آخر تحديث: 25 سبتمبر 2026 · تنطبق على تطبيق رحَّالة لنظامي iOS وAndroid
رحَّالة تطبيق لتخطيط الرحلات. نجمع أقل ما يلزم لتشغيل التطبيق، ولا نبيع بياناتك، ولا نعرض إعلانات، ولا نستخدم أدوات تتبع أو تحليلات خارجية.
رابط مشاركة الرحلة غير مُدرَج (لا يظهر إلا لمن يملكه)، ويعرض الرحلة وخطتها دون مستنداتك. إيقاف المشاركة أو حذف حسابك يبطل الرابط فورًا.
من داخل التطبيق: الحساب ← حذف الحساب. تُحفظ بياناتك ١٥ يومًا إن غيّرت رأيك، ثم تُحذف نهائيًا — الحساب والرحلات والمستندات وكل شيء.
بيانات الأماكن والخرائط من Google · صور الوجهات من Unsplash وWikimedia Commons · الاقتراحات تُبنى بالذكاء الاصطناعي وتُتحقق من مصادر حقيقية · بيانات المنتجات الغذائية من © Open Food Facts contributors، برخصة ODbL.
لأي سؤال عن خصوصيتك: privacy@rahhala.app
Last updated: September 25, 2026 · Applies to the Rahhala iOS and Android app
Rahhala is a trip-planning app. We collect the minimum needed to run it: your email (sign-in — one-time code, Apple, or Google), the trips, places, documents, and passport memory photos you create, your device's push token, and your language/appearance preferences. When you add a memory photo we read its capture date (EXIF), if present, only to order it in your passport. Internal usage counters protect AI features from abuse — numbers only.
Your place ratings and written opinions are shown to other users fully anonymously — no name, no identity of any kind. Opinion text is automatically screened before publishing, and you can edit or delete your opinion at any time. Everything else you create stays private to you.
The product scanner looks barcodes up in our own database, with no link to your identity. If you photograph a product's ingredient label, the photo is analyzed to extract its ingredients — the photo describes the product, not you, and carries no identity; we may also contribute it to the public Open Food Facts database. Receipt reading in trip expenses (QR or text capture) happens on your device — the receipt never leaves your phone. Wallet payments (iPhone, optional): if you choose to connect them, a Shortcuts automation that you build yourself sends the app, after each payment, only the amount, currency and merchant name — never your card number, account or any other Wallet data. The payment waits in your trip's "not yet recorded" box, is visible to your companions on that trip, and is deleted when you convert it to an expense or dismiss it.
Location is used in the foreground for the "around me" feature, and — only if you enable walk-by reminders — for geofences around your own planned places. No movement tracking, no location history, off by default.
Processors: Supabase (hosting and auth), Google Maps Platform (place search and maps — queries and coordinates without your identity), Unsplash and Wikimedia Commons (destination photography - your device fetches the images directly, with no identity and no trip data), Google Gemini via AI Studio and Anthropic's Claude (the app's AI features — advisor suggestions, opinion screening and the product scanner — receive trip context, opinion text or a label photo, without your name or email, and neither provider trains its models on what we send), Open Food Facts (the open food-products database behind the scanner, ODbL license — product data flows from their database to our servers, and label photos may be contributed back to their public database, identity-free), Apple and Google (Sign in with Apple / Google — sign-in only, no data beyond your email and name), Expo (push delivery), Resend (sign-in code emails).
Trip share links are unlisted, exclude your documents, and die the moment you revoke them or delete your account. Account deletion is in-app: a 15-day grace period, then everything is permanently deleted.
No ads. No data sales. No third-party analytics. Questions: privacy@rahhala.app