Ghuzar collects specific data so the service can work. This page explains what is collected, why, who sees it, and what rights you have over it.
Who is responsible for your data
The Ghuzar app (package id com.ghuzar.app) — a platform for documenting and trading pigeon breeds in Egypt.
For any enquiry or request about your data:
privacy@ghuzar.com1 · Account data
Name, username, email, phone number and governorate. The email and member number are used to sign in and to contact you. Your password is stored encrypted (bcrypt) and nobody can read it — not even us.
2 · Financial data
Wallet balance, transaction history and the withdrawal methods you add. Card details themselves are handled by the payment gateway (Paymob) — we receive only a reference to the transaction, never the card number.
3 · Photos and content
Bird photos, posts and products are stored on Cloudinary. Anything you publish publicly can be seen by other users according to your privacy settings.
Camera and photo library: the app asks for camera permission for two things only — taking a photo you add yourself, and scanning a bird's or document's QR code. We never capture or upload anything from the camera unless you choose it; QR images are decoded on your device and are not sent to any server. Choosing a photo from the library goes through the system picker — the app receives only the photo you selected, not access to the whole library.
4 · Messages and chat
Chat messages are stored on our servers so they reach the other party and stay available to both of you on any device. They are not end-to-end encrypted, so technically we can access them — and we do so in one case only: reviewing a report of abuse or fraud. We do not use message content for advertising and do not share it with any third party.
You can block any user at any time — blocking is mutual and stops messages completely.
5 · Notifications and device
We store your device token to send notifications via Firebase, and the time of your last sign-in. You can control every notification category from Settings, or turn them off entirely.
6 · Who sees your data
Your profile and the birds you display are visible to users according to your privacy settings — you can make the account private, hide any bird, and hide your bird count and loft.
Data is never sold or shared with advertising parties. The only third parties we use to run the service are: Supabase (database) · Cloudinary (images) · Paymob (payments) · Firebase (notifications) · Resend (email) · Sentry (error reports) · Google Play (in-app purchases).
7 · Security
One session per account — signing in on a new device signs the old one out. Accounts are temporarily locked after repeated failed sign-in attempts.
8 · Deleting your account
You can delete your account from inside the app: My profile → Settings → Delete account. Or request deletion without opening the app through this page:
Account deletion request page →Your personal data is anonymised (name, email, phone number and photos), but financial records and completed deals are kept because they also concern other parties (the buyer or seller in a completed deal) and for accounting reasons.
9 · Retention
- Account data: for as long as the account exists. Anonymised immediately after deletion.
- Financial records and deals: kept after account deletion (anonymised) because they are part of a transaction with another user.
- Session and device tokens: revoked on sign-out or deletion.
- Error reports: stored at Sentry for a limited period, without personally identifying data.
10 · Your rights
At any time you can:
- View and edit your data inside the app
- Control who sees your profile and birds
- Turn off any notification category
- Delete your account
- Request a copy of your data or ask anything — at privacy@ghuzar.com
11 · Children
Ghuzar is intended for breeders and hobbyists and is not directed to children under 13; we do not knowingly collect data from them. If we learn that an account belongs to a child under that age, we delete it.
12 · In-app purchases
Digital goods (subscription · themes · verification badge · evaluation fee · bird-file fee · competition entry fees) are bought through the Google Play store. Payment happens entirely at Google — we never see or store any payment data.
What we receive from Google is the purchase receipt only (product id, order number and status), which we keep to grant you what you paid for and to prevent granting the same receipt twice. These receipts are a financial record and are kept after account deletion like other financial records.
13 · The website
The public website (ghuzar.com) does not require an account. Its pages are served from our hosting provider and read public content from the same service as the app. The contact form sends your name, email and message to our support mailbox so we can reply — nothing else is collected. See the cookie policy for what the website stores in your browser.
14 · Changes to this policy
If we change something material in this policy, we will update the effective date above and notify users inside the app.