Privacy Policy | سياسة الخصوصية

QAFETT ("the App") is operated by CyberAge ("we", "us", "our"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use the QAFETT mobile application and related services.

1. Information We Collect

1.1 Information You Provide

• Account Information: Email address or phone number, username, display name, password (stored as a secure hash), country, and region.
• Profile Information: Your selected role (student, club leader, specialist), university or organization name, and areas of interest.
• Fraud Reports: Report descriptions, fraud categories, subject details (URLs, phone numbers, account names, merchant names), and uploaded evidence images.
• Marketplace Listings: Product or service descriptions, pricing, and listing images.
• Appeals: Appeal reasons and supporting information.
• Family Groups: Group names and email addresses or phone numbers of invited family members.

1.2 Information Collected Automatically

• Device Information: Device type, operating system version, app version, and unique device identifiers for push notifications.
• Usage Data: Features accessed, actions performed (verifications, reports submitted), timestamps, and session duration.
• Push Notification Tokens: Device tokens for delivering push notifications.

1.3 Information We Do NOT Collect

• Precise GPS location (we only use the country and region you select during registration)
• Contacts or address book data
• Financial or banking information
• Biometric data
• Browsing history outside the app

2. How We Use Your Information

• To create and manage your account and authenticate your identity
• To process and review fraud reports and publish verified community alerts
• To operate the link/URL/phone number verification service
• To calculate and award points, ranks, and rewards for your contributions
• To deliver push notifications about report updates, alerts, and community activity
• To facilitate family protection groups and shared alerts
• To operate the community marketplace and partner offers
• To process appeals and moderation decisions
• To improve the app's features, performance, and user experience
• To enforce community rules and prevent misuse

3. How We Share Your Information

We do not sell your personal information. We may share information in the following limited circumstances:

• Community Alerts: When a fraud report is verified and published as a community alert, the report content (fraud details, URLs, phone numbers) is shared publicly. Your personal identity is never attached to published alerts.
• Family Groups: Alert information is shared with members of your family group, as you have configured.
• Service Providers: We use Supabase for authentication, database, and storage services. Your data is processed in accordance with their privacy policies.
• Legal Requirements: We may disclose information if required by law, court order, or governmental authority.
• Moderation Team: Our internal moderation team reviews fraud reports, marketplace listings, and appeals.

4. Data Storage and Security

• Your data is stored on secure cloud infrastructure provided by Supabase with encryption at rest and in transit.
• Passwords are stored as cryptographic hashes and are never stored in plain text.
• Row-Level Security (RLS) policies ensure users can only access their own data.
• Evidence images are stored in secure, access-controlled storage buckets.
• We implement industry-standard security measures to protect against unauthorized access, alteration, or destruction of data.

5. Data Retention

• Account data is retained as long as your account is active.
• Fraud reports and community alerts are retained indefinitely to maintain the community intelligence database.
• You may request deletion of your account and personal data at any time by contacting us.
• Upon account deletion, your personal information is removed. Anonymized fraud report data may be retained for community safety purposes.

6. Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate personal information
• Request deletion of your account and personal data
• Withdraw consent for optional data processing
• Export your personal data in a portable format
• Opt out of non-essential push notifications through app settings

7. Camera and Photo Library

The app requests access to your camera and photo library solely for the purpose of capturing or selecting evidence images to attach to fraud reports. Images are uploaded securely and are only accessible to you and the moderation team. Camera and photo library access is optional and the app functions without it.

8. Children's Privacy

QAFETT is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected data from a child under 13, we will delete it promptly. The Family Protection feature is designed for adult family members to share alerts, not for children to use directly.

9. Third-Party Services

The app uses the following third-party services:

• Supabase: Authentication, database, and file storage
• Expo / React Native: App framework and push notification delivery

Each third-party service has its own privacy policy governing data processing.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or by email. The "Last Updated" date at the top of this page indicates when the policy was last revised. Continued use of the app after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at:

• Email: support@cyberage.today
• Website: https://qafett.netlify.app