Privacy Policy

1. Scope and controller

This policy applies to ichhar.biz, pages on app.ichhar.biz, and the Ichhar applications for Android and iOS. Ichhar determines the purposes and means of the processing described below and acts as the data controller, except where a third-party service processes data for its own purposes.

Ichhar is a service published from Nouakchott, Mauritania. The publisher's full legal identity and any registration details must be confirmed before final publication.

2. Data we process

The data actually processed depends on the features you use and the permissions you grant.

Account and authentication: email address, first and last name, display name, phone number, profile picture, language, verification status and a password protected with a one-way hash.
Social sign-in: provider (Google, Apple or Meta where available), provider identifier, authorised profile information and any necessary technical token.
Directory and listings: title, description, categories, prices, hours, website, phone, email, WhatsApp, address, city, geographic coordinates, photos, videos and listing-claim information.
User content: listings, reviews, ratings, replies, photos, optional audio, reports, support messages and feedback sent to the team.
Device and notifications: Expo push token, platform, chosen city, alert preferences, last activity and interaction with a notification.
Usage and security: a stable pseudonymous identifier, viewed screens, searches, call/WhatsApp/directions/share clicks, language, IP address, request identifier, technical logs and audit records.
Third-party data: public or licensed business information, social sign-in data, news sources and mapping or place information.

3. Purposes and legal grounds

Depending on the context and applicable law, processing is based on providing the service you request, your consent, our legitimate interests in securing and improving Ichhar, or a legal obligation.

Create and secure accounts, authenticate users and provide requested features.
Publish, search, organise, correct, claim and moderate listings and user content.
Personalise language, city, weather, prayer times and selected alerts.
Measure usage, fix errors, prevent fraud, protect the service and improve its usefulness.
Answer requests, establish or defend legal claims and comply with competent authorities.

4. Location

With your permission, Ichhar may read the device's foreground location to identify the nearest city and show local information. Ichhar does not continuously track you in the background. In the current weather flow, comparison with available cities happens on the device; the selected or inferred city may then be used for weather and alerts.

Coordinates published in a business listing or classified ad are separate from device location and may be publicly visible. You may withdraw location permission in the operating-system settings.

5. Notifications

If you opt in, Ichhar stores a notification token, platform, city and preferences to send selected alerts such as rain, news or reminders. Expo and Apple or Google notification services technically deliver these messages.

You can change preferences in Ichhar, disable permission in system settings or sign out. Prayer reminders may also be scheduled locally on the device.

6. Microphone, speech recognition and media

Microphone and speech recognition access is requested only after permission, for example for voice search or audio content. Depending on your system, recognition may be processed by Apple, Google or a service configured on your device. Ichhar must not activate the microphone in the background.

Photos, videos or audio files you choose to publish are uploaded to Ichhar's infrastructure and may become public with the related content.

7. Public data and content

Listings, professional contact details, ads, reviews, ratings, display names and published media are intended to be seen by other users and may be indexed by search engines. Do not publish sensitive data or another person's data without a lawful basis and their permission.

Some listings come from public or third-party sources. A business may request a justified correction, claim or removal by contacting Ichhar.

9. Hosting and international transfers

Core infrastructure may be hosted in France and some providers may process data in other countries. Where applicable law requires it, Ichhar uses the necessary filings, contractual safeguards or authorisations and limits transferred data.

The final list of enabled providers and any formalities with Mauritania's data protection authority must be confirmed before final publication.

10. Retention

We keep data only as long as needed for the stated purposes, then delete or anonymise it, subject to legal duties, disputes, abuse prevention and temporary backups.

Account and content: while the account is used, then for the time needed to process deletion and any legal exceptions.
Verification and reset tokens: until use or expiry.
Notification tokens: until withdrawal, sign-out, technical invalidation or account-related deletion.
Support messages, technical, security and audit logs: for a limited operational period, extended where an incident or duty requires it.
Backups: until overwritten in the backup cycle; deleted data must not be restored to the active service.

11. Security

Ichhar applies reasonable measures including HTTPS, access controls, hashed passwords, rate limits, sensitive-action logging, backups and security updates. No system can be guaranteed risk-free.

Protect your credentials and promptly tell us about unauthorised access or suspicious content.

12. Your rights

Subject to applicable law, you may request access, correction, updating, restriction, objection, portability where applicable, withdrawal of consent and deletion. You may also challenge a decision or complain to Mauritania's Data Protection Authority.

Send the request from the account email and clearly state the right you wish to exercise.
We may request proportionate identity verification before disclosing or deleting data.
Withdrawing consent does not affect processing lawfully carried out beforehand.

13. Account deactivation and deletion

The currently available technical deactivation blocks sign-in but is not, by itself, data deletion. To request deletion of your account and associated data, use the email link below from the account address, use the subject “Ichhar account deletion”, and include the account email.

After verification, we will delete or anonymise personal data and associated content unless retention is required for law, evidence, safety or a dispute. A business listing sourced independently may remain as a non-account directory record after personal account data is detached, subject to applicable correction or objection rights. Backup copies age out through their replacement cycle.

Request deletion of my account

14. Children

Ichhar is not specifically directed at children. Anyone without the required age or legal capacity must use the service with the permission and supervision of a legal representative. If you believe a child provided data without valid permission, contact us for review and deletion.

15. Local storage and similar technologies

The apps use secure local storage or AsyncStorage for sessions, preferences, language, city, notifications and the pseudonymous analytics identifier. The initial public static website does not install third-party analytics or cookies. If that changes, this policy and appropriate choices will be updated before activation.

16. Changes to this policy

We may update this policy to reflect the service, providers or applicable law. The date at the top will change and a more prominent notice will be provided for material changes. The latest version remains publicly available without sign-in.