Privacy Policy
Last Updated: February 9, 2026
1. Introduction
Welcome to Kawthar ("the Platform"), operated by Kawthar LLC ("we," "us," or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, store, and share information when you use our platform, including our Events, Marketplace, and Groups services. By using Kawthar, you agree to the practices described in this policy.
2. Information We Collect
We collect information in the following ways:
2.1 Information You Provide
- Account Information: Name, email address, date of birth, and password when you create an account. If you sign up with Google, we receive your name, email, and profile photo from Google.
- Invitation Code: The invitation code used during signup, which links your account to the person who invited you.
- Profile Information: Any additional information you add to your profile, such as a bio, avatar, or saved addresses.
- Marketplace Data: Product listings, order history, shipping addresses, and payment information (processed by Stripe — we do not store your full card number).
- Event Interactions: Events you bookmark, RSVP to, or view.
- Group Activity: Groups you join, discussions you participate in, and meetups you attend.
2.2 Information Collected Automatically
- Usage Data: Pages visited, features used, search queries, and interaction patterns.
- Device Information: Browser type, operating system, device type, and screen resolution.
- Log Data: IP address, access times, and referring URLs.
3. How We Use Your Information
We use the collected data to:
- Create and manage your account, including verifying your identity and invitation code.
- Provide, maintain, and improve the Platform and its services.
- Facilitate marketplace transactions, including payments, shipping, and order tracking.
- Show you relevant events, groups, and products based on your location and interests.
- Communicate with you about your account, orders, and platform updates.
- Enforce our Terms of Service and protect against fraud, abuse, and unauthorized access.
- Analyze usage patterns to improve the Platform experience.
4. Data Sharing and Third Parties
We share your information only in the following circumstances:
- Stripe: Payment processing for marketplace transactions. Stripe receives your payment information directly and is governed by Stripe's Privacy Policy.
- Google: If you sign in with Google OAuth, Google may receive information about your authentication request, governed by Google's Privacy Policy.
- Shipping Providers: Shipping addresses are shared with carriers to fulfill marketplace orders.
- Marketplace Vendors: When you purchase from a vendor, they receive your name and shipping address to fulfill your order.
- Legal Requirements: We may disclose your information if required by law, court order, or governmental request.
We do not sell your personal data to third-party advertisers, data brokers, or marketing companies.
5. Cookies and Local Storage
We use cookies and browser local storage for:
- Authentication: To keep you signed in and manage your session securely.
- Preferences: To remember your settings and display preferences.
- Temporary Data: Such as invite codes during the signup process (cleared after use).
We do not use third-party tracking cookies or advertising cookies.
6. Data Security
We implement industry-standard security measures to protect your data, including:
- Encryption of data in transit (TLS/SSL) and at rest.
- Row-level security (RLS) policies to ensure users can only access their own data.
- Secure authentication through Supabase Auth with bcrypt password hashing.
- Regular security audits and access controls.
While we strive to protect your personal information, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security.
7. Data Retention
We retain your personal information for as long as your account is active or as needed to provide you services. If you request account deletion, we will delete your personal data within 30 days, except where we are required to retain it for legal, tax, or compliance purposes. Anonymized or aggregated data that cannot identify you may be retained indefinitely for analytics purposes.
8. Your Rights
You have the right to:
- Access: Request a copy of the personal information we hold about you.
- Correction: Update or correct inaccurate information in your profile.
- Deletion: Request deletion of your account and personal data.
- Portability: Request your data in a machine-readable format.
- Opt-Out: Opt out of non-essential communications at any time.
You can manage most of these directly through your dashboard settings. For other requests, contact us at the email below.
9. California Residents (CCPA)
If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete it, and the right to opt out of any sale of personal information. As stated above, we do not sell personal information. To exercise your CCPA rights, contact us at the email below.
10. Children's Privacy
Kawthar is not intended for users under the age of 18. We do not knowingly collect personal information from children under 18. If we learn that we have collected personal information from a child under 18, we will take steps to delete that information promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last Updated" date at the top of this page. Your continued use of the Platform after any changes constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us at: