Privacy policy.

Daloona is operated by NSRALISA, a Dutch sole proprietorship (eenmanszaak) registered in Amsterdam, KvK 42071635, VAT NL005472875B22. It is the controller of your data under the GDPR. Full details are on /legal. We are established in the EU, so this policy and the GDPR protect your data wherever you are, not only in Europe. For any request about your data write to privacy@daloona.app. We are small enough not to need a DPO; that address reaches the person who decides.

We used to promise never to show behavioural ads that follow you across apps. We no longer promise that. Daloona now shows ads from Google and Meta that may be chosen from your activity in other apps and sites, if you agree. We say it first, because we once said never. What stays fixed: Google and Meta SDKs collect advertising identifiers, device data and ad interactions, as explained in §9. We give Google and Meta none of your account data — not your name, number, date of birth, gender, city, «حول», posts or messages. We send only what protects you: a signal if we know you are under 18, a request for G-rated ads in that case only, and fixed general words about the section. An account with no birth date is not tagged as a minor. What Google or Meta knows about you, it knows from its own services. No ads in chats. An account with no birth date is treated as an adult for ads: personalised where you agreed. A known minor gets non-personalised, G-rated ads only. Person-to-person chats and encrypted groups are end-to-end encrypted; cloud groups are stored on our servers (§6). Your data is yours to see, download and delete. Permissions only when a feature you use needs them. No AI reads your content or messages.

Your bio. We read your public bio against fixed word lists to find a place or topic it names, and use that to order content. We never quote it, and no AI reads it.

We do not read the advertising id ourselves. We do not track you across other apps or sites; Google and Meta may, for their ads, only with your consent. Our product analytics are our own. Ad SDKs collect ad interactions, diagnostics and crash data under their providers' policies (§9). We do not keep your searches. We do not read what you type on external sites. We do not ask your religion, health or political views. «مساعد» is a pre-written guide that runs on your phone.

Where we rely on consent, withdrawing it is as easy as giving it and does not affect what happened before. Where we rely on legitimate interest you may object.

We order your feed («لك»), video, clips, suggestions and search from your activity on Daloona and from what you wrote in «حول», whatever audience you chose. The audience decides who sees the line, not whether it helps you. Languages are used only with your consent. Relationship status and gender are not used in ranking. Page type, topics and public bios are matched against fixed word lists — no AI.

We never show anyone an «حول» line you did not let them see, and never give it as a reason. A hidden line may slightly change order and add a weak weight to suggestions. It never decides alone, needs at least ten people holding the same fact hidden, never applies to new accounts or anyone under 18, and we do not turn it on if it could reveal who is secretly from a town. Posts by anyone under 18 are not brought to strangers through a shared city, school or work. We do not use your messages, precise location or searches. None of this reaches Google, Meta or any advertiser.

You can pause personalised ordering; the feed then shows the newest first and you lose no feature. Ask at privacy@daloona.app and we pause it for you. We will add the pause switch in settings; this sentence will name its path when it ships. Deeper personalisation joining activity from different sections runs only with your explicit consent.

We keep the envelope: who talks to whom, when, size, delivery and read receipts. Notifications for person-to-person chats and encrypted groups arrive encrypted. Cloud-group notifications pass through notification providers with their text. When you report a message in a private chat, the app decrypts that one message on your phone and sends us that message only — its text, picture or voice — and nothing else from the chat. We keep that copy only for the review. How long it stays is in §13. We do not receive the encryption key, and we cannot check that the copy matches the original. Slack never receives that text: only the report number, the category, a link to the moderation console, and quotes of public content.

What you publish publicly is visible to others. You decide it and you are responsible for it. You can delete it, but copies others shared may remain.

Stripe. When you pay for a plan on our website or in the Android app from our website, you pay on Stripe’s page. We send it your email and the order number. We receive the transaction number, its status and your billing country — never your card number. NSRALISA provides the plan.

Google and Meta for ads. When ads show, Google’s AdMob tool requests, displays and measures the ad. Google may show an ad from Meta’s Audience Network. We send them no name, account, date of birth, city, «حول», or what you post, read or send. We send a signal only if we know you are under 18, and a request for G-rated ads in that case only. An account with no birth date is not tagged as a minor. If we add another ad network, we name it here before it shows any ad.

Sign in with Google or Apple sends what is needed to create your account. We send the provider nothing about your activity. Facebook sign-in no longer exists.

Ads labelled «إعلان» appear between posts in «لك» and «أتابع», between clips, on hashtag pages and in video search when the list is long, and as a small card under the video player. Never in chats, حوار, دعم, on your profile, page, shop or office, in the main video list, in the prayer apps, or in settings or sign-in. No ad inside a video, before it or in the middle of it.

We ask “Ads that suit you?” with two answers of equal weight. Yes lets Google and Meta choose from activity they know. An account with no birth date is treated as an adult for ads, so a yes is personalised there too. On iPhone Apple then asks tracking permission, and in Europe Google’s consent form appears. Refusing either means non-personalised ads (limited in Europe). Outside Europe, a no or no answer means non-personalised ads, same app, same number of ads. A known minor gets non-personalised, G-rated ads only, even if we never asked. In the EU, EEA, UK and Switzerland a no means limited ads, and no answer means no ads until you answer. A known minor sees no ads in Europe. Change your mind in Settings → Privacy → Ads («الإعدادات ← الخصوصية ← الإعلانات»). The change applies before the next ad.

In our Google account we block dating, politics, sensationalism, sexual and reproductive health, social casino games, weight loss, references to sex, drugs and supplements, alcohol and gambling. Nothing above PG. A known minor gets G. An account with no birth date is rated PG, like any adult. Religion, cosmetic procedures and get-rich-quick stay allowed. We do not block an ad because of the post before or after it. Meta’s ads follow Meta’s policies. You can hide or report any ad from its menu.

Subscribers to مَدى and أُفُق see no Google or Meta ads. Our own promotion («مُروَّج») is not running for anyone today. When it runs it is always marked, shown on every plan, and the advertiser never learns who you are.

«توثيق» confirms an account belongs to its owner, through the «توثيق» bot. Today it is open to people we invite and to وَصل subscribers. A plan only opens the door. Your face is captured live by the app’s camera only; document pictures by the camera or from your library. A named person compares them: no machine, no AI, no outside company, not a government register. Documents may be an ID card, a passport, or a residence permit for a country you live in.

• Document and face pictures, the request’s files and messages: 30 days after the decision, then deleted. If an appeal is open, they wait until it is settled.
• An unsent request: 7 days. An undecided request: 90 days.
• After approval we keep the reviewed name and date of birth while the mark can exist: two years, or the document’s expiry if sooner, until the mark is revoked or you delete your account.
• If a document cannot be confirmed we hold the account from confirmation for 30 days. A mark revoked for abuse with someone else’s document holds the account for one year.
• If a mark is revoked for abuse we keep a scrambled fingerprint of the document for one year, with no name and no picture, even if you delete your account.

Spaces (a page, shop, office or chat channel) are verified through «توثيق» too. Your legal name and document are never shown. The «موثّق» mark means we confirmed identity, not that we endorse what you post. People under 18 carry no visible mark, cannot buy a plan, and are confirmed only by our invitation.

Daloona is free. Optional paid plans add tools: وَصل and مَدى (and أُفُق when we offer it). What you use for free today stays free for you. No plan buys reach or a verdict. You pay on our website and in the Android app from our website through Stripe. Gifts go through Stripe only. Stripe does not sell in some countries and regions; we read the country you connect from and your billing country, and we do not start a payment if either is one of them. A payment that completes anyway is refunded in full and the plan is not activated. Your card is processed by Stripe alone. Payment records are kept 7 years under Dutch tax law and detached from your identity if you delete your account. Deleting your account stops the Stripe renewal. Contract details are in Terms §15.

Your data may be processed outside your country. When it leaves the EEA we rely on recognised mechanisms, such as the EU-US Data Privacy Framework or the Standard Contractual Clauses. Google and Meta process ad data, and Stripe processes payment data, in many countries, each under its own policy.

• See and correct your account data in Settings.
• Download a copy («الإعدادات ← الخصوصية ← تنزيل بياناتك»), including «حول» and each field’s audience, the ranking signals we hold, your ads answer and your plan history.
• Object to or pause personalised ordering at privacy@daloona.app (§5).
• Withdraw consent to personalised ads in Settings → Privacy → Ads, and on iPhone in the system’s tracking settings.
• Withdraw an identity-confirmation request before the decision.
• Delete your account at /delete-account, except what §13 lists.
• Complain to your data-protection authority. In the Netherlands, the Autoriteit Persoonsgegevens.

External links open in an in-app browser. The site is independent of us. Mini-apps receive only what you explicitly allow. When you tap an ad, you go to the advertiser’s site or its app-store page, which is independent of us and has its own policy.

Daloona is independent. We give no one automatic access. A request binds us only when it comes through Dutch law or an instrument the Netherlands recognises. We tell you where the law allows. Because private chats are end-to-end encrypted we cannot hand over their content, except the one message a party attached to a report (§6).

We encrypt data in transit, encrypt private chats end to end, store passwords so they cannot be read back, and limit access. No system on the internet is perfectly safe. We tell you without undue delay if a breach affects your data, as the law requires.

Daloona is not for anyone under 16, and any date of birth under 16 is refused by the system itself. The age was 13 until September 2026. Dutch law sets the digital-consent age at 16, which is also the app’s store rating (16+), so the number is the same everywhere. A known minor — aged 16 or 17 because they entered a birth date — gets non-personalised, G-rated ads only, and no ads in Europe. Their posts are not brought to strangers through a shared city, school or work. They carry no visible «موثّق» mark, cannot buy a plan, and cannot receive a plan as a gift. An account with no birth date is treated as an adult for ads: personalised where they agreed.

By the founder’s decision, this version (4.0) takes effect on publication, 25 October 2026. We update this policy as the platform changes. For any future material change we update the date and version, say what changed, and announce the change on this website at least 30 days before it takes effect. You keep the rights in the Terms (§17) in the meantime. Anything that needs your consent, such as personalised ads, we ask about on its own. We never treat continued use as consent.