Privacy policy.

Daloona is operated by NSRALISA, a Dutch sole proprietorship (eenmanszaak) registered in Amsterdam, KvK 42071635, VAT NL005472875B22. It is the controller of your data under the GDPR. Full details are on /legal. We are established in the EU, so this policy and the GDPR protect your data wherever you are, not only in Europe. For any request about your data write to privacy@daloona.app. We are small enough not to need a DPO; that address reaches the person who decides.

We used to promise never to show behavioural ads that follow you across apps. We no longer promise that. Daloona now shows ads from Google, Meta and the ad partners named in §8 that may be chosen from your activity in other apps and sites. Outside Europe this is the default, with an opt-out; in Europe we ask first. We say it first, because we once said never. What stays fixed: Google and Meta SDKs, and from app version 1.0.12 those of the SDK partners in §8, collect advertising identifiers, device data and ad interactions, as explained in §9. We give Google, Meta and our other ad partners none of your account data — not your name, number, date of birth, gender, city, «حول», posts or messages. We send only what protects you: a signal if we know you are under 18, a request for G-rated ads in that case only, and fixed general words about the section. An account with no birth date is not tagged as a minor. What Google, Meta or another ad partner knows about you, it knows from its own services and from the ad request described in §8. No ads in chats. An account with no birth date is treated as an adult for ads under the regional rule in §9. A known minor gets non-personalised, G-rated ads only. Person-to-person chats and encrypted groups are end-to-end encrypted; cloud groups are stored on our servers (§6). Your data is yours to see, download and delete. Permissions only when a feature you use needs them. No AI reads your content or messages.

Your bio. We read your public bio against fixed word lists to find a place or topic it names, and use that to order content. We never quote it, and no AI reads it.

We do not read the advertising id ourselves. We do not track you across other apps or sites; Google, Meta and our ad partners (§8) may, for their ads, under your choices and the regional rule in §9. Our product analytics are our own. Ad SDKs collect ad interactions, diagnostics and crash data under their providers' policies (§9). We do not keep your searches. We do not read what you type on external sites. We do not ask your religion, health or political views. «مساعد» is a pre-written guide that runs on your phone.

We use Sentry to diagnose errors in our services and in app versions equipped with it, starting with 1.0.11. Reports include code locations, app and update versions, device and OS characteristics, and a random installation identifier separate from your account and advertising identifier. We sanitize structured reports before sending them; we do not add your conversations or files, screenshots or session replay. Native crash reports can contain limited fragments of process memory, so we do not promise that every byte is free of data. The purpose is diagnosing and fixing errors, not personalizing ads.

Where we rely on consent, withdrawing it is as easy as giving it and does not affect what happened before. Where we rely on legitimate interest you may object.

We order your feed («لك»), video, clips, suggestions and search from your activity on Daloona and from what you wrote in «حول», whatever audience you chose. The audience decides who sees the line, not whether it helps you. Languages are used only with your consent. Relationship status and gender are not used in ranking. Page type, topics and public bios are matched against fixed word lists — no AI.

We never show anyone an «حول» line you did not let them see, and never give it as a reason. A hidden line may slightly change order and add a weak weight to suggestions. It never decides alone, needs at least ten people holding the same fact hidden, never applies to new accounts or anyone under 18, and we do not turn it on if it could reveal who is secretly from a town. Posts by anyone under 18 are not brought to strangers through a shared city, school or work. We do not use your messages, precise location or searches. None of this reaches Google, Meta or any advertiser.

You can pause personalised ordering; the feed then shows the newest first and you lose no feature. Ask at privacy@daloona.app and we pause it for you. We will add the pause switch in settings; this sentence will name its path when it ships. Deeper personalisation joining activity from different sections runs only with your explicit consent.

We keep the envelope: who talks to whom, when, size, delivery and read receipts. Notifications for person-to-person chats and encrypted groups arrive encrypted. Cloud-group notifications pass through notification providers with their text. When you report a message in a private chat, the app decrypts that one message on your phone and sends us that message only — its text, picture or voice — and nothing else from the chat. We keep that copy only for the review. How long it stays is in §13. We do not receive the encryption key, and we cannot check that the copy matches the original. When you report the person themselves from the chat menu, the app sends with the report their newest messages in that chat as your phone decrypted them (up to 20) and your replies between them (up to 10): the words, and whether a message was a picture or a voice note, without the file itself. Nothing from your other chats. The app tells you so before you send. We check who wrote each message from our own records, not from the phone, and keep that copy only for the review. Slack never receives that text: only the report number, the category, a link to the moderation console, and quotes of public content.

What you publish publicly is visible to others. You decide it and you are responsible for it. You can delete it, but copies others shared may remain.

Stripe. When you pay for a plan on our website or in the Android app from our website, you pay on Stripe’s page. We send it your email and the order number. We receive the transaction number, its status and your billing country — never your card number. NSRALISA provides the plan.

Google and Meta for ads. When ads show, Google’s AdMob tool requests, displays and measures the ad. Google may show an ad from Meta’s Audience Network. We send them no name, account, date of birth, city, «حول», or what you post, read or send. We send a signal only if we know you are under 18, and a request for G-rated ads in that case only. An account with no birth date is not tagged as a minor.

Other ad partners. Google’s AdMob runs an auction for each ad space. Besides Google’s own buyers and Meta, these companies may bid in it and win the space:

A partner that bids through Google receives the ad request Google prepares: the app and the section (fixed general words such as «مقاطع»), the ad format, the device type and system, an approximate location Google derives from the network address, the device’s advertising identifier only where your choices and the device allow it, and the consent and minor signals in §9. A partner whose tool runs in the app collects the same kinds of data from your device directly, as Google’s and Meta’s tools do (§3), and measures the ad it shows. None of them receives your name, account, date of birth, city, «حول», or what you post, read or send, and nothing from your chats. Each acts under its own privacy policy, and an ad it shows follows its own ad policies. If we add another ad network, we name it here before it shows any ad.

Sign in with Google or Apple sends what is needed to create your account. We send the provider nothing about your activity. Facebook sign-in no longer exists.

Ads labelled «إعلان» appear between posts in «لك» and «أتابع», between clips, on hashtag pages and in video search when the list is long, and as a small card under the video player. Never in chats, حوار, دعم, on your profile, page, shop or office, in the main video list, in the prayer apps, or in settings or sign-in. No ad inside a video, before it or in the middle of it.

Outside Europe ads are personalised by default, from interests Google knows. Adults and accounts with no known age see a notice once per account, ever: “Okay” keeps the default; “Without personalisation” turns it off. Closing or leaving keeps the default and is not recorded as consent. Existing yes and no answers stay as they are. You can turn personalisation off or on at any time in Settings → Privacy → Ads («الإعدادات ← الخصوصية ← الإعلانات»), or turn it off from the notice. The change applies before the next request; the app and number of ads stay the same. In the EU, EEA, UK and Switzerland we ask first, then Google’s consent form determines what may be requested. Before consent, or after a refusal, only limited ads may run when Google’s form allows them. A known minor never receives personalised ads: non-personalised G-rated ads outside Europe, and no ads in Europe. On iPhone we offer Apple’s tracking prompt after the notice if unanswered. Denial prevents use of IDFA; outside Europe Google may still personalise without it. We ask for consent where the law of your region requires it; you can opt out everywhere.

In our Google account we block dating, politics, sensationalism, sexual and reproductive health, social casino games, weight loss, references to sex, drugs and supplements, alcohol and gambling. Nothing above PG. A known minor gets G. An account with no birth date is rated PG, like any adult. Religion, cosmetic procedures and get-rich-quick stay allowed. We do not block an ad because of the post before or after it. Meta’s ads follow Meta’s policies, and the ad partners’ ads follow theirs (§8). You can hide or report any ad from its menu.

Subscribers to مَدى and أُفُق see no ads from Google, Meta or our ad partners. Our own promotion («مُروَّج») is not running for anyone today. When it runs it is always marked, shown on every plan, and the advertiser never learns who you are.

«توثيق» confirms an account belongs to its owner, through the «توثيق» bot. Today it is open to people we invite and to وَصل subscribers. A plan only opens the door. Your face is captured live by the app’s camera only; document pictures are also captured by the app’s camera only. A named person compares them: no machine, no AI, no outside company, not a government register. Documents may be an ID card, a passport, or a residence permit for a country you live in.

• Document and face pictures, the request’s files and messages: 30 days after the decision, then deleted. If an appeal is open, they wait until it is settled.
• An unsent request: 7 days. An undecided request: 90 days.
• After approval we keep the reviewed name and date of birth while the mark can exist: two years, or the document’s expiry if sooner, until the mark is revoked or you delete your account.
• If a document cannot be confirmed we hold the account from confirmation for 30 days. A mark revoked for abuse with someone else’s document holds the account for one year.
• If a mark is revoked for abuse we keep a scrambled fingerprint of the document for one year, with no name and no picture, even if you delete your account.

Spaces (a page, shop, office or chat channel) are verified through «توثيق» too. Your legal name and document are never shown. The «موثّق» mark means we confirmed identity, not that we endorse what you post. People under 18 carry no visible mark, cannot buy a plan, and are confirmed only by our invitation.

Daloona is free. Optional paid plans add tools: وَصل and مَدى (and أُفُق when we offer it). What you use for free today stays free for you. No plan buys reach or a verdict. You pay on our website and in the Android app from our website through Stripe. Gifts go through Stripe only. Stripe does not sell in some countries and regions; we read the country you connect from and your billing country, and we do not start a payment if either is one of them. A payment that completes anyway is refunded in full and the plan is not activated. Your card is processed by Stripe alone. Payment records are kept 7 years under Dutch tax law and detached from your identity if you delete your account. Deleting your account stops the Stripe renewal. Contract details are in Terms §15.

Your data may be processed outside your country. When it leaves the EEA we rely on recognised mechanisms, such as the EU-US Data Privacy Framework or the Standard Contractual Clauses. Google, Meta and the ad partners in §8 process ad data, and Stripe processes payment data, in many countries, each under its own policy. Mintegral belongs to a group whose parent company is in China: data its tool collects may be processed outside the EEA, including in China, and it transfers data within its group under the Standard Contractual Clauses.

• See and correct your account data in Settings.
• Download a copy («الإعدادات ← الخصوصية ← تنزيل بياناتك»), including «حول» and each field’s audience, the ranking signals we hold, your ads answer and your plan history.
• Object to or pause personalised ordering at privacy@daloona.app (§5).
• Turn ad personalisation off or on in Settings → Privacy → Ads. On iPhone the system’s tracking settings separately control use of IDFA.
• Withdraw an identity-confirmation request before the decision.
• Delete your account at /delete-account, except what §13 lists.
• Complain to your data-protection authority. In the Netherlands, the Autoriteit Persoonsgegevens.

External links open in an in-app browser. The site is independent of us. Mini-apps receive only what you explicitly allow. When you tap an ad, you go to the advertiser’s site or its app-store page, which is independent of us and has its own policy.

Daloona is independent. We give no one automatic access. A request binds us only when it comes through Dutch law or an instrument the Netherlands recognises. We tell you where the law allows. Because private chats are end-to-end encrypted we cannot hand over their content, except the message or messages a party attached to a report (§6).

We encrypt data in transit, encrypt private chats end to end, store passwords so they cannot be read back, and limit access. No system on the internet is perfectly safe. We tell you without undue delay if a breach affects your data, as the law requires.

Daloona is not for anyone under 16, and any date of birth under 16 is refused by the system itself. The age was 13 until September 2026. Dutch law sets the digital-consent age at 16, which is also the app’s store rating (16+), so the number is the same everywhere. A known minor — aged 16 or 17 because they entered a birth date — gets non-personalised, G-rated ads only, and no ads in Europe. Their posts are not brought to strangers through a shared city, school or work. They carry no visible «موثّق» mark, cannot buy a plan, and cannot receive a plan as a gift. An account with no birth date is treated as an adult for ads under the regional rule in §9.

This version (4.4) takes effect on publication, 6 November 2026. We update this policy as the platform changes. Every new version takes effect when published on this website, with a new version number and date, and we say at the top of the page what changed. We never change a published version without a new number. We give notice before a change takes effect where the law requires it: a paid-plan price rise has its own notice period in the Terms (§15), and shop and office owners, as business users, get the notice the law sets. You may export your data or delete your account at any time (§14). Anything that needs your consent under the law of your region, we ask about separately, including through Google’s form in Europe. Outside Europe personalisation is the default; you can opt out everywhere in the notice or settings (§9). Continued use is not recorded as consent where consent is required.