Privacy Policy

Daawah.app (“we”, “us”) provides a WhatsApp-based wedding invitation platform. Event organizers (“clients”) use our web checkout and mobile app to manage guest lists, send invitations, track RSVPs, and check in guests at their event. This policy explains what data we collect, why, and how it is handled.

This policy covers the Daawah.app marketing website, checkout form, and the Daawah.app mobile app used by event organizers.

From event organizers (clients):

• Full name, phone number, and email address
• Event details submitted at checkout: event type, date, estimated guest count, package preference, and any notes
• Login is via a one-time passcode sent to your WhatsApp number — we do not store passwords

About guests, entered by the organizer:

• Guest name (Latin and/or Arabic script) and phone number
• Party size, VIP status, guest group, and any notes the organizer adds
• RSVP status, invitation delivery status, and check-in status/time at the event

Guest data is entered by the event organizer, either manually or by importing from the organizer’s own phone contacts. We do not access an organizer’s contacts except when the organizer explicitly taps “Pick from Contacts” to add a specific guest.

Automatically collected: we do not use analytics, advertising, or tracking SDKs of any kind. The only data transmitted is what is described above, sent directly to our infrastructure.

• To operate your account and your event’s guest list
• To send WhatsApp invitations, reminders, and check-in QR codes to your guests on your behalf
• To deliver one-time login passcodes via WhatsApp
• To respond to support requests
• To detect and prevent abuse (e.g. rate-limiting repeated checkout submissions)

We do not sell personal data. Data is shared only with the service providers needed to run Daawah.app:

• Supabase — hosts our database, authentication, and file storage
• n8n (workflow automation) and WhatsApp Cloud API (Meta) — used to deliver WhatsApp messages to guests and organizers. Message content includes the invitation details and, for check-in, a QR code image

We do not share guest or organizer data with any other third party, and we do not use it for advertising.

We retain client and guest data for as long as the client account is active, so the organizer can manage their event. Event organizers can delete individual guests at any time from the mobile app.

Organizers can permanently delete their account from Settings in the mobile app (“Delete account”). This removes the organizer’s login, their event(s), and all associated guest data. This action cannot be undone. You can also request deletion by emailing support@daawah.app.

Data is encrypted in transit (HTTPS/TLS) and at rest. Access to organizer and guest data is restricted by row-level security policies scoped to each client’s own account. Administrative access to the underlying database is limited to Daawah.app operators for support and platform maintenance.

• Camera — used only to scan guest QR codes at check-in
• Contacts — used only when you choose to pick a guest from your phone’s address book while adding a guest
• Photo library — used only when you choose to upload an invitation card image for your event

Daawah.app is intended for use by adult event organizers. We do not knowingly collect data directly from children. Guest records may include a minor’s name if an organizer adds a child as a guest; this is provided and controlled entirely by the organizer.

You may request access to, correction of, or deletion of your personal data, or a guest’s data that was entered about you, by contacting support@daawah.app. Event organizers can also manage most guest data directly within the mobile app.

We may update this policy from time to time. Material changes will be reflected by updating the “last updated” date below.

Questions about this policy or your data can be sent to support@daawah.app.