Privacy policy
Last updated: 28 September 2026
Dalil accompanies the pilgrim through Umrah and Hajj. This policy sets out what the app actually collects — no more, no less — why, who the data is passed to, how long it is kept and how you take control of it again. It is written from how the app really works, and is updated when that changes.
1. Who processes your data
Two distinct controllers are involved, and they should not be confused.
- Dalil's publisher — El Hadji Birahim GUEYE, Dakar (Senegal), for the app itself: your account, your practice, your location, your alerts. Contact: [email protected].
- Your travel agency — if you travel with an agency, it keeps its own file about you in the Dalil console (identity, travel document, emergency information). It is the controller of that file in its own right, under its obligations as a tour organiser. Dalil hosts the file; the agency decides what goes into it and how long it is kept.
2. What the app collects
On first launch the app opens an anonymous technical session: no name, no number, no e-mail address. It remains fully usable that way — invocations, counters, Tawaaf, Sa'i, offline maps.
You only provide an identity in order to join a group or use SOS Family. That identity is a phone number, verified by a one-time code sent over WhatsApp or SMS. The app asks for neither a password nor an e-mail address.
| Data | What it is for | Legal basis | Retention |
|---|---|---|---|
| Anonymous technical identifier | Tie your counters and sessions to your phone, offline and online | Performance of the service (art. 6(1)(b)) | Until the account is deleted |
| Phone number (verified by code) | Identify you within your group, let your guide and your family reach you | Performance of the service (art. 6(1)(b)) | Until the account is deleted |
| Display name, profile photo, gender, language | Make you recognisable to your group | Performance of the service (art. 6(1)(b)) | Until the account is deleted |
| Type of pilgrimage, itinerary, group | Show the right journey and the right stages | Performance of the service (art. 6(1)(b)) | Until the account is deleted |
| GPS location and accuracy | Detect the holy sites, guide Tawaaf and Sa'i, let your group and family locate you | Consent (art. 6(1)(a)) — system permission, revocable | Until the account is deleted |
| Battery level | Warn your group and your family when your phone is about to die | Consent (art. 6(1)(a)) | Until the account is deleted |
| SOS voice note (30 s) | Let your relatives and your guide hear your voice when you raise an alert | Consent (art. 6(1)(a)) — only you start the recording | Until the account is deleted |
| Live voice (the Muqaddam's Voice) | Carry the guide's voice to the group's phones | Consent (art. 6(1)(a)) | No recording: the stream is not kept |
| Tawaaf and Sa'i sessions, counters, remediations | Keep count of your practice and resume it where you left off | Performance of the service (art. 6(1)(b)) — religious belief data, art. 9(2)(a) | Until the account is deleted |
| SOS alerts, responses received, call log | Bring help and keep a record of who stepped in | Vital interests (art. 6(1)(d)) and performance of the service | Until the account is deleted |
| Device notification token | Notify you of the guide's instructions, of the mīqāt and of your group's alerts | Consent (art. 6(1)(a)) | Until the account is deleted or you sign out |
| IP address (code requests, family lookups) | Limit abusive attempts and harassment through a shared code | Legitimate interests (art. 6(1)(f)) — security | Kept alongside the request it belongs to |
| Question asked to the doctrinal assistant | Find the answer within the indexed corpus | Performance of the service (art. 6(1)(b)) | Not kept — only a daily usage counter is |
Your religious practice and your voice recordings are sensitive data under Article 9 of the GDPR. They are processed only because you knowingly use a pilgrimage app: they serve nothing else, and are neither analysed, nor profiled, nor passed to any commercial third party.
3. What your agency records about you
If your trip is organised by an agency, that agency builds a client file in the Dalil console which goes beyond what the app collects. You enter none of it yourself: the agency fills it in from the documents you hand over.
That file may hold your full civil status, your date and place of birth, your nationality, your address, your identity card and passport numbers with their validity dates, scans of those documents, your visa, your flights, your hotel and your room, and a contact to reach in an emergency.
- Health data — the file includes a medical part — meningitis vaccination, blood group, reduced mobility, allergies, known conditions, current medication. It exists for a precise reason: to make it possible to help you properly in the crowd, the heat and the distance. This is health data under Article 9 of the GDPR.
- Who can see it — your agency's administrators and guides, and nobody else. Other agencies have no access to it; neither do other pilgrims. Scanned documents are held in private storage, never reachable through a public address.
- For how long — the agency decides, under its own obligations. This file does not disappear when you delete your Dalil account: to have it erased, contact your agency — and write to us if it does not answer.
4. What Dalil does not collect
One caveat, for honesty's sake: the Google notification component built into the Android version includes an audience-measurement module that reports technical usage events and an installation identifier back to Google, unconnected to your identity or your practice. We intend to remove it — messaging alone is all we need.
No banking details and no payment method: the app takes no money today. No access to your address book, your text messages, your photos other than the one you choose as your portrait, or your browsing history. No advertising identifier, no advertising tracker, no commercial profiling. Your data is neither sold, nor rented, nor passed to data brokers. The app makes no automated decision about you.
5. Who your data is passed to
Dalil sells nothing and shares nothing for commercial purposes. The only recipients are the people around you on the pilgrimage, and the technical providers without which the app would not work.
- The members of your group — your display name, photo, status and recent location are visible to the members of your group and to your guide. To them alone: the separation is enforced by the database, not merely by the screen.
- Your relatives (SOS Family) — only if you switch sharing on and pass on the link yourself. A relative sees your latest location, your status and any voice note — nothing else, and without installing anything. You can switch sharing off or revoke the link whenever you want.
- Supabase — hosts the database, the authentication and the files. This is where your data lives.
- WhatsApp (Meta) — receives your phone number in order to deliver your one-time verification code. SMS is used as a fallback.
- Google (Firebase Cloud Messaging) and Apple (APNs) — deliver notifications and calls to your phone: they receive your device token and the content of the notification.
- LiveKit — carries the guide's live voice and the calls. The sound passes through the service without being recorded there.
- TokenMix — powers the doctrinal assistant. Your question is passed to it along with the corpus excerpts, so that an answer can be drafted. Nothing else goes with it: not your name, your number, your location or your group.
6. Hosting and transfers
The database, the authentication and the files are hosted by Supabase in the European Union (eu-west region, Ireland). All traffic between your phone and the servers is encrypted in transit.
The notification, live-voice and doctrinal-assistant providers operate from their own regions, some outside the European Union. Those transfers rely on the European Commission's standard contractual clauses, and carry only what is strictly needed: a device token, a phone number, an audio stream or a question — never your whole file.
7. How long your data is kept
We would rather state what is true than what would be reassuring.
- As long as your account exists — the data listed above is kept until you delete your account. There is currently no automatic purge after thirty or ninety days: your location history and your SOS voice notes remain for as long as the account does.
- Deletion is the real lever — deleting your account erases this data immediately and permanently. The procedure has its own page, and the button is in the app's settings.
- The live voice — is not kept. Nothing in the app records it.
- Voice notes — the ones you record for an SOS are kept on the server until your account is deleted; the copy on your phone is erased within 24 hours of sending at the latest.
- Your agency's file — belongs to the agency and follows its own retention periods.
An automatic purge of old locations is work in progress. Until it is in place, this page will not announce it: a retention promise the system does not keep is worth less than no promise at all.
8. Your rights
You have, at any time, the rights of access, rectification, erasure, restriction, objection and portability. Withdrawing your consent to location, microphone or notifications takes effect immediately, in your phone's or the app's settings, without going through us.
For anything else, write to [email protected]: you will receive an answer within thirty days at most. An export of your data is currently prepared by hand — there is no button for it in the app yet. For data held by your agency, approach the agency first.
If a request is left unanswered or unsatisfied, you may lodge a complaint with the competent data protection authority: the Commission de protection des données personnelles (CDP) in Senegal, or the authority of your country of residence in the European Union.
9. Security
- Separation — access rules are enforced by the database itself. A pilgrim sees only their own data and their group's; an agency sees only its own clients.
- Encryption — all traffic between the app and the servers is encrypted in transit.
- Documents and recordings — document scans and voice notes are held in private storage, served through temporary links, never through a public address.
- One active device — an account can only be open on one phone at a time: taking your account onto a new device closes the session on the old one.
10. Minors
Dalil is meant for adult pilgrims. A minor normally travels with a guardian, whose phone carries the app. No data is knowingly collected from a child under sixteen; if you find otherwise, write to us and the account will be deleted.
11. Changes to this policy
This page follows the app: it changes when the processing changes, and its update date is at the top. A substantial change — a new category of data, a new recipient — is announced in the app fourteen days before it takes effect.