Privacy policy

Who we are and how to reach us

Zaghrouta (زغروطة) is an app and a website (zaghrouta.app) for planning a wedding in Egypt: wedding services with their prices and booking, an AI planner and assistant, invitations and guests, and the money side of the wedding. Zaghrouta is currently run by its founder, [👤 full legal name], as an individual, [👤 city], Arab Republic of Egypt. We are the "controller" of your data under the Personal Data Protection Law No. 151 of 2020 (the "Law"). When a company is formed to run Zaghrouta, it will take over this role and we will tell you in the app.

• Data protection officer: [👤 name] — [email protected]
• General questions: [email protected]

This policy covers the Zaghrouta app for Android and iPhone, the web app (app.zaghrouta.app) and the website zaghrouta.app, in Arabic and English.

The data we collect

We collect only what we need to run the service safely. Some data you give us; some comes from using the app.

What we don't collect: medical results (the premarital exam is only a reminder in your checklist), your bank card details, your national ID number (except vendors' verification documents), your whole contacts list, your voice, or your background location. We don't use face recognition.

Sensitive data: whether your ceremony is katb el-ketab or a church wedding can reveal religion. It is optional, and we use it only to show the right checklist.

The website keeps your language choice and your answer to its statistics question in your browser, and your sign-in session only if you sign in (for example, to delete your account). It counts your visit only if you allow it, and it uses no advertising cookies.

Businesses we contact: to bring vendors to Zaghrouta, our team messages businesses on WhatsApp from their own public pages (click-to-chat). We keep the business's name, its public page, the number it publishes there and which messages we sent, never the text of replies. We check a do-not-contact list before every message: ask us to stop and we never message that number again. We contact a person who isn't a business only if they contacted us or agreed.

Why we use your data

We don't sell your data, we don't show ads, and we don't use your data to build an advertising profile.

Who sees your data and who we share it with

Your partner and family: the people you invite to your plan see and edit it according to the role you give them. You can remove them at any time.

Your guests: a guest who opens your invitation sees what you put on it (names, dates, places, the map and your message) and, if you choose, your InstaPay address for gifts. Guests never see the rest of your guest list.

Vendors: when you send a request or book, the vendor sees your name, the event, its date, area, guest estimate and your message, and later your booking. If you contact a vendor on WhatsApp, the vendor sees your WhatsApp number and name there, as WhatsApp shows them. A vendor never sees your guest list, your budget or your other vendors.

Everyone, including visitors: vendor pages, and reviews with the reviewer's display name; pre-loved listings with the first word of the seller's display name and her area. Vendor pages never show the vendor's documents or phone number.

Pre-loved buyers and sellers: you talk inside the app, and your phone numbers stay hidden until you choose to share them.

Gift shops: you send a gift order to the shop from your own WhatsApp, so the shop sees your number and the order, including the recipient's name, phone and address and the card message.

The Zaghrouta team: day-to-day review is automatic; our team sees your data only as far as it needs to handle an appeal, a report or a support question, or to check a vendor's documents when a decision needs it.

Service providers (they process data only for us and on our instructions):

Payments: Zaghrouta never holds money. Deposits go straight to the vendor, nuqta and group gifts go straight to you by InstaPay, gift shops are paid directly, and instalments are with licensed companies on their own terms. The app only keeps the records you add.

Links to shops: some links to shops (for example for الجهاز) are affiliate links: the shop knows you came from Zaghrouta, and we may earn a commission. We don't send them your data.

Authorities: we disclose data when the law, a court order, the Public Prosecution or a competent authority requires it, or to protect someone from serious harm.

If Zaghrouta changes hands: if a company is formed or the service moves, the data moves with it and this policy keeps applying until we tell you otherwise.

Transfers outside Egypt

Our database is in the European Union (Germany), and some providers are in the United States and other countries. The Law and its Executive Regulations require a licence or permit from the Personal Data Protection Center for cross-border transfers, to countries that offer adequate protection. [👤 The lawyer confirms the licence and permit route.] We only use providers who are contractually bound to protect data and who use encryption. By using Zaghrouta you agree to these transfers for the purposes in this policy.

Your choices

• The AI assistant: nothing is sent to it until you agree, and you can withdraw your agreement in Me → Privacy & data.
• Analytics: off until you turn them on in Me → Privacy & data; turn them off at any time.
• Notifications: per phone, in Me → Notifications.
• Location, camera, photos, microphone and contacts: optional. The phone asks only when you first use them, and you can turn them off in your phone's settings.
• Your plan: you decide who joins it and with which role.
• Block and report: you can block any user and report any vendor, review, listing or message.

Your rights

Under the Law you have the right to:

1. know what data we hold about you, see it and get a copy;
2. withdraw your consent at any time (this doesn't affect what happened before);
3. correct, edit, add to or update your data;
4. have your data erased;
5. limit processing to a specific scope;
6. be told about any breach of your data;
7. object to processing or its results when it conflicts with your fundamental rights and freedoms.

How to use them: most of these rights are built into the app (edit your profile and plan, download a copy of your data, delete your account). For anything else, write to [email protected] from the e-mail address of your account. We may ask you to prove who you are. We answer as soon as we can, within the time the Law sets, free of charge. If you're not happy with our answer, you can complain to the Personal Data Protection Center.

Guests: if a couple added you to their guest list and you want your details removed, ask the couple, or write to us and we will help.

How long we keep data

We may keep specific data longer if the law or a court requires it, and only for as long as needed.

Download your data and delete your account

• Download a copy: in the app, Me → Privacy & data → Download a copy of your data. We prepare a file, notify you when it's ready and keep it available for 7 days.
• Delete your account: in the app, Me → Delete account; on the web at zaghrouta.app/delete-account; or by writing to [email protected] from your account's e-mail address. If you sign in with Apple, you confirm with Apple once more and we ask Apple to end Zaghrouta's access to your Apple ID.
• Shared plans: if your partner is also a member of your plan, the plan stays with them, without your personal data.
• What stays after deletion: reports you filed (without your name), and reviews you wrote, which stay on the vendor's page without your name.

Keeping your data safe

• All connections are encrypted (HTTPS), and data is encrypted in our database and storage.
• Download links for your data are signed and expire quickly.
• Our team's access is limited to what each role needs, and admin accounts use two-step verification.
• If a breach affects your data, we notify the Personal Data Protection Center within 72 hours and you within the time the Regulations set.

No system is perfectly secure; if you notice anything suspicious, write to [email protected] straight away.

Children

Zaghrouta accounts are for people aged 16 and over, and everyone confirms this when they sign in. Guests who open an invitation don't need an account. The service is not aimed at children under 16. If we learn that someone under 16 has made an account, we delete it. If you're a parent and think your child gave us data, write to [email protected].

Changes to this policy

When we change this policy, we update the date and version at the top. If a change matters for your data, we tell you in the app before it applies.

Language and governing law

This policy is governed by the laws of the Arab Republic of Egypt. It is available in Arabic and English; if they differ, the Arabic text prevails.