العربيةBack to site
YalaLafa · يلا لفّة

Privacy Policy

Last updated: 26 September 2026 Version: 1.0

This English translation is provided for convenience. The Arabic text is the authoritative version, and it prevails in case of any difference.

The short version

  • We only collect what we need. Your name, email, phone and country, and the rides you join.
  • Your phone number is private. No member can see it, only the admin. Your email stays hidden unless you choose to show it.
  • We don't sell your data or use it for advertising, and you can delete your account yourself at any time.

This summary is for illustration only; the full text below prevails. This policy forms part of the terms and conditions.

1Who we are

The YalaLafa platform (the yalalafa.com website and the YalaLafa app) is owned and operated by [legal name of the owner or company] (the "Operator"), which is responsible for your data as described in this policy.

2Data we collect

  1. Registration data: first name, last name, email address, mobile number and country. Your password is stored with one-way encryption, which means even we can't read it.
  2. Activity data: the rides you join and when you joined, the rides you create if you're an organizer, your role on the platform (member, organizer or admin), when your account was created and verified, and your choice about showing your email.
  3. Terms acceptance record: the version of the terms you accepted and when you accepted it.
  4. Verification codes: stored encrypted; they expire within 15 minutes and are deleted once used.
  5. Technical data:
    • A session cookie that keeps you logged in for up to 30 days.
    • Your device's IP address, used temporarily to protect accounts from repeated attempts, stored in encrypted form and cleared automatically. The hosting provider may also record it in its usual server logs.
    • Your language and light/dark mode choice, saved only in your own browser and never sent to us.

We don't currently collect your photo or your location. When the app and live tracking launch, we will update this policy before collecting any location data, and it will require your consent.

3Why we use it

  1. To create your account, verify your email and log you in.
  2. To manage rides: joining and leaving, seat limits, and the list of who's going.
  3. To contact you about your account, such as verification codes and password resets.
  4. To protect the platform and its members from misuse, and to enforce the terms and conditions.
  5. To comply with the law and respond to requests from official authorities in accordance with the law.

We don't sell your data, we don't use it for advertising, and we don't share it with anyone for marketing.

4Who can see your data

  1. Visitors who aren't logged in: see only the number of people who joined each ride, with no names.
  2. Logged-in members: see your name, country, role, the date you joined the platform, how many rides you've joined, and the upcoming rides you're going to.
  3. Your email: hidden from members by default, and shown to them only if you turn on "Show my email to members" in your profile.
  4. Your mobile number: never shown to any member.
  5. Platform administration: can see all your account data, including your email and mobile number, for managing the platform and for safety.

5Service providers

We rely on providers that help us run the platform, and they receive only the data needed to provide their service:

  1. Hosting (GoDaddy): where the platform and its database are stored. Its servers may be located outside the State of Qatar.
  2. Email service: to send verification codes and messages about your account.
  3. Google Fonts: the site loads its fonts from Google Fonts, so Google receives your browser's IP address when they load.
  4. Google Maps: the meeting-point map on ride cards is shown by Google Maps, so Google receives your browser's IP address and Google's privacy policy applies to it. The "Directions" button opens Google Maps directly.

6Retention and deletion

  1. We keep your data for as long as your account exists.
  2. When you delete your account, your data and ride memberships are removed from the database immediately. Rides you created as an organizer remain, without your name, so the people who joined them don't lose them.
  3. A copy of the data may remain in the hosting provider's backups for a limited time, after which it is replaced automatically.
  4. We may delete accounts that never completed verification at any time.

7Your rights

  1. See and edit your data from "My profile".
  2. Control whether members can see your email, at any time.
  3. Delete your account yourself from "My profile" → "Edit my profile" → "Delete my account".
  4. Request a copy of your data, or ask anything about it, by email (Section 11).

8Data protection

  1. Passwords and verification codes are stored encrypted.
  2. Connections to the site are encrypted (https), and data files are protected from direct access.
  3. We protect accounts from repeated guessing attempts with temporary lockouts.
  4. We make reasonable efforts to protect your data, but no system can guarantee absolute, unbreachable security.

9Age

The platform is for people aged 18 or over. If we learn that an account belongs to someone younger, we delete it.

10Changes to this policy

We may amend this policy. Amendments are published on this page with an updated date, and for any material change to how your data is used, we will notify you by an appropriate means.

11Contact

For any question or request about your data: