| Category | Examples |
|---|---|
| Account | Email, name, phone number, hashed password (we never store your password itself) |
| Profile & intake | Preferred language/country/sector, work history, education, certifications, languages spoken, and yes/no answers about passport, visa, legal residency, and family or host contacts abroad — collected to power matching, not to gatekeep |
| Concierge conversations | Every message you send the concierge and every reply it gives, plus which job listings it was shown for that reply |
| Subscription & payment status | Whether you're subscribed, your tier, and renewal dates — payment card details are handled entirely by PayPal; we never see or store your card or bank account numbers |
| Usage | How many concierge messages you've sent today (for fair-use limits) and, for new accounts, how many free preview replies you've used |
We don't sell your personal information. It's shared only with the service providers that make Yalla Nsafer work, each acting on our instructions:
Because these providers and our own infrastructure may process data outside your country of residence (including in Canada and the United States), your information may cross borders in the course of providing the service.
While your account is active, we keep your profile and conversation history to keep the concierge useful. If your subscription lapses or you cancel, we keep your profile and intake data for 30 days — enough time to come back without starting over — after which we permanently delete it (your work history, documents, and conversation-derived answers). Your account and login are kept so you can always sign back in; if you'd like your account itself closed, contact us (below).
Uploaded documents (when that feature is enabled) carry their own, shorter retention window and are deleted automatically once it passes.
You can ask us, at any time, to access, correct, or delete your personal information, or to tell you exactly what we hold about you. Quebec residents additionally have rights under Law 25, including the right to file a complaint with the Commission d'accès à l'information if you believe we've handled your information improperly. Contact us first — most requests can be resolved directly.
Passwords are hashed (never stored in plain text), traffic to and from the site is encrypted, and our database is accessed only through server-side credentials — never exposed to the browser.
Yalla Nsafer is for people 18 and older. We do not knowingly collect information from anyone younger.
We may update this policy as the service evolves; a material change will be reflected in a new version date at the top of this page.
Privacy questions or requests: info@yallansafir.com (placeholder — replace with the real privacy contact before launch).