Privacy Policy

Tahet | طاحت

Last Updated: October 1, 2026

Welcome to Tahet ("we", "our", or "us"). We are committed to protecting your privacy and ensuring transparency about how we handle your information. This Privacy Policy explains what data we collect, how we use it, and your rights regarding your personal information.

1. Information We Collect

We collect the following types of information:

• Account Information: Email address, username, and display name when you create an account
• Profile Information: Profile photo (optional) that you choose to upload
• Game Data: Game results, scores, Elo ratings, achievements, and statistics
• Group Information: Groups you create or join, and your membership roles
• Device Information: Device type, operating system, and app version for crash reporting and performance optimization
• Notifications and Diagnostics: Push tokens and installation identifiers, notification preferences, notification-provider acceptance/error records, crash logs, diagnostic information and app-session activity. Provider records do not establish that your device displayed a notification or that you read it. Network requests also expose an IP address to the services receiving them.
• Account Security and Search: Our authentication provider may infer an approximate city or country from your IP address to manage sessions and protect accounts. We do not request GPS location. Search terms you enter are sent to our server to return results and may appear in request logs.
• Content and Safety: Club names, descriptions, match notes and other content you submit; reports of inappropriate content, the reported content, block preferences, acceptance of community rules and moderation decisions. Chat messages are processed on versions that offer chat; the Android launch does not offer chat.

2. How We Use Your Information

Product usage and support: We record account setup, observed app opens and foreground sessions, onboarding completion or skipping, and supported club, match and result actions. These records can include your account identifier, event time, app version, platform, language and relevant club or match identifiers. Failure observations use bounded error categories, not the text you type, passwords or chat messages. Feedback you choose to send includes its text and selected category. Authorized administrators use this information to understand adoption, troubleshoot failures and handle support. Website visits and administrator activity are separate from personal app usage; these features do not add paid-ad attribution.

We use your information to:

• Provide and maintain the Tahet app and its features
• Calculate and display Elo ratings and leaderboards
• Track achievements and game statistics
• Send notifications about game invites, results, achievements and Tahet updates (with your permission). You can turn off Tahet updates separately in Settings, turn off all notifications, and set quiet hours.
• Improve app performance and fix bugs through crash reporting
• Respond to support requests
• Review reports, enforce community rules, honor blocks and prevent abuse

3. Data Sharing

We do not sell your personal information. We share data only in these circumstances:

• Other Users: Your display name, profile photo, and public player statistics can be visible to other signed-in users. Club content and match records are shown to participants and members according to the feature. Your real name is displayed only when you enable that option. Reports and block preferences are not published to other users.
• Service Providers: Clerk provides authentication, Sentry processes crashes and diagnostics, Railway hosts our backend and database, UploadThing hosts uploaded images, and Expo, Apple Push Notification service and Google Firebase Cloud Messaging route device notifications. These services receive the data needed to provide their functions on our behalf.
• Moderation: Authorized Tahet moderators can review report details and a copy of the reported content. Contact support@tahet.app for follow-up or an appeal.
• Legal Requirements: We may disclose information if required by law or to protect our rights

4. Data Security

We implement industry-standard security measures to protect your data, including:

• Encrypted data transmission (HTTPS/TLS)
• Secure authentication via Clerk
• Secure token storage on your device

5. Data Retention

Identifiable product events and observed sessions are normally retained for 180 days; the configured period cannot exceed 365 days. Aggregate cohort counts without account identifiers are normally kept for two years, with a maximum of three years. Closed support-case notes and resolved feedback text expire within one year of closure; open cases remain available while they are being handled. Private export files expire after one hour. Restricted operational audit and accounting receipts retain the identifiers and outcomes needed to prevent duplicate effects and preserve shared history, with private administrative reasons expiring within one year.

Account deletion erases the product-usage records linked to the account and clears identifying profile and support data. When a shared club or match history requires the original participant reference, that reference remains under an anonymized “Deleted account” record without the original login, email, name or photo. A club with retained history and no eligible successor is retired with its history available. Deleting an account does not transfer another person's history to a new account.

We retain your data for as long as your account is active. If you delete your account, we will delete your personal information within 30 days, except where we are required to retain it for legal purposes.

Limited safety records, including removed content needed to prevent its reappearance and records needed to handle reports or appeals, may be retained for abuse prevention or legal obligations. Contact support@tahet.app to request review and deletion of these records. Shared match records may remain where they no longer identify you.

Copies of finished administrative notification messages, audience selectors and recipient/device references are cleared after the configured private retention period, normally one year following campaign expiry. Unused drafts expire after the same period of inactivity. Aggregate provider outcomes and minimal request/action references can remain. Account deletion removes the account's copied notification audience/device references and stops its pending update deliveries.

6. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate information
• Delete your account and associated data
• Export your data
• Opt out of push notifications

7. Children's Privacy

Tahet is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes through the app or via email.