Beta Program Notice: This Privacy Policy is effective for the Rafeeq beta program (May 28, 2026). It will be reviewed by a licensed attorney before the public App Store launch. Questions? Email privacy@rafeeeq.app.
Privacy Policy
Effective date: May 28, 2026 · Last updated: May 28, 2026
Rafeeq (رفيق) is an Arabic-first family and household coordination platform for Gulf families. We help families coordinate daily life — morning routines, tasks, calendar events, shared expenses, and more — through a single, culturally-aware app.
This Privacy Policy explains what information we collect, how we use it, and the controls you have over it. It applies to all Rafeeq users — account holders and the family members they add to their spaces. This Privacy Policy should be read alongside our Terms of Service.
Questions? Contact us at privacy@rafeeeq.app.
1. Information We Collect
Account data
- • Phone number — used for verification and account identity
- • Name — your display name in family spaces
- • Profile emoji — your identity marker within spaces
Family and space data
- • Space membership — who is in your space
- • Roles and relationships (head of family, parent, child, domestic worker, etc.)
- • Join codes used to invite others
Activity data
- • Calendar events you create or are invited to
- • Tasks and missions (assignments, completion status)
- • Shopping list items
- • Family wall content
Financial data
- • Expense records (amount, category, date, description)
- • Budget settings
- • Personal pocket data (visible only to you)
Financial data is handled with extra care. See Section 3 for the role-based access controls that govern who can see it.
Wellbeing data
We collect daily mood check-ins (emoji selections) as part of the Morning Pulse feature. This data:
- • Is visible to other active members in your space
- • Is used as soft context for AI coordination suggestions
- • Resets daily at midnight Kuwait time
- • Is never used to label, score, or diagnose your mental health
Technical data
- • Device model and OS version (via crash reporting — no personal content)
- • Crash reports and error logs
- • Anonymized usage events (no personal identifiers — used only to understand feature usage, not shared with ad networks)
2. How We Use Your Information
To provide the service
Operate your family space, coordinate between members, and present content appropriate to your role.
To power AI features
To power AI features such as suggestions and reminders, Rafeeq sends relevant data — including schedules, tasks, and family activity — to our AI provider (Anthropic) through their commercial API. This data is used solely to generate suggestions for your own family space. Under Anthropic's Commercial Terms, inputs and outputs from the commercial API are not used by default to train Anthropic's AI models. Generated suggestions are scoped to your space and are not shared with other users or spaces.
We store only metadata from AI calls (timestamp, model used, token count) — never the content of AI conversations.
To process subscriptions
Apple In-App Purchase and Google Play Billing process consumer subscriptions. MyFatoorah processes B2B invoices for schools and organizations. We do not store full payment card numbers.
To verify your identity
We use an SMS verification provider to send one-time passwords when you log in. Your phone number is shared with this provider solely for message delivery.
To maintain reliability
Crash reports (via Sentry) help us fix bugs and improve stability. Anonymized usage events help us understand which features are working.
We do not sell your data. We do not share your data with advertisers or data brokers.
3. How Information Is Shared Within Your Family
Role-based privacy is a core Rafeeq feature. Different members see different data depending on their role. This is a deliberate design decision, not an afterthought.
All active members can see
- • Other members' names, profile emojis, and roles
- • Daily mood check-ins
- • Shared calendar events and tasks
Domestic workers — what they can see
- • Their own assigned tasks
- • Today's schedule (read-only)
- • Shopping list (they can add items)
- • Other members' daily mood check-ins
Domestic workers cannot see:
Financial data (wallet, expenses, invoices), other members' location data, behavioral or reward data, or personal expense records. These restrictions are enforced at the server level — they cannot be bypassed from the interface.
Children's data
- • Parents can view children's tasks, missions, and schedule
- • Children's data is not shared outside the family space
Note on location features: The current beta does not collect GPS or physical location data. The "location" field on calendar events is a user-typed venue text (e.g. a place name or address), not device GPS coordinates. A member location-sharing feature is planned for a future version; this Privacy Policy will be updated before that feature launches.
Personal Pocket (private expenses)
Your personal pocket expenses are visible only to you. The head of family cannot see other members' personal expenses. This is enforced at the server level.
4. Third-Party Services
We use the following third-party services to operate Rafeeq. Each receives only the data necessary for its function.
| Service | Data shared | Purpose |
|---|---|---|
| Anthropic | Family context, AI chat content | AI suggestions, nudges, chat |
| Apple (IAP) | Subscription purchases | Consumer subscription billing |
| Google Play | Subscription purchases | Consumer subscription billing |
| MyFatoorah | Invoices (B2B only) | School and organization billing |
| SMS provider | Phone number | OTP login verification |
| Sentry | Crash logs, device info | App reliability monitoring |
5. Data Retention
We retain your data while your account is active.
If you delete your account, a 30-day recovery window begins. During this window you may contact us to cancel the deletion and restore your account. After 30 days, your personal data, family memberships, and space content are permanently and irreversibly removed. Anonymized crash logs (no personal identifiers) may be retained for reliability purposes.
Leaving a family space is different from deleting your account. If you leave a space but keep your account, your account remains active. We are finalizing how content is handled when a member leaves a shared space during the beta period; if you have specific concerns about content you contributed, contact us at privacy@rafeeeq.app.
6. Your Rights
You have the following rights regarding your personal data:
- Access — Request a copy of the data we hold about you.
- Correction — Ask us to correct inaccurate data.
- Deletion — Delete your account and associated data (see Section 5).
- Portability — Request an export of your data in a readable format.
- Restriction — Ask us to limit processing of your data in specific circumstances.
To exercise any of these rights, email privacy@rafeeeq.app. We will respond within 30 days. Some export features are in development during the beta period.
These rights align with Kuwait's data protection principles and GDPR standards (relevant for users with EU connections).
7. Children's Privacy
Rafeeq is a family platform. Children may be members of family spaces, added by their parents or guardians.
- • We do not knowingly collect data from children independently. Children are added to spaces by parents or guardians who take responsibility for that membership.
- • Parents and guardians control children's accounts and can remove them from spaces at any time.
- • We do not direct marketing at children.
- • We recommend children under 13 use Rafeeq under direct parental supervision.
If you believe we have inadvertently collected a child's data without appropriate parental consent, contact us immediately at privacy@rafeeeq.app.
8. Data Security
We use industry-standard measures to protect your data:
- • Encryption in transit (HTTPS/TLS) for all data transfers
- • Encrypted storage for sensitive data
- • Role-based access controls enforced at the server (API) level
- • Crash monitoring to detect and resolve security issues promptly
No method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security. If a breach occurs that materially affects your personal data, we will notify you promptly — within 72 hours where required by applicable law — via in-app notification and/or SMS to your registered phone number.
9. International Data Transfers
Rafeeq is operated from Kuwait. Some data is processed by third-party services outside Kuwait, primarily in the United States (Anthropic AI processing, Sentry, Apple, Google).
By using Rafeeq, you consent to these transfers. We only work with services that maintain appropriate data protection standards.
10. Changes to This Policy
We may update this Privacy Policy as Rafeeq evolves from beta to public launch. When we make significant changes:
- • We will update the "Effective Date" at the top of this page
- • For significant changes, we will notify you via in-app notification or SMS to your registered phone number
- • For material changes — particularly the transition from beta to public launch — we will ask for your affirmative in-app re-consent before the updated policy takes effect
Continued use of Rafeeq after a policy update (other than material changes requiring re-consent) constitutes acceptance of the updated policy.
11. Contact Us
For privacy questions, data requests, or concerns:
Rafeeq (رفيق)
Operated by Ahmed Haffar · Kuwait
Email: privacy@rafeeeq.app
Entity registration in Kuwait is in progress. Contact details will be updated on completion.
Rafeeq Privacy Policy · Effective May 28, 2026 · Beta version · Not a substitute for licensed attorney review