Privacy Policy – Al-Shareyah Association El-Saf El-Balad App
Last updated: 23 October 2026
1. Data Controller
Al-Shareyah Association El-Saf El-Balad, registered under No. 720 – Giza (1988), is responsible for managing the data held in the association's system and determining its purposes of use. This policy covers the mobile app (Android, iPhone and iPad), the administration panel and the associated database.
2. Nature of the App
The app is an internal work tool for authorized association personnel. It is not a public platform for beneficiary registration or aid applications, and people outside the association's authorized personnel cannot create an account.
The app displays pre-existing association records according to the role the association assigns to the account. It cannot create a new case or record an aid payment. Users whose role permits it can make exactly two changes to a case record: setting or correcting the family's home location on the map, with its written address, and correcting the family's phone number.
3. Data Sources
Beneficiary data is obtained through the association's approved procedures and is entered or updated by authorized personnel through the administration panel. It may come from information and documents supplied by a beneficiary or representative, legacy association records, or case research and follow-up. The exception is the family's home location (map point and address) and phone number, which may be corrected in the field from the app as described in section 2.
4. Data Held in the System
Depending on the case, records may include names, identifiers and national ID numbers, phone numbers, addresses, areas and the home's geographic location, family, spouse, children's and co-resident relatives' details, social, health and financial circumstances, case classification and eligibility, the types, amounts and dates of aid provided, income sources, attached documents (images and PDF files), and notes and follow-up records. Health data, national IDs, precise locations and children's data are treated as highly sensitive and are accessed only where necessary for authorized work.
5. User Account Data
The system holds each worker's account data: name, phone number, profile image, role, permissions and account creation date. It is used to authenticate the user, apply the correct permissions and protect the system.
6. Device Permissions
The app requests one device permission:
Location (while using the app). Requested only when needed: when opening the screen used to set a family's home location on the map, or when starting navigation to a family's home. The device position is used to centre the map and to set the starting point of the route. The worker's device location is not sent to the association's servers and is not stored in the case record; only the location the user selects for the family's home is saved. Refusing the permission does not prevent use of the app.
The app does not request camera, contacts, files or notification permissions; sharing goes through the phone's own share sheet and needs no permission. When calling a beneficiary, the number is passed to the phone's dialler without access to the user's call history.
7. Data Sent from the Device
Besides connecting to the association's servers, the app uses Sentry for crash reporting and performance monitoring. The following is sent automatically:
device model, operating system, app version and general settings,
session identifier,
error details and screen performance data.
The app does not record or capture the user's screen, and no beneficiary data, displayed screen content, user IP address or login credentials are sent to this service.
This data is stored by Sentry on servers within the European Union and is used solely to diagnose faults and improve app performance. It is not used for advertising or marketing and is not sold.
The app collects no data from the user's device for advertising or marketing purposes, does not sell user or beneficiary data, and uses no advertising trackers.
8. Third-Party Services
Google Maps: used to display the map inside the app. Tapping "Location" opens the maps app with the family's home coordinates to start navigation.
Address lookup from the map: when a home point is picked on the map, its coordinates alone — no name or other family data — are sent to the phone operating system's address service (Google on Android, Apple on iOS) and to the OpenStreetMap Foundation's Nominatim service, to suggest a readable address the user reviews before saving.
Sentry: crash reporting and performance monitoring, as described in section 7.
Google Play and the App Store: to check whether a newer app version is available.
These services are governed by their own operators' privacy policies.
9. Data Stored on the Phone
The app keeps an encrypted copy of login data and recently loaded records so they can be shown when the device is offline. A copy older than seven days is deleted rather than shown, and the copy is erased completely on logout or when the session expires.
Attachments (images and PDF files) are shown from the app's memory and are not saved on the phone. They stay in memory briefly to speed up display, are then deleted automatically, and are also deleted on logout. Their server links are signed and expire within 30 minutes.
When an attachment or the general report image is shared, the app creates a temporary copy of the file in its own temporary folder to hand it to the app the user chose. Other apps cannot reach this folder, and the app deletes these copies on logout and the next time it is opened.
The app is excluded from automatic device backup, so its data is not copied to cloud accounts.
On Android, the app blocks screenshots and screen recording while it is in use. On iPhone and iPad, it hides its content in the app switcher and while the screen is being recorded or mirrored.
10. Sharing and Copying
Where the user's role allows it, the app can send the following through the messaging apps on the phone:
Case details: the beneficiary's name, case code, phone number, address and a link to their home location. The shared link does not carry the sender's device location.
Attachments: a copy of the document itself (an image or a PDF), not its link.
The general report: an image of case, children and amount totals per aid type, with no names or family details.
Users whose role allows copying can also copy a national ID number. All of this is started deliberately by the user and never happens automatically, and under the Terms of Use it is limited to work purposes and authorized recipients. Whatever is sent is then held by the receiving app and is subject to its policy.
11. Purposes
Data is used to assess cases and verify eligibility, organize aid and prevent duplication, follow up families and update their circumstances, contact and reach beneficiaries when needed, prepare internal reports and statistics, manage users and permissions and protect the system, diagnose faults and improve app performance, and comply with legal obligations.
12. Lawful Basis
The association processes data within its declared charitable purposes, on the basis of consent or another lawful basis recognized by Egyptian laws and regulations, and only to the extent necessary for the purpose for which the data was collected.
13. Sharing and Disclosure
The association does not sell or rent data or make it public. Internal access is limited to personnel whose duties require it, according to their permissions. External disclosure occurs only with valid authorization, to comply with an official legal obligation or request from a competent authority, or to a technical service provider acting for the association under confidentiality and security obligations — and such a provider may use the data only to deliver the agreed service.
14. Security
The association uses authenticated accounts and roles that set what each user may do, enforced by the server — which does not send attachments or the report, or accept an edit, without the matching permission — an encrypted connection between the app and the server, encryption of data stored on the phone, and reviews access when it is no longer needed, with appropriate backup and recovery procedures. Users must protect their device and password, must not take beneficiary data outside authorized channels, and must immediately report a lost device or suspected unauthorized access.
No technical measure can guarantee absolute security.
15. Retention
Records are retained as long as necessary to assess and provide aid, follow up cases, and meet legal or administrative requirements; they are reviewed periodically and deleted or anonymized once the purpose has ended, unless a lawful obligation requires further retention. Crash and performance data held by Sentry is deleted automatically after the retention period set in that service.
16. Data Subject Rights
A data subject or their legal representative may contact the association to request access to the data held about them and the purposes of its use, correction of inaccurate data or completion of incomplete data, objection to unlawful use, or deletion or restriction where legally applicable. The association may verify identity or authority before acting on a request, in order to protect the data from disclosure to an unauthorized person.
17. Worker Accounts and Deletion
The app lets a worker submit a request to delete their account. The association reviews the request and carries it out once it confirms there is no administrative reason to retain the account. Deleting an account ends that worker's access to the system; it does not delete beneficiary records, which belong to the association and the data subjects rather than to the worker's account.
18. Children's Data
Records may include children from beneficiary families, particularly orphans and students. Such data is used only for care and assistance, through a guardian or legal representative where required, and is subject to strict confidentiality and access restrictions. The app is not directed at children and no accounts are created for them.
19. Updates
This policy may be updated when app functions, data practices or legal requirements change. The latest revision date appears at the top, and store disclosures are updated where necessary before any new feature is enabled.
Contact
Al-Shareyah Association El-Saf El-Balad
Registration No. 720 – Giza (1988)
Address: El-Saf El-Balad, El-Saf District, Giza
Phone: 01273668664
Email: alshareyah.alsaff@gmail.com