Privacy Policy

Khadra app · Last updated: 15 October 2026

We respect your privacy. This policy explains what data the Khadra app collects, why, how we protect it, and your rights.

Who we are

Khadra is an app for brewing tea and finding tea shops in the United Arab Emirates. It is operated by Saif AlAnsari, Abu Dhabi, United Arab Emirates ("we", "us").
Contact: support@khadra.app

In short

• Without an account, what you add (brands, types, recipes, photos, settings) stays on your phone and never reaches us.
• Your location is used on your phone only to sort shops by distance. We don't store it or send it to our servers, except when you choose to use it as the location of a shop you suggest.
• We don't sell your data, show ads, or use advertising trackers.
• If you create an account, we store your account details, what you keep in your account, and what you choose to publish.

What we collect and how we use it

1. Data that stays on your phone

Brands, types and recipes you add, logo and can photos, brew history, saved water amounts, and your settings (appearance, quick timer). Without an account, this data is stored inside the app on your device and is not sent to us. Deleting the app deletes it from your device.

2. Location

With your permission, the app uses your location only while you use it, to calculate distances to shops, sort them by nearest and show your position on the map. This happens on your device; we don't store your location or send it to our servers.
The one exception: when you suggest a shop and choose "My location" to place its pin, that position is sent as the shop's location, together with your suggestion.
You can turn the permission off at any time in your device settings.

3. Camera and photos

We ask for camera and photo access only when you add a photo (a brand logo, a tea can, a shop photo or a profile photo). The photo is stored on your device and is uploaded to our servers only when you choose to:

• a profile photo is uploaded when you add it and is visible to other users straight away;
• photos you keep in your account are uploaded when your account syncs and are visible only to you;
• photos you publish in the Majlis or send with a shop suggestion are reviewed before other users can see them.

4. Notifications

We use local notifications on your device to tell you when a steeping timer ends.
If you have an account, the app shows in-app notices (for example, when a recipe you published is approved or a report you made is handled). We don't send push notifications at this time.

5. Shops and maps

When you open the Shops tab, the app requests the list of shops from our servers. Like any internet service, our servers may temporarily log technical information such as your IP address and request time, for operation and security.
Maps are provided by Google Maps; data Google receives when displaying the map is subject to Google's privacy policy.
If you paste a Google Maps link when suggesting a shop, our server opens that link to read the place's coordinates.
The "Directions", "Call" and "Instagram" buttons open other apps on your device, which are subject to their own policies.

6. Account

If you create an account with Apple, Google or email, we collect:

• Account data: your email address (or the private relay address Apple provides), your username, and a profile photo if you add one. If you sign in with email, your password is stored only in hashed (encrypted) form by our sign-in provider; we can't read it.
• Sign-in details from Apple or Google: Google shares your name and a link to your Google profile picture, which our sign-in provider keeps with your account record; we don't show them to anyone and use your name only to suggest a username. If Apple shares your name, it is used once on your phone to suggest a username and is not stored. For Sign in with Apple we keep a token from Apple, used only to cancel the Apple sign-in when you delete your account.
• What you keep in your account (sync): your brands, types, recipes and their photos, saved shops, quick timers and map style, so they are backed up and appear on your other devices. Only you can see them.
• Brews you finish: when you finish a brew of a tea that is in the Majlis, we record which brand, type and recipe you brewed and when. This lets you rate that tea and shows how often recipes are tried. If you mark a recipe as "tried it", we also record your result (strength and sugar).
• What you publish: recipes you publish in the Majlis, ratings and comments on teas and shops, "tried it" marks, "helpful" marks, suggestions for shops (name, logo, Instagram, the shop's phone number, photo and location), brands and types, and reports.
• Blocking: the list of users you block, so their content is hidden from you.

What other users see

• Recipes, brands, types and shop suggestions are visible to everyone after we review and approve them.
• Ratings and comments are visible straight away. They pass through an automatic word filter, and content reported by several users is hidden until we review it.
• Your username and profile photo appear next to what you publish.
• Your email address is never shown to anyone.

Service providers

We use trusted providers to run the app; they process data only on our behalf:

• Supabase: database, photo storage and sign-in.
• Google: Google Maps and Sign in with Google.
• Apple: Sign in with Apple and app distribution.
• Resend: sending account emails (confirmation and password reset codes) from noreply@khadra.app.
• Zoho Mail: our support mailbox, support@khadra.app.
• Netlify: hosting this website. The website uses no cookies, analytics or trackers.

Some of these providers' servers may be located outside the UAE.

What we don't do

• We don't sell or rent your data.
• We don't show ads or share your data with advertisers.
• We don't track you across other apps or websites.

Retention

• Data stored on your device stays until you delete it or the app.
• Account data is kept while your account exists.
• When you delete your account in the app, it is deleted straight away: your account, profile and photos, everything kept in your account, your recipes, ratings, comments, "tried it" and "helpful" marks, brew records, blocks, reports and notices, and suggestions still waiting for review. Brands, tea types and shops you suggested that were already approved stay in the app without your name. A deletion request by email is completed within 30 days. We keep only what the law requires us to keep.

Your rights

You can ask to access, correct or delete your data, or object to its processing. You can:

• delete your account in the app: More → Profile → Delete my account;
• or email support@khadra.app, or use khadra.app/delete-account.

We comply with the data protection laws applicable in the United Arab Emirates.

Children

The app is not directed at children under 13, and we don't knowingly collect their data. If you learn that a child has created an account, contact us and we will delete it.

Security

We use encrypted connections and access rules that prevent any user from reading or changing another user's data. No method of protection is perfect, but we take reasonable measures to protect your data.

Changes to this policy

We may update this policy when we add features. We will change the "Last updated" date above and let you know in the app if a change is significant.

Contact

support@khadra.app