Mawadda is a private app for two spouses. This policy explains what we collect, why, which companies process it on our behalf, how long we keep it and how you can delete it. It is written to be read, not skimmed; the short version is in section 2.
1. Who we are
Qordova Inc., a company registered in Manitoba, Canada, operates Mawadda ("we", "us"). Contact for anything in this policy: info@mawadda.app.
2. The short version
- Your answers, voice notes and photos are shared with exactly one person: the spouse you paired with by invite code. Nobody else at Mawadda reads them in the normal course of operating the app.
- We store what you give us (account, profile, answers, game play) on Supabase, and use Google services for notifications, crash reports and ads, Qonversion for subscriptions, and Resend to email you sign-in codes.
- The free tier shows Google AdMob ads. Before the first ad we ask for your choice: on iPhone through Apple's tracking prompt, and where the law requires it through a consent form. If you say no, ads are non-personalised. Mawadda Premium removes ads entirely.
- We do not sell personal data. We do not run analytics or profiling on your relationship data.
- You can delete everything from the Profile tab, or by email. Details in section 9 and at mawadda.app/delete-account.
3. What we collect
3.1 What you give us
| Data | Examples | Used for |
|---|---|---|
| Account | Email address, password (stored as a hash), or a Google or Apple sign-in link | Creating and securing your account, sending sign-in codes and password resets |
| Profile | First name, display name, avatar colours, gender, relationship stage (married, engaged, courting), marriage date, device timezone | Showing you to your spouse, choosing question wording, timing the nightly question in your couple's timezone |
| Pairing | Invite code, couple record, your spouse's user id | Connecting exactly two accounts |
| Nightly answers | Written answers, optional voice notes (audio recordings) | The core feature: sealed until both of you answer, then revealed to both |
| Sealed Vault answers | Your answers to the twelve situations answered before pairing | Revealed to your spouse when they have answered the same one |
| Dealbreakers | Your responses to the Dealbreakers deck | Shown to your spouse once you both have answered |
| Games | Trivia answers, Word Relay words, Passport and Ghost guesses, Camera Roll photos, scores | Two-player games and results |
| Preferences | Notification settings, reminder time, appearance | Your settings |
| Support email | Whatever you write to us | Answering you |
3.2 What is collected automatically
| Data | Collected by | Used for |
|---|---|---|
| Push notification token, device platform | Firebase Cloud Messaging, stored in our database | Delivering notifications. Notification payloads contain names and ids, never the text of an answer. |
| Activity timestamps | Our servers | Streaks, last active time, the "both answered" moment |
| Streaks, achievements, Barakah seeds | Our servers | Progress features and the community seed total |
| Crash reports and diagnostics (device model, OS version, app version, an anonymous installation id, the user id, stack traces) | Firebase Crashlytics | Finding and fixing crashes |
| Advertising identifier, device signals, IP address and the approximate location derived from it, ad impressions and clicks | Google AdMob and the Google User Messaging Platform (free tier only) | Serving and measuring ads, frequency capping, fraud prevention. See section 5. |
| Subscription status, product id, expiry, purchase receipts | Qonversion, Apple App Store or Google Play, and our database | Opening Mawadda Premium for you and your spouse |
| IP address and request logs | Every server we or our providers operate | Security and operations; ordinary short-lived server logs |
3.3 What we do not collect
- Location: the app never asks for location permission and has no location code. Passport and Ghost shows map tiles of places the game picks, not where you are. Ad providers derive a coarse location from your IP address; that is theirs, described in section 5.
- Contacts: never read. Invite codes are shared through your phone's share sheet or a WhatsApp link you send yourself.
- Phone number, precise location, browsing history, health data, biometrics, other apps installed.
- Religious belief as a data field: Mawadda is built for Muslim couples, but we do not record anyone's faith.
4. Why we use it, and the legal basis
- To run the app you asked for (contract): account, pairing, answers, games, notifications, subscriptions.
- To keep it working and safe (legitimate interest): crash reports, security logs, abuse prevention.
- To fund the free tier (legitimate interest, or consent where your law requires it): non-personalised ads.
- To meet legal duties (legal obligation): tax records of purchases.
- With your consent, where we ask for it: microphone for voice notes, photo library for Camera Roll, notifications.
We do not use your relationship content to train models, to build a profile of you, or for marketing.
5. Services that process your data
Each provider is bound by its own terms and privacy policy and acts on our instructions for the purpose listed, except AdMob, Crashlytics and Qonversion, which also process the data described for their own operations.
| Service | Provider | What it receives | Purpose |
|---|---|---|---|
| Supabase (authentication, Postgres database, file storage, realtime, edge functions) | Supabase Inc. | Everything in section 3.1 and the tokens, timestamps and subscription fields in 3.2 | Our backend. Row-level security rules mean each row is readable only by the two members of the couple it belongs to. |
| Firebase Cloud Messaging | Google LLC | Push token, notification payloads (names, ids) | Push notifications |
| Firebase Crashlytics | Google LLC | Crash reports, diagnostics, user id | Crash reporting |
| Google AdMob and User Messaging Platform | Google LLC | Advertising id, device signals, IP-derived approximate location, ad interactions | Ads on the free tier; consent management where required |
| Qonversion | Qonversion Inc. | User id, purchase tokens and receipts, subscription status | Validating and syncing subscriptions across your devices and your spouse's account |
| Apple App Store, Google Play | Apple Inc., Google LLC | Payment, handled entirely by them | Billing for Mawadda Premium. We never see card details. |
| Google Sign-In | Google LLC | Your Google account's email, name and id when you choose it | Sign-in option |
| Sign in with Apple | Apple Inc. | Your Apple ID's email (or relay address) and name when you choose it | Sign-in option on iPhone |
| Resend | Resend Inc. | Your email address and the code or link in the message | Sending sign-in codes and password reset emails from team@mail.mawadda.app |
| OpenStreetMap, OpenFreeMap, Mapillary | OpenStreetMap Foundation, OpenFreeMap, Meta Platforms Inc. | Your IP address and the tiles or street images requested | Map and street imagery in the Passport and Ghost game |
| Open Trivia Database | opentdb.com | Your IP address with each question request | Trivia Night questions |
5.1 Advertising in more detail
- Ads appear only on the free tier: banners on Home, Games, Old Reflections and the achievements screen; an optional rewarded video you choose to watch; and a skippable rewarded ad after some games. Mawadda Premium removes all of them for both spouses.
- On iPhone, before the first ad, iOS shows the App Tracking Transparency prompt for Mawadda. If you choose "Allow", Google may use your device's advertising identifier to personalise ads and measure them across other apps. If you choose "Ask App Not to Track", we request non-personalised ads and the identifier is not used for tracking. You can change this any time in Settings, Privacy and Security, Tracking.
- On Android, Google may use the advertising id for the same purposes; you can reset or delete it in Settings, Google, Ads, and you can withdraw consent where a consent form was shown.
- Where the law requires consent before ads load (for example the EEA, the United Kingdom and Switzerland), Mawadda shows Google's consent form first, and personalised ads are requested only with your consent. You can change your choice from the Profile tab.
- The ad content rating is capped at "G" and we never send your answers, names or relationship data to advertisers.
6. Who can see your content
- Your spouse: answers you both gave, voice notes, Dealbreaker responses, game scores and streaks. Your private drafts and unsent notes are never shared. The in-app Privacy screen (Profile tab) lists exactly what is and is not visible.
- Us: our staff can access the database for support, debugging and abuse handling. Access is logged and limited to what the task needs; we do not read answers for curiosity or analysis.
- Providers: as in section 5.
- Law: if a valid legal process requires it, or to protect someone from serious harm.
- A future owner: if Qordova Inc. is sold or merges, your data may transfer with it under this policy; we will tell you first.
We do not sell or rent personal data, and we do not share it with data brokers.
7. Data on your device
- A cache of your recent answers, questions and profile is kept on the device (Isar database) so the app opens quickly. It is cleared when you sign out.
- Your sign-in session token is stored in the app's private storage so you stay signed in.
- Voice notes are recorded to a temporary file, uploaded, and then removed from the device.
- Uninstalling the app removes all of the above.
8. Security
- All traffic uses HTTPS (TLS). Our database and file storage are encrypted at rest by the provider.
- Every table is protected by row-level security, so a request can only read rows belonging to the requesting user's own couple, enforced in the database rather than in the app.
- Uploaded files live in private buckets and are served through short-lived signed links.
- Passwords are hashed; we cannot read them. Sign-in codes expire after 15 minutes.
- No system is perfectly secure. If a breach affects you, we will notify you and the relevant authority as the law requires.
9. How long we keep data, and deletion
We keep your data for as long as your account exists, so the app keeps working for you and your spouse. When you delete your account, everything listed at mawadda.app/delete-account is removed immediately (in-app) or within 7 business days (email request). Retained afterwards: anonymised purchase records for up to 7 years (tax law), Crashlytics reports for up to 90 days (Google's schedule), encrypted backups overwritten within 30 days, and the aggregate community seed count. Deleting your account does not cancel a subscription; cancel it in the App Store or Google Play.
Disconnecting from your spouse without deleting: Profile tab, Partner connection, Remove connection.
10. Your rights
Wherever you live, you can ask us to access, correct, export or delete your personal data, or to stop a particular use, by emailing info@mawadda.app. We answer within 30 days. Residents of Canada have these rights under PIPEDA; residents of the EEA and the United Kingdom under the GDPR and UK GDPR, including the right to complain to your supervisory authority; residents of California under the CCPA, including the right to know and to delete (we do not sell or share personal information as the CCPA defines it). We will never treat you differently for exercising a right.
11. Age
Mawadda is for adults. You must be 18 or older to create an account. We do not knowingly collect data from anyone under 18; if we learn we have, we delete it. Tell us at info@mawadda.app.
12. Where data is processed
Our providers operate in Canada, the United States and other countries. Where data leaves your country, we rely on the provider's contractual safeguards (for example standard contractual clauses) and on the provider's own certifications.
13. Changes
We will update the date at the top when this policy changes, and tell you in the app or by email if the change is significant. Continued use after that date means you accept the new version.
14. Contact
Qordova Inc., Manitoba, Canada. Email info@mawadda.app.
See also the Terms of Service and how to delete your account.