Rehalat
REHALAT · رحلات

Privacy Policy

Last updated:

This policy explains how Rehalat handles personal data when you use the traveler app and its related services at rehalat.net. The Rehalat developer operates the service and handles privacy enquiries through the contact email on this page.

Request account and data deletion Contact us about privacy

1. Data we process

The data depends on the features you use and what you choose to provide:

  • Account data: your name, email, phone number, hashed password, verification status, and the city and profile photo you add.
  • Travel and booking data: saved trips, preferences you save, destinations, dates, party size, budget, departure location, room selections, notes, trip requests, offers, and related bookings.
  • Payment data: amounts, payment methods, status, references, and transfer receipt images you upload. Receipts may contain personal or financial information; submit only what is necessary to evidence the transaction.
  • Content you send: conversation messages, selected images, reviews, support requests, and notes you share with us or the trip organizer.
  • Content safety: blocking choices, the content policy version and acceptance time, reports and their reasons, the selected reported content, and moderation decisions. Reports and selected content are available to Rehalat administrators to address abuse. We may retain what is necessary to investigate, prevent misuse, and resolve disputes as described in the retention section.
  • Technical and operational data: account, booking, and session identifiers, notification tokens, and request, error, and security logs that may include IP addresses and device, operating system, or connection information. These support service operation and security.

2. Location, images, and notifications

Location is optional. When you choose to detect your city and grant permission, the app obtains a location reading and uses the operating system geocoding service to resolve a place name. Precise coordinates are not sent to the Rehalat server; the city or departure area is used for search. The app does not track your location in the background. You can select your city manually.

The camera or photo picker is used when you choose to add a profile photo, conversation image, or payment receipt. Images you choose to send are uploaded to provide that feature.

After notification permission is granted, a device notification token is associated with your account to deliver booking, message, and service updates. You can change permissions in device settings; disabling a permission may stop its associated feature.

3. How we use data

We use data to create and verify accounts, secure sessions, provide search, saved trips, trip requests, offers and bookings, communicate with organizers, review payment receipts and resolve issues, deliver service updates, provide support, and prevent abuse and fraud. We do not sell personal data or share it for targeted advertising.

4. Who can access data

Some providers may process data outside your country of residence. The Google Firebase policy linked below explains that service’s practices. Payment and transfer services you use outside Rehalat also have their own privacy policies.

  • Trip organizers receive the booking, contact, conversation, and receipt information necessary to provide an offer, fulfill your booking, and verify payment. Organizers may keep independent transaction records; contact the organizer about those records.
  • Other users may see your name, photo, city, and published content when you participate in the community or post a review. Visibility of private and public requests differs according to the feature you use.
  • Service providers include hosting and database services, email and verification message delivery, and Google Firebase for notifications, technical access authentication, and conversation update signals. Providers may process the contact information, identifiers, and technical data necessary to deliver their services. Device location services may process coordinates to resolve a city name.
  • Authorized service personnel may access data as needed for support, security, and dispute resolution. We may disclose data in response to a binding legal request or to protect rights and prevent fraud.

5. Security and storage on your device

We use HTTPS for data transmitted to Rehalat, password hashing, authentication, and access controls to protect accounts and private files. No transmission or storage method guarantees absolute security.

The app stores session credentials, information needed to sign in, some preferences, and temporary files on your device. The website uses cookies for sessions, form protection, and language preferences. Signing out or clearing app data may remove local information; account deletion is a separate request.

6. Data retention

We retain account information while the account exists and as needed to provide the service. Retention varies with the record type, booking status, and security, fraud prevention, dispute resolution, and legal requirements; a single retention period does not apply to every category.

After account deletion, booking, transaction, payment, and related conversation and attachment records may be retained where necessary for those purposes, with profile information removed or anonymized where possible and access restricted. Backup copies may remain until replaced under their retention cycle. Contact us about the retention applicable to your data or to request deletion of information no longer needed.

7. Delete your Rehalat account and data

In the app, open Account, then Security, then Delete account, and complete ownership verification and confirmation. Deletion removes or anonymizes contact details, photo, city, and profile information, revokes sessions, removes notifications and saved trips, and removes contributions and reviews associated with the account, subject to necessary records described under retention.

Unfinished bookings or payments under review must be completed or cancelled and resolved before account deletion. You can initiate a request outside the app using the email below and receive help completing these steps. Uninstalling the app alone does not delete your account.

Request deletion outside the app

  1. Email the address below with the subject “Rehalat account deletion request”. You do not need to reinstall the app to initiate the request.
  2. Use your registered email, or identify the email address or phone number associated with the account so it can be located and ownership verified.
  3. State that you request deletion of your account and associated data. If you only want specific data deleted, identify it. We will follow up to complete verification or address outstanding bookings or payments.

Email an account deletion request

8. Your choices and requests

You can edit available profile details in the app, manage device permissions, or contact us to request access, correction, or deletion of your data or information about sharing. We may need to verify account ownership before acting to protect your information. Do not send passwords or verification codes in a support message.

9. Children

Rehalat is not directed at children. Account creation and bookings must be carried out by an authorized person. If you are a parent or guardian and believe a child provided personal information without appropriate consent, contact us to discuss removing it.

10. Policy updates and contact

We may update this policy when the service or data practices change. We publish the updated version here with its date, and provide notice or seek additional consent where required. Use the contact email on this page for privacy enquiries, data requests, or deletion requests.

Privacy and Security in Google Firebase