Privacy policy
Dairati is a platform for coaches and their members: a dashboard for coaches at dairati.com, and an app on Android, iPhone and at app.dairati.com with a section for coaches, and a section for members that opens through a circle link from their coach, or by choosing a coach from the “coach list” in the app. This policy explains what we collect, why, who sees it, how long we keep it, and how you can delete it. It covers both the website and the app.
In short: we do not sell your data, we do not use it for advertising, and only your coach and the members of your circle see it, to the extent set out below.
How to contact us
For any question about your data, email us at support@dairati.com or message us on WhatsApp at +964 750 622 4234. We reply within 7 days.
Signing in
Coaches and members sign in to the app with an email and password, with a Google account, or with an Apple account on iPhone. Coaches sign in to their dashboard at dairati.com with an email and password, or with a Google account.
- When you sign in with Google, we receive your name and email from it, and, for coaches, the public profile photo if there is one.
- When you sign in with Apple, we receive the email address Apple provides. It may be a private relay address that hides your real email; our emails reach you through it.
- We never receive the password of your Google or Apple account.
What members log
Everything in the app is entered by you. We store it to show it to you, to calculate your commitment rate, and to remind you of your goals:
- Account: your name, your email, your avatar color in the circle, and your phone number if you or your coach entered it.
- Health: weight and waist readings, workouts, sleep and sleep times, water, nutrition, and excused days.
- Mental: your morning and evening mood with the feelings and reasons you choose, and your private thoughts (the journal and reframing your thoughts). Your coach never sees your private thoughts. Your coach is told that your mood has been low for three days in a row only if you agree to it.
- Spiritual: prayers, the Quran khatma, tasbih, fasting, gratitude, and self-review.
- Social and Family: the names of the people and family members you add, your relationship with them, how often you contact them, their birthdays and occasions, one-on-one time with your children, and the couple's questions and the family meeting. This is data about other people, so enter only what you have the right to enter; you are responsible for that.
- Career: your work situation, job applications, clients and deal amounts, goals, and wins.
- Money: income, expenses, budget limits, bills, debts, savings, and the savings circle (jamiya).
- Personal: books and reading, learning, daily habits, and dreams.
- Other: your tasks, your weekly reviews and your coach's replies to them, your Wheel of Life rating, your chat with your coach, and your participation in your circle's khatma and challenges.
Some of this data is sensitive: health, mental health, religious practice, and money. We process it because you choose to log it, and we use it only to run the service for you and your coach. We do not sell it, we do not use it for advertising, and we do not build a marketing profile from it. You can delete any entry, or the whole account.
What is saved automatically
- Notification token: if you turn on notifications, we save your device's Firebase token to deliver them. The token is deleted when you turn notifications off or sign out.
- Notification history: what is sent to you is kept in the “Notifications” list in the app for 60 days, then deleted.
- Crash reports: if the app crashes, a technical report linked to your account is sent: the error message and where in the code it happened, the app version and the operating system. It does not include the content of your logs or messages, and it is deleted after 60 days. Errors on the website are recorded without a name or email (the error message, the page path and the browser type) in Cloudflare's logs for a limited time.
- On your device: your sign-in session and membership token are kept in the phone's secure storage (Keystore / Keychain), along with a copy of your data so the app works offline. The copy is cleared when you sign out or delete your account. If the server no longer recognizes your membership, the copy of your logs stays on the phone for 30 days so you can restore it with the same account, then it is cleared.
Coach data
Email, name, photo (from their Google account, or a photo the coach picks from their phone's photo library in the app), an optional phone number, the bio and public page if they publish it, their “coach list” profile if they ask to be listed (name, photo, city, specialties, bio, and the circle that members who pick them join), the list fees they owe, their circles, members, reports and messages, their members' names and phone numbers if they enter them, their notes about their members, their sessions and reminders, the amounts they record as paid to them by their members, and their subscription and payment details. If a coach turns on notifications in the app, we save their device's Firebase token to deliver them, and what is sent to them is kept in the “Notifications” list for 60 days, then deleted. When a password is chosen on the website, we check whether it has appeared in known data breaches through the Have I Been Pwned service; only the first five characters of the password's hash are sent to it, never the password itself.
Who sees your data
- Your coach: you choose, area by area, under “Account” → “Share life areas”. Your coach sees a shared area in full and can add to it or edit it, and you can see what they did. For an area you do not share, they see only its rate. When you join a circle, no area is shared until you choose, and your coach may ask you to share an area, which you can accept or decline. In every case your coach does not see your private thoughts, the names of the people and family members you added and your notes about them, or the couple's questions and the family meeting; of these, they see only the numbers. Your coach also sees your name, your messages with them, your streak, and your commitment rate. Your coach sees your Wheel of Life rating in full, with your note on it.
- Members of your circle: they see your name, your avatar color, your commitment rates and your ranking by them, and your streak. In the circle's khatma they see the parts you took and whether you read them. In the circle challenge they see the number of days you met the goal, whether you met it today, and your ranking. They see nothing of your logs themselves.
- People who open “Choose a coach” in the app: they see the profile of a coach who asked to be listed and whom Dairati approved: their name, photo, city, specialties and bio, and their circle's name and number of members. They see nothing about the coach's members. The coach sees that a member came from the list.
- Visitors to your coach's public page: if your coach publishes a public page, it shows aggregate numbers about their members (how many there are and their average commitment), without anyone's name.
Notifications
If you turn on notifications, they reach you through Google Firebase Cloud Messaging: messages from your coach, reminders of your goals and appointments (such as the birthdays of people you added, and bills), reports, and the morning message with your goals for the day. The text of a notification may show on the lock screen, including the first 160 characters of a message from your coach. You can turn notifications off at any time under “Account” → “Notifications” or in your phone's settings.
Service providers and data transfers
We use these providers to run the service. They process data on our behalf, for this purpose only:
- Supabase: the database and sign-in.
- Cloudflare: hosting for the website and the web app, and visit statistics for the website.
- Google Firebase: delivering notifications.
- Google and Apple: identity verification, if you choose to sign in with either of them.
- Resend: sending emails, such as the email confirmation link and the password reset link.
- FIB: coach subscription payments only. The card number is entered on FIB's page and we do not keep it. If a coach chooses auto-renewal, FIB keeps the card as a token, and we keep its last digits to show them to the coach.
- GitHub: an encrypted backup of the database every night, kept for two weeks, then deleted.
- Meta: on the website only, for visits that come from our ads, as described in the next section.
These providers' servers are outside Iraq, so your data is transferred and processed outside Iraq. Data travels encrypted between your device and our servers.
The website: analytics and cookies
We measure visits to dairati.com with Cloudflare Web Analytics. It sets no cookies and does not identify you; the numbers reach us in aggregate.
We use the Meta Pixel to measure our ads on Facebook and Instagram. It loads only if you reached the website from a Meta ad or link (a link carrying fbclid, or one coming from Facebook or Instagram), and it then stays for as long as that window is open. It runs on the home page and the sign-in page only, not inside the coach dashboard and not in the member app. It sends Meta the page view and the creation of a coach account, and it sets cookies from Meta such as _fbp. What Meta receives is subject to Meta's own privacy policy. If you did not arrive from a Meta ad or link, it does not load.
How long we keep data
- Your account and all its logs: as long as the account exists; all of it is deleted when the account is deleted.
- Encrypted backups: your data stays in them for up to two weeks after deletion, then it is gone.
- Notification history: 60 days.
- App crash reports: 60 days.
- When you leave a circle, your chat with that coach and your sharing choices with them are deleted. Your account and logs stay saved, but the app stays closed until you join a coach's circle.
Your rights
You have the right to access, correct and delete your data, and to stop sharing any area with your coach.
- Access and correction: directly in the app: your name under “Account”, and your logs in each area.
- A copy of the data, for coaches: coaches download it themselves from their dashboard: “Settings” → “Data and privacy” → “Export my data”.
- Deletion: in the app: “Account” → “Account settings” → “Delete account” → type “delete” → “Delete permanently”. Or follow the same steps on the web at app.dairati.com. Or email us from your account's address at support@dairati.com and we will delete it within 30 days. Details are on the account deletion page.
Age
The service is for people aged 16 and over. We do not knowingly collect data from anyone younger, and if we learn of an account belonging to someone under 16, we delete it. If you are a parent or guardian and believe your child has created an account, email us at support@dairati.com.
Not medical advice and not an emergency service
Dairati is a tracking tool. Nothing in it is medical, psychological or financial advice, and it does not replace a professional. No one watches what you log as it happens. If you are in danger or thinking of harming yourself, get help right away from someone close to you, or go to the nearest hospital.
Changes to this policy
If we change this policy, we will announce it in the app and on the website and update the “Last updated” date above. Continuing to use the service after that means you accept the new policy.