Privacy Policy

Mahmoud Magdy, the sole operator of the OKAAB brand in the Arab Republic of Egypt, controls data relating to the OKAAB website, direct accounts, quote requests, and support.

For Mawid, the subscribing business is an independent controller of its customer, staff, and appointment data, while OKAAB processes that data to provide the platform. We may independently control business-account, security, billing, and support data.

• Identity, contact, and account data: name, email, phone, profile image, business, and role.
• Quote, project, support, correspondence, and file data you send us.
• Mawid data: branches, staff, customers, services, prices, appointments, deposits, and activity records.
• Usage and security data: request time, device, browser, network address, sign-in, error, and security logs.
• Sign-in data supplied through Google, Clerk, or Supabase according to the user's or provider's settings; we do not receive a Google password.

• We receive data from you, a business using Mawid, a sign-in provider, or automatically while operating the service.
• We use it to take pre-contract steps, perform contracts, create accounts, operate booking and courses, provide support, and send service messages.
• We use the minimum needed for security, fraud prevention, fault diagnosis, and reliability under legitimate interests that do not override your rights.
• We process data to meet legal obligations or protect rights and request consent for marketing or optional uses where law requires it.

We do not sell personal data. We share only what is needed with providers including Clerk and Supabase for authentication and data, Heroku for hosting, Resend for email, Google for sign-in, YouTube for content, and WhatsApp when you choose that channel.

We may disclose data to advisers or authorities under a valid legal obligation or where necessary to protect users, the service, or legal rights. Each party must follow its legal role and suitable access controls.

Providers may process data outside Egypt or your country. We assess providers and use appropriate contractual and technical controls where required, including approved contractual clauses where applicable. An international provider does not mean every destination offers identical legal protection.

• Account and Mawid data is kept while an account is active and then as needed for export, closure, disputes, and legal duties.
• Quote requests and correspondence are kept as needed for follow-up, transaction evidence, or legal claims.
• Security logs and backups are kept for limited periods based on security needs and backup cycles.
• When no longer needed, data is deleted, anonymised, or de-linked unless law requires retention.

Depending on applicable law, you may request information, access and a copy, correction, deletion, restriction, objection to certain processing, withdrawal of consent without retrospective effect, and portability where available.

We may verify identity and respond within the legal period. A request may be limited to protect others or meet a legal duty. You may complain to the competent data-protection authority in your country and retain your right to a judicial remedy.

We use transport encryption, access controls, tenant isolation, logging, backups, and monitoring. No electronic method is 100% secure. If an incident requires notice, we will contain it and notify the authority or affected people as required by law.

Mawid business accounts are for adults. If a business records a minor's booking data, that business must establish a lawful basis and guardian involvement where required. We do not use personal data for solely automated decisions producing legal effects, and do not sell it for behavioural advertising.

We use cookies or local storage needed for sign-in, security, language, and appearance. We currently do not use behavioural-advertising cookies. If non-essential tools are added, we will offer a consent choice where required.

Google, YouTube, and WhatsApp links may take you to services with independent policies that you should review.

We will update the date and version when this policy changes and provide notice or request renewed acceptance for a material change. Send privacy requests to support@okaab.org and describe the request and relevant service.