Sabbah — Privacy Policy
Effective date: July 2, 2026 Last updated: July 2, 2026
Who we are
Sabbah (“we”, “us”, “our”) publishes the Sabbah app — an Arabic-language community hub for Saudi specialty coffee, where users browse roasteries, like beans, vote on the best brewing methods, and read and post brew recipes. Reach our privacy team at privacy@sabbah.app.
What we collect
We collect only the minimum needed to run the community.
Account data (when you create an account)
- Email address — to authenticate via Supabase Auth (email + password with a one-time verification code).
- A Supabase-issued user UUID — links your contributions to your account.
Profile data (set by you)
- Username, display name, country, and city — provided at sign-up.
- Optional bio and avatar image — if you choose to add them.
- Your profile is public. You can hide your city and join date from other users in Settings → privacy toggles.
Community data (when you contribute)
- Recipes you post — title, brewing method, parameters (dose, water, ratio, temperature, time, grind, grinder, ice for cold brews), steps, notes. Public.
- Bean likes and “best for brewing” votes — recorded to rank community favorites. Other users see aggregate counts only, not your individual like or vote.
- Likes you give to recipes — recorded to rank popular recipes. Aggregate counts are public.
- Users you follow — follower and following lists are visible on public profiles.
- Reports and blocks you submit — only visible to our moderation team; the user you report or block is not notified.
Diagnostics
- Crash reports — if the app crashes, technical diagnostic data (stack trace, device model, OS version) is sent to Sentry so we can fix the bug. Crash data is not linked to your identity and is never used for tracking or advertising.
What we do NOT collect
- No tracking across other apps or websites.
- No selling or sharing of your data with advertisers.
- No advertising or analytics SDKs (no Facebook SDK, no Google Analytics). Sentry is used for crash reporting only.
- No access to your camera, microphone, contacts, or location. Your photo library is accessed only when you choose an avatar image, and only with your permission.
How your data is used
| Purpose | What we do |
|---|---|
| Authenticating you | Email + Supabase JWT verification |
| Showing the community | Display roasteries, beans, recipes, likes, and poll results to all users |
| Showing your profile | List your posted recipes; show your username/avatar to other users |
| Moderation | Review reports and remove content that violates our rules |
| Fixing bugs | Diagnose crashes from anonymous crash reports |
Third-party data processors
| Processor | What they handle | Their policy |
|---|---|---|
| Apple | App distribution | apple.com/legal/privacy |
| Supabase | Authentication, user database, image storage | supabase.com/privacy |
| Railway | API server hosting | railway.com/legal/privacy |
| Sentry | Crash reporting | sentry.io/privacy |
User-generated content & reporting
Sabbah is a community app — recipes, profiles, and usernames are posted by users. We provide:
- Report affordance on every recipe and every user profile.
- Block affordance on every user profile — blocked users’ content is hidden from you.
- Account deletion in Settings → “حذف الحساب”.
- A zero-tolerance policy for objectionable content (harassment, hate speech, spam, sexual content, illegal activity). We review reports daily and remove violating content; repeat offenders are banned.
Your rights
- See your data: Settings → Account; your email and posted recipes.
- Delete your data: Settings → “حذف الحساب”. One tap; immediate. Your recipes survive as “مستخدم محذوف” so the community archive isn’t broken, but they are no longer attributed to you. Your likes, votes, and follows are deleted with the account.
- Export your data: Email privacy@sabbah.app; JSON within 30 days.
Data retention
- Active accounts: data is retained as long as the account exists.
- Deleted accounts: account record removed immediately; orphaned content (recipes you posted) is anonymized.
- Reports: retained 12 months for trend analysis, then deleted.
Children’s privacy
Sabbah is not directed at children under 13. We do not knowingly collect data from children under 13.
Changes
We will update the “Last updated” date and, for material changes, notify you in the app. Continued use after a material change is acceptance.