Privacy Policy

Version 1.2.1 · Last updated: 30 September 2026

Who we are, and who is responsible for your data

Tafseela is a wedding-planning app. Tafseela is the provider of the service and the controller of your personal data — the term the Saudi Personal Data Protection Law uses — and is called "we" throughout this policy.

Who operates the service: Tafseela is operated by tafsilah farah Establishment (مؤسسة تفصيلة فرح), Commercial Registration No. 7054948034, national address: Building 3224, Barhan Al Deen Al Murshidi St., Tuwaiq Dist., Riyadh 14928, Additional No. 6133 (short address RKWC3224). It is the controller of your personal data.

Your data is stored on a server inside the Kingdom of Saudi Arabia. Some of the service providers listed below process part of it outside the Kingdom; which ones, why, and on what ground is set out further down.

To contact us about your data or to exercise any of your rights: support@tafseelah.com.

What we collect, how we collect it, and what is optional

We collect your data from three sources and no others: from you directly when you type it into the app, from your guest when she fills in the gift reservation page, and automatically from your device and our server while you use the service. We buy data about nobody and gather it from no other source.

This is everything, with whether it is required or optional:

Your mobile number — *required*. It is the only way to sign in; Tafseela has no password at all. Without it an account cannot be created or opened.
Your email — *optional*. A fallback channel for the sign-in code when WhatsApp cannot deliver it, and what makes deleting your account possible if WhatsApp fails at that moment. Without it the service is complete and WhatsApp is your only channel.
Profile details — name, the city you pick from a list, date of birth, language and theme. *All optional*; the name alone is used to address you and on the share page if you create one.
Wedding details — wedding date, dowry amount, preparation tasks with their amounts and your notes, the day's schedule, and your gift list with its prices, links and photos. *You decide what goes in*, but a screen that rests on a value cannot show anything without it: no countdown without a wedding date, no dowry dashboard without a dowry.
Your guests' details — the name of whoever reserves a gift (*required to complete a reservation*), plus her number and message (*both optional, and hers to decide, not yours*).
Device details — your notification token, the operating system, and the app version. *The notification token is optional* and exists only if you allow notifications.
Usage data — app-open events and the names of the screens that are opened, with nothing of what is inside them. *Automatic*, an operational trace that is neither sold nor shared.
Server logs — the IP address, time and outcome of each request. *Automatic*, and security and operational records without which no internet service can run.

What we do not collect: your geographic location — we never ask your device for location permission, and the city on your account is the one you chose from a list. We do not collect your contacts, your photo library (only the photo you upload for a gift yourself), any card or payment details, or any sensitive data such as health or belief data.

Why we collect it, and the lawful basis

Your number and email sign you in and protect your account. Your wedding details power the dowry dashboard, the countdown and the gift list. Your guests' details let you know who reserved what and thank them. The notification token delivers the reminders you turned on. Server logs protect your account from repeated sign-in attempts. Usage data tells us which screens are actually used, so we improve the right ones.

Lawful basis:

Processing your core data is necessary to provide the service you asked for: your account cannot run without your number, and the dowry dashboard cannot be shown without your wedding details.
Notifications rely on your consent, which you can withdraw at any time in Settings without affecting the rest of your account.
Security logs and sending limits rely on a legitimate interest in protecting accounts from abuse.
Financial records are kept to meet accounting requirements, de-identified once an account is deleted.

We do not sell your data, do not use it for advertising, do not share it with advertisers, and do not track your activity in other apps or websites.

We make no automated decisions about you — there is no scoring, profiling or decision taken about you by automated processing alone. And we do not use your data or your content to train artificial-intelligence models, ours or anyone else's.

Who we share it with, and processing outside Saudi Arabia

We use a small number of service providers, each for a single purpose, and none of them gets more data than that purpose needs:

WafaiCloud — hosting for the server and the database inside the Kingdom of Saudi Arabia, which is where your data lives.
WhatsApp (Meta) — delivering the sign-in code to your mobile number.
Resend — delivering the sign-in code to your email when WhatsApp cannot.
RevenueCat, with Apple and Google — managing and verifying your subscription. Payment itself happens at the store; we never see your card details.
Firebase Cloud Messaging (Google) — delivering notifications to your device.
Sentry — technical error monitoring. Phone numbers and request bodies are never sent to it; an error report may contain the IP address the request came from.

We share your data with nobody else, unless a law or an order from a competent authority in the Kingdom requires it.

Transfers outside the Kingdom: every provider above except WafaiCloud processes data outside Saudi Arabia. The ground for that transfer is providing a service directly to you — your sign-in code, your subscription check, your notifications, and error monitoring — for no other purpose, and never beyond the minimum each provider needs for its own single function. We require each provider to protect what reaches it and to use it for nothing else.

Links that leave the app: the Recommendations cards, and the store links you add to your own gifts, open sites we neither own nor operate, each with a privacy policy of its own that applies to you once you open it. We do not tell those sites who you are, and we send them none of your data.

The gift list link — exactly what a guest sees

Anyone who opens your share link sees:

Your first name, if it is on your profile.
The names of the gifts you added, each gift's price if you entered one, and the store link and photo if you added them.
Whether a gift is reserved or available — never who reserved it.

What they never see: your phone number, your email, your wedding date, your dowry amount, your preparation budget and its tasks, your wedding-day schedule, or any other guest's details.

A note on prices: the prices on that page are the gift prices you typed yourself, and they are part of the wishlist — their whole purpose is to tell a guest what she is buying. Your dowry and your preparation budget are not reachable from the share link at all.

The link is as private as you keep it: whoever holds it can open the page, so share it only with the people you mean to. You can revoke it at any time from the Gifts tab, and the page stops working immediately for everyone holding it.

Your guests' data, and a guest's own rights

When a guest reserves a gift we ask for her name, and for her number and a short message if she wants to leave them, so you know who reserved what and can thank her after the day. That is shown to you only, never to other guests.

A guest's phone number and message are deleted automatically 30 days after your wedding date, whether or not you delete your account: the reason for holding them ends with the occasion, and the guest has no account here from which to ask us herself. Her name stays on your list as your own record of who gave what, and is deleted when your account is.

The reservation form tells the guest this before she taps Confirm, and puts a link to this policy in front of her.

A guest has full rights over her own data even though she has no account here: she may ask to see what we hold about her, to correct it, or to have it deleted before its date. She writes to support@tafseelah.com from the number or address she left, and we answer her within the same window set out below.

Retention and destruction

We keep nothing past the purpose that justified it. These are the retention periods as they are actually programmed into the service, not as we would like them to be:

Your account and wedding data — for as long as your account exists, deleted when it is.
A guest's phone number and message — deleted automatically 30 days after your wedding date, even if your account remains.
Usage data (app opens and screen names) — deleted after 90 days.
The sign-in code ledger — deleted after 30 days, and the code itself expires within minutes of being sent.
Session tokens — deleted a day after they expire.
Duplicate-request records — deleted 24 hours after they expire.
Server logs — kept for a short period, for operations and security only.
One de-identified financial record — the amount and date of a transaction only — survives the deletion of your account for accounting, with everything that linked it to you removed.

After you delete your account we keep one thing only: a one-way cryptographic fingerprint of your phone number that cannot be turned back into the number, for a single purpose — so the free trial is not given to the same number twice. We keep neither the number itself nor any other data about you.

Database backups rotate, so what leaves the service disappears from the backups within their normal cycle.

Deleting your account

Inside the app: Settings → Delete account. We send a confirmation code to your mobile number — or to your registered email if it cannot reach your phone — before we act, because the deletion is immediate and final, cannot be undone, and we keep no copy to restore for you.

From outside the app: there is a Delete account page on our website, and it works even if you have removed the app from your device or changed your phone. Its link is published on the app's store listing, and you can always write to the address below.

Deletion erases your personal details, your wedding data, your tasks, your schedule, your gift list and your guests' reservations; it deletes your photos from the server, your device's notification token, and your subscriber record at RevenueCat.

⚠️ Deleting your account does not cancel your Apple or Google subscription. That subscription is an agreement between you and the store, and we cannot cancel it on your behalf. Cancel it in your store's subscription settings before deleting your account, or it will keep renewing and charging you.

Your rights, and how to exercise them

Under the Saudi Personal Data Protection Law you have the right to:

be informed of how and why your data is processed — which is what this policy is for;
access your data and receive a copy of it in a readable form;
correct, update or complete your data;
destroy and delete your data;
withdraw your consent to anything built on it, such as notifications.

How: corrections in Settings → your details and wedding date, and on your wedding screens. Consent to notifications is withdrawn by turning them off in Settings; it takes effect from that moment and does not unpick what came before. Deletion in Settings → Delete account, or from the Delete account page on our website. For a copy of your data, write to the address below from the email registered on your account or from your mobile number, and we will send it to you.

Exercising your rights is free, and we do not ask you for a reason. We may verify your identity before acting — by requiring the request to come from the number or address on the account — to protect you from someone else asking for your data or its deletion.

We answer any request within 30 days at the latest, and usually sooner.

If our answer does not satisfy you, you have the right to complain to the competent personal-data authority in the Kingdom — the Saudi Data and Artificial Intelligence Authority (SDAIA) — through the channels it publishes at https://sdaia.gov.sa.

Children's privacy

Tafseela is a service for adults (18 and over), and the Terms and Conditions require that explicitly. We do not knowingly collect data from anyone below that age, and we ask nobody for a child's data.

If we learn that an account was created for someone under that age without a guardian's consent, we delete the account and its data. If you are a guardian and believe a child has given us data, write to support@tafseelah.com and we will erase it.

A guest reserving a gift needs no account at all, and is asked for nothing but a name and an optional number.

Our web pages and cookies

The gift share page, the privacy policy page, the terms page and the delete account page are all public web pages, and all of them:

set no cookies and store nothing in your browser;
carry no tracker and no advertising measurement, and no third-party analytics;
load no fonts or files from anyone else's servers — the font is served from our own, so no request from your guest's browser goes to a third party.

The only cookie anywhere in this system is a session cookie for the service team's own admin portal, which no guest and no account holder ever meets.

How we protect your data

Tafseela has no password at all, so there is none to steal. Sign-in codes and session tokens are stored in a one-way encrypted form — never as readable text — and the session token is replaced on every use, so replaying an old one invalidates the whole session. All traffic to the app goes over HTTPS. The database is not connected to the internet and is reachable only from the service itself, and it is backed up regularly. Access to account data is limited to the members of the service team who need it for their work.

We will never ask you for your sign-in code in a message or a call — never share it with anyone.

If your data is breached

No system is without risk. If personal data is leaked or accessed without authorisation, we notify the competent authority in the Kingdom within 72 hours of becoming aware of it, as the Personal Data Protection Law and its Implementing Regulations require.

And we notify you without undue delay where the breach may harm your data or affect your rights, telling you what was affected, what we have done, and what we advise you to do.

Changes to this policy

We may update this policy. For any substantive change we raise its version number and show you the new text inside the app, so what you agreed to is never rewritten silently. The version number and its date are shown at the top of this page.

Contact us

For any question or request about your data, or to exercise any of the rights above: support@tafseelah.com. We answer within 30 days at the latest.