Privacy Policy
Last updated: 30 September 2026
Sufratna (سفرتنا) is an app that helps a household plan its breakfasts, meals and salads for the week and share the plan with the people who live there. This policy explains what information the app collects, why, who can see it, how long it is kept, and the choices and rights you have. We have written it to be read, not skimmed past: if anything is unclear, please contact us.
In short: we collect only what the app needs to work — your phone number, your name, your meal lists and plans, and what's needed to send you notifications. We don't show ads, we don't use analytics or tracking, and we never sell your information. You can delete your account and all of its data from inside the app at any time.
1. Who we are
Sufratna is developed and operated by Yazid Alsaaid, an independent developer based in the Kingdom of Saudi Arabia (“we”, “us”, “our”). We are the controller of the personal data described in this policy. You can reach us at support@sufratna.app.
2. What this policy covers
This policy applies to the Sufratna apps for iPhone and Android, their widgets, the notifications they send, and the website at sufratna.app. It applies to everyone who uses Sufratna, wherever they live.
3. Information we collect
Your account
- Phone number — you sign in with your mobile number and a one-time code sent by SMS. Your number is also how your household recognises you.
- Name — the name you choose, shown to your household and in notifications.
- Role — whether you plan meals (a planner) or follow a household's plan (a member).
Your household
- The link between a planner and each member, and the date each member joined.
- Invitations: an invite code is valid for 10 minutes and can be used once. We keep only a scrambled (hashed) copy of it, never the code itself.
What you create
- Your lists of meals, salads and breakfasts, including any notes you add to them.
- Your weekly plans, skipped days and plan history.
- PDF copies of a week's plan that you choose to create and share.
Settings
- Your app language, your phone's time zone and the planner's daily cutoff time (used so the plan changes at the right time for your household).
- Some preferences, such as appearance (light or dark) and calendar style, are kept only on your device.
Notifications
- If you allow notifications, a push token (an address for your device issued by Apple or Google), the device type (iPhone or Android) and your app language, so notifications arrive in your language.
Security and technical records
- Our sign-in system keeps records of sign-ins and active sessions, which can include the IP address and type of device used, to protect your account and prevent misuse.
- Our servers keep short technical logs of which feature was used, whether it worked and how long it took. These logs do not include your identity, your IP address or the contents of your plans.
- Traffic to our servers passes through Cloudflare, which processes IP addresses to deliver and protect the service.
What we don't collect
We don't collect your location, contacts, photos or files. The camera is used only to scan an invite QR code; images are not saved or sent anywhere. We don't use advertising identifiers, analytics tools or crash-reporting tools.
4. How we use your information
- To provide Sufratna: signing you in, keeping your lists and plans, sharing the plan with your household, creating PDFs, showing the plan in widgets and sending notifications when the plan changes or someone joins or leaves.
- To keep Sufratna secure, prevent abuse and fix problems.
- To answer you when you contact us, and to act on your privacy requests.
- To meet our legal obligations.
We don't use your information for advertising, we don't build profiles about you, we don't make automated decisions that have legal or similar effects on you, and we never sell or rent your information.
5. Legal bases
We process your information because it is necessary to provide the service you asked for (your account, your household and your plans); with your consent where it is needed, such as for notifications, which you can withdraw at any time; for our legitimate interest in keeping the service secure and working; and where the law requires it. This reflects the Saudi Personal Data Protection Law (PDPL) and, for people in the European Economic Area and the United Kingdom, the GDPR.
6. Who can see your information
Your household
- A planner can see each member's name, phone number and join date.
- A member can see the planner's name and the household's plan, and can open and share the plan as a PDF.
- Anyone you share a PDF with can see what's in it. Please share only with people you trust.
Service providers
We use a small number of providers who process information only on our behalf and only to provide their part of the service:
| Provider | What they receive | Why |
|---|---|---|
| Twilio | Your phone number | Sending your one-time sign-in codes by SMS |
| Expo (push notification service) | Your push token and the notification's text, which can include meal names | Delivering notifications |
| Apple and Google | Your push token and the notification's text | Delivering notifications to iPhone (Apple Push Notification service) and Android (Firebase Cloud Messaging) |
| Cloudflare | IP addresses and encrypted network traffic | Delivering and protecting the connection to our servers |
Apple and Google also provide the App Store and Google Play, from which you download the app; their own privacy policies apply to that.
When the law requires it
We may disclose information if we are required to by law, by a court or by a competent authority, or where it is necessary to protect the safety of any person. We will not sell your information, and if Sufratna is ever transferred to someone else, this policy will continue to protect your information.
7. Where your information is stored and international transfers
Your account data is stored on servers we operate in the Kingdom of Saudi Arabia. Some of the providers above (Twilio, Expo, Apple, Google and Cloudflare) process information in other countries, including the United States. When information is transferred outside Saudi Arabia, or outside your own country, we rely on the protections required by the applicable law, including the providers' contractual commitments to keep it secure and use it only for the purposes above.
8. How long we keep it
- Your account, lists, plans and household links are kept for as long as you have your account.
- Invite codes expire after 10 minutes.
- PDF copies of a week's plan are deleted from our servers 10 minutes after they are made. Sharing the week again makes a new one.
- Push tokens are removed when you sign out, delete your account, or when Apple or Google tell us they are no longer valid.
- Technical logs are kept for a short time and then overwritten.
- When you delete your account, we delete it straight away: your profile, meals, salads, breakfasts, plans, household links, invites, push tokens and stored PDFs. Members of your household lose access to your plan, and you are removed from any household you had joined.
- Twilio keeps its own records of the SMS messages it sent, under its own privacy policy.
9. Your rights and choices
Wherever you live, you can:
- Access your information and get a copy of it — much of it is visible in the app, and you can ask us for a copy.
- Correct it — change your name or phone number in the app (Account), or ask us.
- Delete it — in the app, open Account → Delete account. You'll confirm with a code sent to your phone.
- Withdraw consent — turn notifications off at any time in your phone's settings.
- Object to or restrict some processing, where the law gives you that right.
- Leave a household at any time, or, as a planner, remove a member.
To make a request, email support@sufratna.app from any address and include the phone number of your account. We may ask you to confirm the request with a code sent to that number. We will reply within 30 days and won't charge you.
If you are not satisfied with our answer, you can complain to a data protection authority: in Saudi Arabia, the Saudi Data and Artificial Intelligence Authority (SDAIA); in the European Economic Area or the United Kingdom, your local supervisory authority. If you live in California or another place with similar laws, you have the rights described above; we do not sell or “share” personal information for cross-context advertising, and we will not treat you differently for using your rights.
10. Children
Sufratna is a household app meant to be set up by adults. A child may use it as a member of their household on a device set up by a parent or guardian, who is responsible for that use and for giving consent on the child's behalf where the law requires it. For a member, we collect only what's needed to join and follow the plan: a name and phone number. We don't show ads to anyone or collect more information from children. A parent or guardian can remove a child from the household or delete the child's account at any time, or contact us to do it. If you believe a child is using Sufratna without the consent the law requires, contact us and we will delete the account.
11. Security
All connections to Sufratna are encrypted. Access to data is limited so that each person can reach only their own information and their household's plan, invite codes are stored only in scrambled form, and your sign-in keys on your device are kept in the phone's secure storage. No system is perfectly secure, but we work to protect your information and will tell you and the authorities about a breach where the law requires it.
12. Information on your device
To work offline and to show the week in widgets, the app keeps a copy of the current plan on your device, together with your sign-in keys and some preferences. Signing out removes your sign-in keys; deleting the app removes everything it stored on the device.
13. Changes to this policy
We will update this policy when the app or the law changes, and change the date at the top. If a change is significant, we will tell you in the app before it takes effect.
14. Contact
Questions or requests about your privacy: support@sufratna.app.
This policy is available in Arabic and English with the same meaning. If the two ever differ, the Arabic version applies to users in Saudi Arabia and the English version to everyone else.