Privacy Policy

Account: name, email, phone number (guides).

Guide profile: languages spoken, experience, services offered, rates, certifications.

Identity verification (KYC): ID document (national ID, passport or driving license) and, where applicable, a letter of recommendation (Tazkiya).

Bookings and payments: dates, amounts, payment method used.

Messages exchanged via the built-in messaging and published reviews.

Managing accounts and bookings, verifying guides' identity for platform security, sending transactional emails (confirmations, notifications), handling support requests, and anonymized audience measurement.

Supabase (database, authentication and storage), self-hosted on an OVH server.

Resend, for sending transactional emails.

Twilio, for verifying guides' phone numbers via an SMS code.

Matomo, for measuring site traffic (analytics.quikku.io).

ID and KYC documents are stored in a private storage space, never made public, and only accessible to our validation team via temporary, secure links.

Data is kept for as long as necessary to manage the account and the contractual relationship, then archived or deleted in accordance with applicable legal obligations.

Access to data is controlled by a role-based permission system (pilgrim, guide, administrator). Payments go through an escrow mechanism. Sensitive documents are never publicly exposed and are served via temporary signed links.

You have the right to access, rectify, delete and object to the processing of your personal data. To exercise these rights, contact us via the Contact page.

The site uses Matomo to measure its traffic.

This policy may be updated; the last-updated date is shown at the top of this page.