Privacy Notice

Version: 2026-10-15-review-4 · Effective date: October 15, 2026

A consolidated convenience copy of the current published documents. Each document retains its own version and effective date. The versioned legal pages and archive remain authoritative.

On this page

Operator and contact

Soteria is currently operated by Daniel Ashraf Ekdawi, an individual based in Cairo, Egypt. Legal/contact address: 1 Amin Al Shamsi Basha Street, Hegaz Square, Heliopolis, Cairo, Egypt. Privacy/legal contact: [email protected]. No incorporated or registered business status is asserted. This notice explains processing; reading it or accepting Terms is not consent to every processing purpose. Arabic is the primary maintained legal text, with equivalent English support. The current privacy/data-protection contact is Daniel Ashraf Ekdawi at [email protected]; this does not assert registered or accredited Data Protection Officer status.

Information in the service

Accounts hold login identifiers, password hashes, security settings, sessions and recovery records. Persons have stable identities with separate global, Organization and Group profiles. Profiles can include names, contact details, optional birth dates, addresses, locations, relationships, photos and custom fields. Organizations may record memberships, roles, attendance, events, activities, challenges, points, announcements and reservation answers or uploads. These records can reveal religious participation and other sensitive information; collect only what is necessary and lawfully authorized.

Sources and recipients

We receive information from Account holders, Organization users, guardians, invited participants, reservation guests, support correspondents and reviewed imports. A Person’s record may therefore have been created by an Organization rather than by that Person. Authorized Organization/Group users see data permitted by their scope and feature rules; notification recipients receive the information addressed to them. Necessary operational access is available to the operator and service providers. Public images, authorized exports and downloaded/offline copies can leave the original access boundary. We may disclose information where lawfully required or necessary to address a substantiated security or legal claim, subject to applicable safeguards.

Why information is processed

We process information to operate accounts, apply scoped permissions, coordinate community work, deliver requested notifications and email, protect the service, support users and maintain recovery copies. We retain security/audit records, support correspondence and package/subscription history. Manual reservation payment evidence may exist; platform subscription payment processing is not currently enabled. Optional AI import analysis sends selected uploaded information to the configured AI service/provider for a draft that requires review. Avoid unnecessary sensitive data in imports.

Purposes and applicable legal grounds

Account administration and requested platform functions may rely on steps to enter or perform the applicable service contract. Organizations must determine and document the lawful grounds for their own community-data purposes. Specific consent is required where applicable, including Soteria’s under-18 guardian rule and any optional marketing choice. Security, fraud prevention, necessary records and legal requests must have an applicable legal justification; a business interest is not assumed to be a standalone legal basis in every jurisdiction. Sensitive religious/child data and international transfers may require additional safeguards, permits or other legal conditions. Generic Terms acceptance or this notice does not replace them. We do not claim that all regulatory prerequisites have been completed.

Organizations, children and sharing

Organizations determine the information collected for their activities and who may access it. They must provide appropriate notices, establish lawful authority and obtain any required guardian consent for consent-dependent processing of data of a Person under 18. Consent must be specific, explicit, recorded, versioned, withdrawable and auditable. A managed Person may have no Account: creating or editing that record never accepts Terms or grants consent. Managed-profile operations do not require an in-app guardian-consent step; the Organization remains responsible for its lawful processing and guardian authorization. Account registration and activation are separate checkpoints. Optional scoped DOB is not universal age verification; unknown age is not an adult determination. Existing data and consent history are not automatically consented or deleted. Technical availability does not authorize unlawful processing.

Cookies and device storage

Soteria uses authentication/session cookies, locale preferences and local/offline storage for application operation. Push delivery uses device subscriptions when enabled. Maps/location features contact Google when used. This notice does not authorize optional marketing or unrelated tracking.

Providers and international processing

Current hosting, storage, backup and mail providers, and feature-conditional maps/AI services, are described on the Subprocessors / International Data Transfers page. Hosting, email, backups or selected features may involve providers outside Egypt. Confirmed configured regions and unresolved locations are stated separately. Better Stack monitoring is disclosed separately because the application strips user/request content; provider network metadata and contractual treatment still need verification. Disclosure, generic Terms acceptance and guardian consent do not themselves obtain any required cross-border permit/licence or complete provider safeguards. Those regulatory and contractual requirements must be resolved separately before the relevant processing. Any required PDPC licence/permit, lawful transfer basis, provider DPA, safeguards and destination verification must be addressed separately; no completed approval or contract is asserted.

Retention criteria

Active Account, Person, Profile and Organization information is retained while reasonably needed to provide the applicable service or fulfill the Organization’s legitimate data-management purpose, subject to a lawful basis. Closed/deleted operational data should be deleted or anonymized when no longer reasonably needed, subject to recovery, security/fraud prevention, legal claims, obligations and backups. Legal acceptance and consent history is preserved as reasonably necessary to demonstrate compliance and resolve disputes; withdrawal does not erase evidence of an earlier grant. Security/audit records are retained only as reasonably necessary for protection, investigation and compliance. Email usage accounting retains minimal delivery/accounting metadata, not message content merely for metering. Future financial records will require reconciliation, dispute and applicable accounting/tax retention. There is no implemented product-wide deletion/anonymization timetable: category review, legal holds and request handling still require operational decisions. Private recovery/history storage exists exceptionally to reconcile identity/profile/media conflicts and restore data; it needs periodic necessity review and deletion when recovery and other justified retention no longer apply. It is not ordinary active-profile storage.

Implemented retention and recovery limits

Local backup archives default to a 30-day cleanup threshold, configurable by operations. Encrypted off-site database backup selection keeps 14 daily, 8 weekly and 12 monthly snapshots. Encrypted R2 object mirrors preserve the current copy and move changed/deleted objects into dated history, with a 365-day history cleanup threshold. These cleanup/selection rules run with successful backup operations; they are not promises of erasure on an exact day. No immediate deletion from existing rotating/immutable recovery copies is promised. Restore procedures must account for approved deletion requests before returning restored data to ordinary use. Security maintenance prunes expired/consumed challenges and rate limits; inactive sessions are eligible after 30 days. Mailbox pruning makes sent-only threads eligible after 180 days and archived threads after 365 days, excluding unresolved deliveries. Offline device storage and authorized exports/downloads may survive server deletion; device clearing and recipient cooperation may be necessary. Other category-specific fixed periods are not yet approved.

Rights, withdrawal and complaints

You have rights to be informed about processing, access your data, rectify inaccuracies, and, where applicable, request erasure, restriction, objection and data portability. You may withdraw consent and complain to the Egyptian Personal Data Protection Center (PDPC), without prejudice to judicial remedies or other applicable complaint rights. Contact Daniel Ashraf Ekdawi at [email protected] or the address above. For requests under Egyptian personal-data protection law, we respond within six working days from submission; other applicable mandatory jurisdictional periods remain binding. We may verify identity proportionately and coordinate Organization-controlled data with its authorized contact without displacing mandatory deadlines. Identify the relevant Person/Account, Organization and request using safe references; do not send passwords, recovery codes or identity scans without an agreed protected channel. Withdrawal ends authorization for future consent-dependent processing within its scope, without erasing prior lawful processing or necessary historical evidence.

Security and changes

We apply scoped access controls, Account security and private-file authorization, but no system guarantees absolute security. Public photos or shared files may have been copied by others. Legal documents have immutable published versions. Material contractual changes require the relevant fresh acceptance; editing a notice does not silently create consent. We investigate and contain personal-data incidents and make legally required regulator and data-subject notifications within applicable mandatory deadlines.