collect or process any payment or financial-account data. 2. How we use your information - To provide the app and your account. - To verify eligibility and identity, detect fraud, and keep the community trusted. - To display the member directory and content to other verified members. - To moderate content, act on reports, and keep the community safe. - To send service notifications you have enabled. We do not sell your data, and we do not use it for advertising or cross-app tracking. 3. How information is shared Other verified members can see your profile and the content you post. We use Supabase as our backend/hosting processor to store data on our behalf. Didit processes identity documents, liveness, and face-match data—and conditional verification audio when required by a selected step—on our behalf. When you enable push notifications, Firebase Cloud Messaging, operated by Google, processes your device push token and the notification content or preview needed to deliver the alert. When you explicitly request automatic translation, the selected text is sent to the MyMemory translation service; the result is cached only on your device and is not added to Al Jaliya DZ's shared database. These providers may process data in other countries under their security and retention controls. We may disclose information if required by law. 4. Data retention We keep your profile and redacted identity audit record while your account is active, unless a longer period is legally required for security or fraud prevention. Identity images, biometric material, and conditional verification audio are not copied into the Al Jaliya DZ database; they are retained by the verification provider according to our configured retention period. When you delete your account, your profile and personal content are removed. You may contact us to request deletion of linked verification-provider data, subject to any legally required retention. Encrypted IP values in security-session records are removed after 90 days, and the remaining protected session record is removed after 365 days (or earlier under the revoked-session rule). 5. Your rights and choices - Access / correction: edit your profile in the app, or contact us. Extracted legal identity fields are protected from ordinary editing; contact us if they need correction. You can also change whether your optional phone number is visible to eligible verified members. - Identity choice: identity verification is optional. You can use the basic information tier without starting the identity or biometric flow. Private member information and higher-trust actions—such as messaging, applications, contact details, listings, invitations, aid, claims, and staff functions—may require a verified identity. - Account deletion: in the app go to Profile → Settings → Delete account. This permanently deletes your account and associated data. You may also request deletion by email at fareslaggoun@gmail.com or via our deletion request page. - Camera / microphone / notifications / location: control these in your device settings. Microphone permission is requested only if a verification step explicitly requires audio-backed capture. Disabling push notifications stops new alerts from being delivered to that device. 6. Children Al Jaliya DZ is not directed to children under 18 and we do not knowingly collect their data. 7. Security and international transfers We use industry-standard measures to protect your data. Data may be processed in countries other than yours, including where our processor operates. 8. Changes We may update this policy and will post the new version here with a revised date. 9. Contact Fares Laggoun — fareslaggoun@gmail.com Related pages Support: support.html Privacy Policy: privacy.html Terms of Service: terms.html Delete Account: delete.html