Privacy Policy

Pre-launch draft: values highlighted in yellow (such as company name, address and KvK number) are placeholders and will be updated before the app is published.

In short

Last updated: 2026-10-09. You can browse Dalilna without an account. We collect only what we need to run the app, we never sell your data or show ads, anonymous usage statistics are never linked to you and can be switched off at any time, and your location stays on your device. You can download or delete your data at any time from Account > Privacy.

1. Who we are

Dalilna is a directory app that helps Arab and Muslim communities in the Netherlands find mosques, halal food, shops and services. This privacy policy explains how we handle your personal data when you use the Dalilna app.

The controller responsible for your personal data under the General Data Protection Regulation (GDPR, in Dutch: AVG) is Dalilna, the Netherlands, registered with the Netherlands Chamber of Commerce (KvK) under number —.

For any question about privacy or to exercise your rights, contact us at privacy@dalilna.app.

2. How Dalilna works

You do not need an account to search, browse places, view maps or use prayer reminders. An account is only needed if you want to contribute, for example by writing reviews, voting on place information, following places or claiming a business.

At the moment, Dalilna stores data locally on your device (“local mode”). When our online service is launched, account data and the content you share with the community will be stored on our servers, hosted in the European Union. This policy covers both situations.

3. Personal data we collect

Depending on how you use Dalilna, we process the following data:

  • Account data (only if you create an account): your email address, display name, preferred language, home city, account role (for example user, business owner or moderator) and the date your account was created. We sign you in with a one-time code sent to your email, so we do not store a password. Sign-in with Apple or Google may be added later; if so, we will receive only the basic details you allow those services to share.
  • Content you create: reviews (rating, text and photos), community votes on place information (such as “halal?” or “Arabic spoken?”), place suggestions (name, address, phone number), follows of places, and messages in your in-app inbox.
  • Safety data: reports you submit about places, reviews or users, users you block, and moderation decisions related to your account or content.
  • Business data: if you claim a business, the business phone number or email address, KvK number, uploaded KvK extracts, and halal certificates. If you publish announcements or events for a business or mosque, that content and its author.
  • Technical data: when the app loads maps, images or checks your connection, the receiving server sees your IP address and basic technical request data (such as device type and app version).
  • Anonymous usage statistics (on by default, you can switch them off): app opens, screens viewed, places viewed, completed search queries and app errors or crashes. Search queries that look personal, such as email addresses, long numbers or links, are never recorded. These events are linked only to a random device identifier — never to your name, email address, account or exact location.

We do not ask for your religious beliefs, ethnicity, phone contacts, photos library (other than photos you choose to upload) or precise location history.

4. Data that stays on your device

Some data is stored only on your phone and is never sent to us:

  • Saved places, your chosen city, language and notification settings.
  • Search history and cached data, which you can clear at any time.
  • Your location. Dalilna only uses your location when you tap “use my location”, press the locate button on the map, or choose it during onboarding. It is used on your device to show nearby places or to pick the nearest city. We do not store your location on our servers and we never track you in the background.
  • Prayer reminders. These are scheduled as local notifications on your device. No push server is involved and we do not know when or whether you pray.

If you uninstall the app, this local data is removed from your device.

5. Why we use your data and on what legal basis

We only process personal data when the GDPR (Article 6) gives us a legal basis:

  • To provide your account and the features you use, such as publishing reviews, votes, follows, place suggestions, business claims, announcements and your inbox — performance of a contract (our Terms of Use).
  • To keep the community safe, handle reports, moderate content, enforce our Community Guidelines (including suspending accounts that break them) and prevent fraud and abuse — our legitimate interest in a trustworthy and safe platform.
  • To verify business claims and halal certificates, so that users can rely on the information — our legitimate interest, and performance of a contract with the business owner.
  • To keep the service working and secure, for example loading maps and images and detecting whether you are offline — our legitimate interest in a functioning, secure app.
  • To understand how the app is used and to find and fix errors, using anonymous usage statistics — our legitimate interest in improving and fixing the app (Article 6(1)(f) GDPR). You can object at any time by turning off the “Anonymous usage statistics” switch under Account > Privacy.
  • To process features linked to religious practice, such as following a mosque or prayer reminders — your explicit consent, given by choosing to use these features (see section 6).
  • To comply with legal obligations, such as answering lawful requests from authorities or keeping records required by law — legal obligation.

Where we rely on legitimate interest, we have weighed our interests against your privacy. You can object to this processing at any time (see section 10).

6. Religion and other sensitive data

Because Dalilna is built for Arab and Muslim communities, the fact that you use the app — or certain features such as following a mosque or setting prayer reminders — could reveal information about your religion. The GDPR treats religious beliefs as a special category of personal data that deserves extra protection.

  • We never ask about your religion and we do not create profiles of your religious beliefs or practice.
  • Following a mosque is processed only to show you its announcements and events. Prayer reminders are processed only on your device.
  • By choosing to use these features, you give your explicit consent (Article 9(2)(a) GDPR) for this limited processing.
  • You can withdraw your consent at any time by unfollowing, turning off reminders or deleting your account. This does not affect processing that took place before you withdrew it.
  • We never use this data for advertising and never share it with third parties for their own purposes.

7. How long we keep your data

  • Account data: until you delete your account.
  • Reviews, votes, follows and other content: until you delete them or your account.
  • Reports, moderation decisions and audit logs: up to 2 years, so we can deal with repeated abuse and handle appeals. After account deletion, these records are anonymized.
  • Business claim documents (such as KvK extracts): deleted within 90 days after we decide on the claim. If the claim is approved, we keep a record of the confirmed ownership for as long as the business is listed.
  • Inactive accounts: deleted after 3 years without activity. We will notify you by email beforehand so you can keep your account.
  • Backups: overwritten on a rolling basis within 30 days, so deleted data disappears from backups within that period.

We may keep data longer only when the law requires it or when it is needed for an ongoing legal claim.

8. Who receives your data

We do not sell your personal data and we do not share it with advertisers. We only share data where necessary:

  • Other users: your display name, reviews, photos and announcements are public within the app. Your email address, reports, blocks and claim documents are never shown to other users.
  • Hosting provider: our online backend will run on Supabase, hosted in an EU region (Frankfurt or Ireland). Supabase acts as our processor under a data processing agreement and may only process data on our instructions.
  • Map services: Apple Maps (on iOS) and Google Maps (on Android) display the maps. Your device sends them the visible map area and your IP address. Their own privacy policies apply.
  • Image delivery: place photos are loaded from Unsplash (images.unsplash.com), which receives your IP address and technical request data.
  • Connectivity check: to detect whether you are offline, the app sends a simple request to a standard Google endpoint (connectivitycheck.gstatic.com). No personal data is sent other than your IP address and technical request data.
  • Authorities: only where we are legally required to do so, or where necessary to protect the safety of people.

9. Transfers outside the EU

We aim to keep your data within the European Union. Some service providers, such as Apple, Google and Unsplash, are based in the United States and may receive technical data (such as your IP address) when your device connects to them.

Where personal data is transferred outside the European Economic Area, we rely on the EU-US Data Privacy Framework where the recipient is certified, and/or on the European Commission’s Standard Contractual Clauses, together with additional safeguards where needed. You can ask us for more information at privacy@dalilna.app.

10. Your rights

Under the GDPR you have the right to:

  • Access: get a copy of the personal data we hold about you.
  • Rectification: have incorrect or incomplete data corrected.
  • Erasure: have your data deleted (“right to be forgotten”).
  • Restriction: ask us to temporarily limit the use of your data.
  • Data portability: receive your data in a structured, machine-readable format.
  • Objection: object to processing based on our legitimate interest.
  • Withdraw consent: at any time, for processing based on consent, without affecting earlier processing.
  • Complain: lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) via autoriteitpersoonsgegevens.nl, or with the authority in your EU country of residence.

You can exercise most rights directly in the app (see section 11) or by emailing privacy@dalilna.app. We respond within one month. If your request is complex, we may extend this by up to two more months and will tell you why. We may ask you to confirm your identity before handling a request.

11. Privacy controls in the app

Go to Account > Privacy to:

  • Download all your data as a JSON file.
  • Delete your account. This removes your account and the content you wrote. Anonymized records of moderation decisions may be kept for a limited time (see section 7).
  • Turn anonymous usage statistics on or off. Turning them off also deletes the statistics recorded so far.
  • Clear your search history and cached data.

12. Cookies, analytics and tracking

Dalilna is a native app and does not use cookies. We use local storage on your device only to make the app work, for example to remember your language, city and saved places.

Dalilna collects anonymous usage statistics by default to help us improve the app and fix errors: app opens, screens viewed, places viewed, completed search queries (never queries that look personal, such as email addresses, long numbers or links) and app errors or crashes. They are linked only to a random device identifier, never to your name, email address, account or exact location. At the moment they are stored only on your device; in the future they may be sent to an analytics service hosted in the EU that acts as our processor.

You can switch this off at any time under Account > Privacy (“Anonymous usage statistics”). Switching it off also deletes what has been recorded so far.

We do not show advertising, we do not use third-party advertising trackers, and we do not track you across other apps or websites.

13. Children

Children under 16 may not create a Dalilna account on their own. In line with the Dutch GDPR Implementation Act (UAVG), children under 16 may only create an account with the consent of a parent or legal guardian.

If we learn that we hold personal data of a child under 16 without such consent, we will delete it. Parents or guardians can contact us at privacy@dalilna.app.

14. Security

We take appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS), access controls that limit who can see personal data, passwordless sign-in, hosting in the EU and restricted access to business claim documents.

No system is completely secure. If a data breach occurs that poses a risk to you, we will inform the Autoriteit Persoonsgegevens and, where required, you, as the law requires.

15. Changes to this policy

We may update this privacy policy when the app or the law changes. The date at the top shows when it was last updated. If we make important changes, we will let you know in the app before they take effect and, where required, ask for your consent again.

16. Contact

If you have any questions about this policy or how we handle your data, contact us: