Your trust is an amanah

Our halal and ethical commitment

At Dar Ajr we understand privacy as an amanah (a trust placed in our care). Islam teaches us to respect sitr — not to expose or pry into people's private matters — and to honor our commitments ("fulfil your contracts", Qur'an 5:1). This policy applies that principle to how we handle your data: with transparency, restraint and no hidden agenda.

We don't collect data "just because". We don't sell your information to advertisers or data brokers. We don't use manipulative dark patterns to get you to share more than you want. And if we ever change our approach, we'll tell you before it takes effect.

Who we are

Dar Ajr is a halal beauty and fashion marketplace connecting Muslim sellers and buyers. We are the controller responsible for your personal data under this policy.

Contact for any privacy matter: [email protected]

Dar Ajr is operated by a private individual resident in Algeria, acting in a personal capacity: it is not a company or a registered business. The name and contact email of the person responsible are also shown on the app listing on Google Play.

What data we collect

We only collect the data needed to provide the service:

• Account: name, email or phone number, encrypted password, profile photo (optional)
• Identity verification: if you choose to verify your account or store, ID document, selfie and document number (only if you voluntarily enable this feature)
• Store profile (sellers): store name, description, location, social media, IBAN/CCP for payouts
• Content you post: product photos and videos, descriptions, chat messages, reviews
• Orders and transactions: purchased products, shipping address, chosen payment method, order history
• Location: only if you enable the map or your store's exact location; we never track your location in the background
• Technical data: device type, app version, error logs (to fix bugs), push notification token
• App usage: product views, saved products, searches — to show you relevant results and give sellers their stats

How and why we use your data

We use your data to: create and manage your account, process orders and payments, enable communication between buyers and sellers, show you relevant products and stores, send notifications you've enabled, verify identity when you request it, prevent fraud and abuse, and improve the app by fixing bugs.

Legal basis: performance of the contract (so the marketplace works), your consent (e.g. exact location or notifications), legitimate interest (security and fraud prevention), and legal obligation (e.g. keeping invoices).

Who we share data with

We do not sell your data. We only share it with providers that help us run the service, under confidentiality agreements, and only to the minimum extent necessary:

• Supabase — database, authentication and file storage (photos, videos, documents)
• Chargily — card payment processing; we never see or store your full card number
• Twilio — sending SMS to verify your phone number
• Google (Gemini) and DeepSeek — AI models for features like product photo analysis, the halal ingredient checker and the Nour assistant; they only receive the specific text or image needed to answer, not your full profile
• Sentry (optional) — technical error logging so we can fix bugs
• Expo/EAS — app infrastructure (push notifications, updates)
• Authorities — only if required by law or a valid court order

Payments and financial data

Card payments are processed through Chargily, a specialized provider that meets industry security standards (PCI-DSS). Dar Ajr does not store your full card details on our servers.

For cash on delivery, bank transfer, CCP or gold/silver payments, we only keep the minimum information needed to complete and verify the order (e.g. the transfer reference), never full banking credentials.

Artificial intelligence

Dar Ajr uses AI (DeepSeek and Google Gemini) for specific features you activate voluntarily: the Nour beauty assistant, automatic product description generation, cosmetic ingredient analysis, and store performance analysis.

These features only send the AI provider the specific text, photo or data for that request — for example, the question you ask Nour or a product photo to generate its listing — never your full account or history. What each provider then does with that request is governed by their terms, not ours: on their free plans, both Google and DeepSeek may use the content they receive to improve their own models. That is why we never send them your verification documents, the text of your conversations, or your phone number or address.

Separately, every photo uploaded to the app goes through an automatic content check before it is stored: product photos, your store cover and avatar, and also the ones sent in chat. It is done by Google Cloud Vision, which returns only a verdict — appropriate or not — and which, under Google Cloud terms, does not use the images to train models. It is what keeps an inappropriate photo from reaching the app, and no one on the team looks at them.

No decision that legally affects you (for example, approving or rejecting your identity verification) is made in a fully automated way: there is always human review by the Dar Ajr team.

Location and map

The map of stores and local businesses is optional. If you enable your location to appear on the map or to pin your store's exact location, we only use it for that feature and never share it with other users without your explicit action (e.g. publishing your store).

We do not collect your location in the background or while the app is closed.

Messaging and notifications

Chat messages between buyers and sellers are stored securely so you can access your conversation history. The Dar Ajr team does not read your conversations unless necessary to investigate a report of abuse, fraud or illegal content, or where required by law.

Push notifications (orders, messages, offers) are only sent if you've enabled them; you can turn them off anytime from your device or app settings.

Advertising

Dar Ajr shows ads so the service can stay free for sellers and buyers alike. They are banner ads placed between content; they never interrupt what you are doing or cover the screen.

You are never shown ads based on sensitive data: not your religion, not your health, not your ID document, and not the content of your messages. We never sell your data to advertisers.

With Dar Ajr Plus, no ads are shown at all.

• What is used: the section of the app you are in and, at most, your country — nothing else
• What is NOT used: your messages, your verification documents, your specific purchases or any religious profile
• Ads are reviewed so their content is appropriate; if you see one that is not, write to us and we take it down
• You can remove them entirely with Dar Ajr Plus

How long we keep your data

We keep your data while your account is active. If you delete your account, we delete or anonymize your personal data within a reasonable period, except for information we must keep due to legal obligations (e.g. order and billing records, kept for the tax retention period required in Algeria).

Technical error logs are kept for a maximum of 90 days. Chat conversations are kept while the account is active or until both parties delete them.

International transfers

Some of our providers (Supabase, Chargily, Google, Twilio, Expo) process data on servers outside Algeria, including the European Union and the United States. When this happens, we require these providers to give contractual data protection guarantees (such as the EU Standard Contractual Clauses) equivalent to those of your home country.

If you live in the European Union, your data is also protected by the General Data Protection Regulation (GDPR) in addition to this policy.

Security

We use encryption in transit (HTTPS/TLS) for all communication between the app and our servers, encrypted passwords (never in plain text), and access controls (Row Level Security) on our database so each user can only see and modify what belongs to them.

No system is 100% foolproof. If we detect a security breach that may affect your data, we will notify you without undue delay, in accordance with applicable law.

Your rights

Under Algeria's Law No. 18-07 on the protection of individuals in the processing of personal data and, for EU residents, the GDPR, you have the right to:

• Access the data we hold about you
• Rectify incorrect or incomplete data
• Request deletion of your account and personal data
• Object to certain uses of your data (e.g. promotional notifications)
• Request a portable copy of your data in a readable format
• Withdraw your consent at any time when processing is based on it (e.g. location)

How to exercise your rights

You can exercise these rights by writing to [email protected], or directly from Settings → My account → Delete account for deletion requests. We will respond within a maximum of 30 days.

If you are not satisfied with our response, you can file a complaint with Algeria's National Authority for the Protection of Personal Data (ANPDP) or, if you live in the EU, with your country's data protection authority.

Minors

Dar Ajr is not directed at children under 16 and we do not knowingly collect data from children under that age. If you believe a minor has provided us with personal data without guardian consent, contact us so we can delete it immediately.

Changes to this policy

If we make a substantial update to this policy, we will notify you inside the app before it takes effect. The date of the last update appears at the top of this document.

Contact

Questions, suggestions or complaints about privacy? Write to us at [email protected]. May Allah make it easy for this service to always be fair and transparent with you.