Privacy Policy

Effective 31 October 2026 · Version 1 · Last updated 31 October 2026

This policy explains how Munasabat Jo ("we", "us") collects and uses personal data when you use the Munasabat Jo (مناسبات الأردن) mobile app and website at https://munasabat-jo.com (together, the "Service"). It is effective from 31 October 2026. We handle personal data in line with Jordan's Personal Data Protection Law (Law No. 24 of 2023).

Who is responsible

Munasabat Jo, Jordan, is the controller of your personal data. Contact us at [email protected] or through the Contact us page.

What we collect

Account. Your email address, a password hash (we never store your password itself), your name and profile picture if you add them, your preferred language and default city. Your email must be confirmed with a one-time code before the account is active.

What you do in the Service. Occasions you save, reminders you set, cities and categories you follow, your notification preferences, occasions and organizations you submit (including the posters, images and videos you upload), reports you make about content, and your acceptance of our terms with the version and date.

Device information. If you enable notifications we store a push token, the platform (iOS, Android or web) and the app version for your device. A random device identifier helps us protect accounts and apply rate limits.

Location. If you allow it, your approximate or precise location is sent with a request to show nearby occasions and the map. We use it to answer that request and do not store it to build a location history.

Usage data (only with your consent). If you choose "Allow" on the usage-data prompt, we record events such as which screens and occasions are opened, tied to a random identifier and not to your email or name. You can turn this off at any time in Privacy; turning it off deletes the identifier from your device.

Technical data. Our servers record IP addresses, request times and error details to keep the Service secure, prevent abuse and fix problems. If error reporting is enabled, crash reports are sent to our error-tracking provider with personal details removed where possible.

Messages to us. When you use Contact us, we keep your name, email, message, the topic, the app version and platform, and our replies.

What is public

Published occasions are public, including the title, description, images, venue, organizer name and any organizer phone number, website or social links that the submitter entered. Occasions are shown under the organization's name or as "a user"; we never display the submitter's email address. Do not enter personal data of other people in a submission unless they agree to it being public.

Why we use your data

To provide the Service: sign-in, saving, reminders, notifications, submissions and moderation (performance of the contract).
To keep the Service safe: security, fraud and abuse prevention, rate limiting, enforcing our terms (legitimate interest).
To reply to you and provide support (legitimate interest and steps you requested).
To understand and improve how the Service is used, only if you allow usage data (consent).
To meet legal obligations and respond to lawful requests.

We do not sell personal data, do not use it for advertising profiles and do not make automated decisions that have legal effect on you.

We use service providers that process data on our behalf, under agreements that limit their use of it:

Email delivery (for verification codes, password codes, support replies and notifications).
Cloud hosting and database for the Service.
File storage for uploaded posters, images and videos.
Push notification services operated by Apple, Google and Expo, which receive your push token and the notification text.
Map tiles from a map provider, which receives your device's IP address and the map area requested.
Error tracking, if enabled.

We may disclose data when required by law, to protect people's safety, or to exercise or defend legal claims. If the Service is reorganized or transferred, data may move to the successor under this policy.

Transfers outside Jordan

Some providers store or process data outside Jordan. When that happens we rely on contractual safeguards and only share what the provider needs.

How long we keep data

Account data: until you delete your account. After deletion your personal details are removed immediately and remaining records are permanently deleted within 30 days.
Email verification and password-reset codes: a few minutes, then purged within 24 hours. Unverified accounts are removed after 7 days.
Usage events: up to 400 days.
Server logs: up to 90 days.
Contact messages and our replies: up to 24 months after the request is resolved.
Published occasions you submitted may remain, attributed to the organization or to "deleted user", unless you ask us to remove them.
Records we must keep for legal or security reasons are kept only as long as required.

Security

Passwords are stored with a strong one-way hash, connections use HTTPS, access to administration tools is limited by role and logged, and uploads are checked before they are shown. No system is perfectly secure; if a breach affects you we will tell you and the authorities as the law requires.

Your rights

You may ask to access, correct, delete or restrict the use of your data, to object to processing, to withdraw consent, and to receive a copy of your data. Most of this is available directly:

Export my data: Profile → Privacy → Download my data.
Delete my account and data: Profile → Delete account. See Account & data deletion.
Usage data: switch it off in Privacy at any time.
Anything else, or if you cannot sign in: start a verified privacy request or write to [email protected]. We reply within 30 days.

You may also complain to the competent data-protection authority in Jordan.

Cookies and similar technologies

The website uses only the cookies it needs to work: a short-lived sign-in cookie (`mj_at`), a longer sign-in cookie (`mj_rt`, up to 30 days; 7 days for staff), a security cookie against cross-site requests (`mj_csrf`, 30 days) and a language preference cookie (`NEXT_LOCALE`). These are essential and do not need consent. We do not use advertising or cross-site tracking cookies. If you allow usage data, the website stores a consent choice and a random identifier in your browser storage; you can change the choice any time from Cookie settings in the footer or from your profile. The mobile app stores a device identifier and your choices locally on your device.

Children

The Service is not directed to children under 13 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

Changes to this policy

When we make a material change we publish a new version with a new date, summarize what changed at the top, and ask you to review it in the app or on the website. Earlier versions remain available from us on request.

Contact

Munasabat Jo — [email protected] — Contact us. We usually reply within one to three business days.

العربية Back to top