Privacy Notice

Version: 2026-10-29-privacy-2 · Effective date: October 29, 2026

A consolidated convenience copy of the current published documents. Each document retains its own version and effective date. The versioned legal pages and archive remain authoritative.

On this page

Who is responsible and how to contact us

Soteria is operated by Daniel Ashraf Ekdawi, an individual based in Cairo, Egypt. Legal/contact address: 1 Amin Al Shamsi Basha Street, Hegaz Square, Heliopolis, Cairo, Egypt. Contact Daniel about personal data and privacy rights at [email protected]. General support: [email protected]; telephone: +20 120 769 6771. This identifies the operator and privacy contact, without claiming incorporation, registered or accredited Data Protection Officer status, or regulatory approval. This notice explains personal-data processing for visitors, Account holders, managed Persons, Organization participants, guardians, reservation guests and people contacting us. Reading it, creating a record or accepting Terms is not blanket consent. Arabic is the primary maintained text and an equivalent English version is provided.

Soteria and your Organization

Soteria determines the purposes of its Account administration, service security, support and contractual records. An Organization determines its community activities, the information collected for them, and the users permitted to access its scoped records. For that Organization-directed processing, Soteria provides the platform on its documented instructions, subject to applicable law and the Organization Data Processing Agreement. The relevant role depends on the actual processing, not only its label. A Person may have no Account and may have separate global, Organization and Group profiles. Organization access does not make all profiles public or give every administrator access to every record. Ask the relevant Organization about its purposes, notices and authorized contacts. You may also contact Soteria directly; coordination with an Organization does not remove our own duties or applicable response deadlines.

Information we process

Account data includes login identifiers, contact information, password hashes, security settings, session/device records, recovery information and security/audit history. Profiles may include names, optional birth dates, contact details, addresses, locations, photos, relationships and custom fields. Organizations may keep membership and roles, attendance, event and assignment participation, check-in records, points, shop activity, communications, reservation answers and uploads. Religious participation and children's records can be sensitive personal data. Inquiries and support correspondence include the details and message you supply, such as your name, email, optional telephone, church/service name and approximate community size. Billing records can contain payer contact details, package/order information, amounts, payment status and provider references. Network and technical information can include connection metadata, request/security events and device or browser information needed by the service and its providers. We do not ask you to email passwords, recovery codes or full payment-card details.

Where information comes from

Information comes from you, Organization administrators and authorized users, guardians, invitations, reservation submissions, support correspondence and reviewed imports. Payment and email providers can return delivery or transaction status and references. Devices provide information used for selected functions, such as a push subscription or a location you choose to share. A record may therefore have been created by an Organization before the person has an Account or contacts Soteria. Organizations collecting information indirectly must provide the appropriate notice to affected people and establish lawful authority. A public notice alone does not prove that every person in an import has been informed or consented. Ask the responsible Organization or [email protected] if you want to understand the source of your record.

Purposes, legal grounds and required information

We use Account and contact information to register and administer requested services, answer inquiries, provide support and manage the applicable agreement. These purposes rely on the applicable steps to enter into or perform a contract where that ground is available. Service security, fraud prevention, audit and necessary records must have the applicable legal justification, including a legal obligation or another lawful ground recognized in the relevant jurisdiction. A commercial interest is not assumed to authorize every processing activity. An Organization must determine and document the grounds for its community purposes. Where consent is required, it must be specific and valid; sensitive-data processing, children's data and international transfers have additional conditions. Consent is not inferred from a general Terms checkbox. Optional marketing needs its own choice; an inquiry or a transactional message is not a marketing subscription. Some information is necessary for a function: for example, login identifiers for an Account, an email address for a reply, or payer details for hosted checkout. Without it, that function may not be available. Optional profile fields and feature permissions are not all required to use every part of Soteria. Avoid submitting unnecessary sensitive information.

Sensitive information and children

Egyptian law treats religious information and children's personal data as sensitive. Required PDPC licensing or authorization and explicit written consent, including guardian consent for children where required by law, must be established for the relevant processing. Our product rule requires guardian consent for consent-dependent processing of data of a Person under 18; this is not a determination of contractual capacity. An Organization must verify the actual guardian and purpose. Membership, a relationship label, a managed record or an administrator's action does not grant consent. Authorized editors can explicitly record verified written offline evidence for an existing child through the dedicated evidence API. That is different from direct guardian Account acceptance. Ordinary managed-profile operations do not enforce a guardian checkpoint. Known-minor managed-invitation activation is held, but ordinary public signup has no universal age verification and verified guardian self-service onboarding is not implemented. Unknown age is unresolved. These limitations do not authorize otherwise unlawful processing. The responsible parties must obtain the necessary authority and act on withdrawal for affected consent-dependent processing. Existing records are not automatically consented or deleted. The Guardian / Child Data Privacy & Consent Notice gives further details; Soteria retains its own statutory responsibilities.

Who receives information

Authorized users receive information according to Organization/Group scope, role and feature permissions. Messages and notifications disclose their content to selected recipients. The operator and necessary service personnel may access information to operate, support and secure the service. Hosting, storage, backup, email and feature-specific providers process information needed for their services. Public images, public links you authorize, exports, downloads and offline copies can extend beyond the original application access boundary. Review what is shared and who receives it. We may disclose information when lawfully required or necessary for an applicable security or legal claim, with the required safeguards. We do not treat this notice as permission to sell your community records or use them for unrelated advertising.

Payments and hosted checkout

Soteria has a Paymob hosted-checkout integration. The production configuration verified for this notice uses test-mode credentials; test checkout is restricted to Super Admin and is not live customer collection. When checkout is used, including integration tests, Soteria sends payer name, email, phone, order reference, currency and amount to Paymob and receives transaction status and references for verification and records. Avoid unnecessary real personal information in tests. Payment details entered on Paymob's hosted page are handled by Paymob. Soteria's checkout integration does not collect or store the full card number or card security code. Paymob may also process network, device, fraud-prevention and legally required information under its own applicable terms and privacy notice; it is not necessarily acting only on Soteria's instructions for every purpose. Organizer-owned reservation payments are a separate domain and may involve the organizer's selected provider or manual payment evidence. No live approval, recurring authorization or exclusive Egypt storage is implied by the integration.

Maps, AI, push and automated rules

Maps, Places and geocoding use Google Maps Platform when the relevant features load or are used. Google can receive location/search queries and network/browser information. Browser permission for device location is separate from entering an address or viewing a map. AI-assisted imports send selected uploaded information and prompts through Soteria's AI service to OpenAI to produce a draft for human review. Provider retention and account controls apply: do not assume zero retention or immediate deletion. Only submit information you are authorized to share, minimize sensitive data, and check the draft before saving it. If you enable browser push, the service stores the device subscription and uses your browser's push infrastructure to deliver notifications. Push can reveal content on a device or lock screen; you can change browser permissions. Organizations may configure audience filters, reminders, scoring and other automated rules using community records. Such results depend on their configuration; ask the responsible Organization to explain or review a result that affects you. This notice does not authorize legally significant decisions about a person without the required safeguards.

Cookies and copies on your device

Soteria uses cookies for authentication/session handling, security and language preferences, and browser storage for application operation. IndexedDB and caches can hold authorized data, media and drafts for offline use and later synchronization. Local copies are still personal information; use an appropriate device and protect access to it. Offline copies may not immediately learn about a server-side change or revoked access until the device reconnects. Blocking necessary cookies or storage may prevent login, preferences or offline functions from working. You can use browser controls to remove site data or change location and notification permissions, but removal can discard unsynchronized work. Server deletion does not guarantee immediate removal of authorized exports, screenshots, public copies or information on other people's devices. This notice does not grant permission for unrelated tracking or optional marketing. First-party cookies and storage currently used: soteria_session — authentication cookie, up to 24 hours; server expiry/revocation is separate and logout clears the cookie. soteria_mfa_challenge — temporary MFA challenge, five minutes. soteria-locale — language preference, one year; later responses may renew it. soteria_email_cooldown_* — invitation/reset-email cooldown, 60 seconds; the name varies by action and subject. Local storage remembers sidebar state (soteria-sidebar-collapsed), dismissed push prompts (soteria-push-welcome-dismissed), recent search references (soteria:global-search:recent:v2:*) and workspace/feature selections (including soteria-feature-selection-v1:*). These have no general fixed automatic expiry; they can remain until overwritten, feature cleanup, browser eviction or site-data clearing. A dismissed prompt is not notification permission. Session storage holds saying rotation/history (soteria-spiritual-content-category and soteria-spiritual-content-recent:*) and release-reload coordination for the browser tab/session. IndexedDB soteria-offline holds authorized cached records/media, drafts and pending work. Cache Storage soteria-shell-* and soteria-application-shell-* holds offline/application shell assets; worker version cleanup and browser controls apply. Offline records do not have a product-wide fixed deletion deadline. Removing site data can discard unsynchronized work. This describes our first-party storage, not every cookie or network identifier used by a separately used provider such as hosted checkout or maps. Provider-specific processing follows the feature and provider disclosures. Introducing unrelated analytics or marketing tracking requires its own prior legal assessment and valid permission where required; this notice does not authorize it.

Providers, countries and international transfers

The repository-confirmed services include Hetzner for application/database hosting; Cloudflare for R2 files and DNS; Backblaze B2 for encrypted recovery copies; AWS SES for transactional email; Zoho Mail for support/mailbox processing; Better Stack for monitoring; and Google Maps Platform, OpenAI and Paymob when their features are used. Browser push also uses the infrastructure chosen by the device/browser. This identifies processing recipients without claiming that every provider has the same contractual role. Configured AWS email delivery uses eu-central-1, the Frankfurt region in Germany. Zoho's configured .com service corresponds to its United States data-center domain under its published guidance, but this does not establish every processing/support location. Exact Hetzner server location, R2 bucket placement, backup destination and other provider processing countries have not all been independently verified. A standard R2 endpoint, an Egypt payment integration or a provider's general location statement does not prove exclusive residency. The Subprocessors / International Data Transfers page contains the separate published provider supplement. Paymob and browser-push processing are additionally described in this notice. Information can be processed outside Egypt. Required transfer permissions, lawful transfer grounds, contracts and safeguards must be established separately; neither this disclosure, generic Terms acceptance, encryption nor guardian consent alone completes them. No specific transfer permit, signed agreement or completed country assessment is asserted where it has not been verified. Contact [email protected] about the relevant destination and safeguards before sensitive processing.

How long information is kept

Information is retained for the relevant service and lawful purpose, including necessary security, support, contractual, financial, legal-claim and compliance records. Organizations must review their own records and instructions. Account closure, leaving an Organization, cancellation and deletion are separate actions. Legal acceptance and consent evidence is preserved where necessary to demonstrate what was agreed or authorized; withdrawal does not erase the earlier evidence. There is no implemented product-wide fixed deletion/anonymization timetable. Category-specific necessity review, legal holds and handling of deletion requests require operational decisions. Dormant scoped profiles and private identity/profile/media recovery history are not automatically erased when a membership or active profile changes. They must not be kept without a continuing lawful reason. Email metering keeps delivery/accounting metadata rather than retaining message content merely for usage measurement. Provider-side retention and copies held by authorized recipients are separate from Soteria's cleanup rules.

Implemented cleanup and backup rules

Local backup archives default to a configurable 30-day cleanup threshold. Encrypted off-site database backup selection retains 14 daily, 8 weekly and 12 monthly snapshots. R2 recovery mirrors retain current files and dated changed/deleted-object history, with a 365-day history cleanup threshold. These are configured rules that depend on successful backup/cleanup operations, not proof that a particular record was erased on an exact day. Recovery copies are not all immediately editable. Approved deletion requests must be accounted for before restored data returns to ordinary use. Security maintenance prunes expired or consumed challenges and expired rate limits; expired or revoked sessions become eligible after the configured 30-day inactivity retention. Mailbox cleanup makes sent-only threads eligible after 180 days and archived threads after 365 days, excluding unresolved deliveries. These periods do not define the retention of every audit event, support record, invoice or provider copy. We do not promise immediate deletion from backups or devices, and do not claim that all other category periods have been approved.

Your rights and how to request them

Depending on the applicable law and circumstances, you have rights to information, access, correction, erasure, restriction, objection and portability, and to withdraw a specific consent. Contact Daniel Ashraf Ekdawi at [email protected] or the address above. State the relevant Account/Person, Organization and request using safe references; a Person does not need an Account to contact us. Do not send passwords, recovery codes or identity scans without an agreed protected channel. We may verify identity and authority proportionately, protect other people's rights and coordinate Organization-controlled information with its authorized contact. For Egyptian personal-data rights requests, we respond within six working days from submission; identity checks and internal coordination must not silently restart that deadline. Other applicable mandatory periods remain binding. A reasoned restriction or refusal must have an applicable legal basis; removing active information may not remove justified evidence or existing recovery copies immediately. Withdrawal ends authorization for future consent-dependent processing within the relevant scope, without retrospectively invalidating lawful past processing. It is different from deleting your Account or cancelling a subscription. You can complain to the Egyptian Personal Data Protection Center (PDPC) and pursue available judicial or other mandatory remedies without first obtaining our permission. No registration in Soteria or acceptance of new Terms is required merely to raise a privacy request.

Security, monitoring and changes

We use scoped access controls, Account security and authorization for private files. Monitoring strips user/request/context/breadcrumb information and redacts runtime message and exception values before sending application error events; remaining technical metadata and provider network processing are not guaranteed anonymous. Providers and authorized recipients have their own relevant security responsibilities. No system guarantees absolute security. We investigate and contain personal-data incidents and make regulator and affected-person notifications when and within the periods required by applicable law, coordinating with the responsible Organization as appropriate. Report a suspected privacy or security incident to [email protected] using safe details. This notice has a version and effective date; previous published versions remain accessible. We update disclosures when the processing changes. A notice update does not itself create consent, authorize a new purpose or replace a required contract, licence or transfer safeguard. A new consent must be obtained where the changed purpose requires it.