BNAMALA · بنەماڵە
Privacy Policy
Bnamala ("the app") is published by Mohamad Tahsin ("we"). It lets people register themselves and their relatives in clans and villages and print a family book. This policy explains what we collect, why, who sees it, and how to delete it.
What we collect
- Your account: your Iraqi mobile number (your account ID), your name, a one-way hash of your password (we never store the password itself), the invitation code you signed up with (if any), your own invitation code, and whether you have printed a book.
- Member records for you and for relatives you add (including children and people who have died): full name, date of birth, sex, living status, clans, village or area, an optional photo, and an optional background text ("peshina"). Only add people you have the right to add, such as your own children or family members who agreed.
- Suggestions: names of clans or villages you suggest.
- Security data: one-time code records (stored only as a hash, deleted once used) and a hashed form of your IP address with a daily count of code requests, used to stop abuse.
Location
When the app starts, it may ask for your approximate location to choose the app language for your region (Kurdistan Region, rest of Iraq, Iran). The location is looked up on your phone using your phone's built-in map service (Apple or Google) and is not sent to us or stored. You can refuse; the app then lets you choose the language yourself.
How we use it
- To create and secure your account, including sending one-time codes to your phone when you sign up, reset your password or delete your account.
- To show member lists and build family books for a clan or village.
- To let administrators approve new clans and villages and correct records.
We do not sell your data, show ads, use analytics or tracking tools, or use your data for anything else.
Who can see it
- Other users: member records are shared within the app. When someone prints a book for a clan or village, it includes each listed member's name, date of birth, sex, living status, clans, village and peshina. Photos are not printed in books.
- Administrators of the app can view and edit records.
- Service providers that run the app for us:
- Google Firebase (Cloud Firestore and Cloud Functions), which stores the data and runs our server code in the European Union.
- OTPIQ (otpiq.com), which receives your phone number and a one-time code to deliver it to you by WhatsApp, Telegram or SMS.
- Authorities, if the law requires it.
How long we keep it
We keep your account and records until you delete your account. One-time codes are deleted when used or replaced. Daily abuse counters are overwritten each day.
Deleting your account
In the app, open the home screen and choose Delete account. We send a one-time code to your phone; once you enter it, we delete your account, your own member record (with its photo and peshina) and your code records. Relatives you added are kept, because they may belong to other families' books, but they are no longer linked to your phone number. To have those removed too, or if you can't use the app, see delete-account or email muhamadkaremh@gmail.com.
Your choices and rights
You can ask us for a copy of your data, ask us to correct it, or ask us to delete it, by emailing muhamadkaremh@gmail.com from or about the phone number on the account. We may ask you to confirm the number with a one-time code.
Children
The app is meant for adults managing their family's records. Children should not create accounts. Parents and guardians may add their children's records.
Security
Data travels over encrypted connections and is stored by Google Firebase, which encrypts it at rest. Passwords are stored only as a one-way hash. No system is perfectly secure; tell us at muhamadkaremh@gmail.com if you see a problem.
Changes
We will update this page when the app's data use changes and change the effective date above.
Contact
Mohamad Tahsin · muhamadkaremh@gmail.com
کوردی: سیاسەتی تایبەتمەندی
بنەماڵە لەلایەن Mohamad Tahsin بڵاوکراوەتەوە. ئەم بەشە کورتەی سیاسەتەکەیە؛ دەقە ئینگلیزییەکە دەقی سەرەکییە.
- چی کۆدەکەینەوە: ژمارەی مۆبایلەکەت، ناوت، هاشێکی یەکلایەنەی وشەی نهێنی (خودی وشەی نهێنی هەڵناگیرێت)، کۆدی بانگهێشت، و تۆماری ئەندامان بۆ خۆت و ئەو خزمانەی زیادیان دەکەیت (ناو، بەرواری لەدایکبوون، ڕەگەز، دۆخی ژیان، هۆز، گوند، وێنە و پێشینەی ئارەزوومەندانە).
- شوێن: شوێنی نزیکەیی تەنها لەسەر مۆبایلەکەت بەکاردێت بۆ هەڵبژاردنی زمان، و بۆ ئێمە نانێردرێت و هەڵناگیرێت.
- کێ دەیبینێت: تۆماری ئەندامان لەناو بەرنامەکەدا هاوبەشە و لە کتێبی هۆز یان گوندەکەدا چاپ دەکرێن (وێنە چاپ ناکرێت). بەڕێوەبەرانی بەرنامە دەتوانن تۆمارەکان ببینن و دەستکاری بکەن. Google Firebase داتاکان لە یەکێتی ئەورووپا هەڵدەگرێت، و OTPIQ ژمارەکەت و کۆدەکە وەردەگرێت بۆ ناردنی بە واتسئەپ، تێلێگرام یان نامە.
- داتاکانت نافرۆشین، ڕیکلام و شوێنکەوتن بەکارناهێنین.
- سڕینەوەی هەژمار: لە ماڵەوە «سڕینەوەی هەژمار» هەڵبژێرە و ئەو کۆدەی بۆت دێت بنووسە. هەژمار و تۆماری خۆت دەسڕدرێنەوە؛ ئەو خزمانەی زیادت کردوون دەمێننەوە بەڵام بە ژمارەکەتەوە نابەسترێنەوە. بۆ سڕینەوەی ئەوانیش ئیمەیڵ بنێرە بۆ muhamadkaremh@gmail.com.
العربية: سياسة الخصوصية
ينشر تطبيق «بنەماڵە» Mohamad Tahsin. هذا ملخص للسياسة؛ النص الإنجليزي هو المرجع.
- ما نجمعه: رقم هاتفك، واسمك، وتجزئة أحادية الاتجاه لكلمة المرور (لا نحفظ كلمة المرور نفسها)، ورمز الدعوة، وسجلات الأعضاء لك ولأقاربك الذين تضيفهم (الاسم، تاريخ الميلاد، الجنس، الحالة، العشيرة، القرية، وصورة وسيرة اختياريتان).
- الموقع: يُستخدم الموقع التقريبي على هاتفك فقط لاختيار اللغة، ولا يُرسل إلينا ولا يُحفظ.
- من يراها: سجلات الأعضاء مشتركة داخل التطبيق وتُطبع في كتاب العشيرة أو القرية (لا تُطبع الصور). يمكن لمديري التطبيق عرضها وتعديلها. تحفظ Google Firebase البيانات في الاتحاد الأوروبي، وتستلم OTPIQ رقمك والرمز لإرساله عبر واتساب أو تيليغرام أو رسالة نصية.
- لا نبيع بياناتك ولا نستخدم الإعلانات أو التتبع.
- حذف الحساب: من الشاشة الرئيسية اختر «حذف الحساب» وأدخل الرمز الذي يصلك. يُحذف حسابك وسجلك؛ ويبقى الأقارب الذين أضفتهم دون ارتباط برقمك. لحذفهم أيضاً راسل muhamadkaremh@gmail.com.