This is a plain description of what the app actually stores, written from the database itself rather than from a template. If something below stops being true, this page changes.
Tajroba is a platform for finding things happening around you in Amman, Jordan — workshops, events, seminars, tours, community initiatives, volunteering, and everything in between, which we call experiences for short. This policy explains what personal data we collect, why, who sees it, and what you can ask us to do with it. It is written to meet Jordan’s Personal Data Protection Law No. 24 of 2023. If you have a question or a request, write to hello@tajroba.app — a person reads it.
Your account. Your name, email address, and password. Passwords are handled by our authentication provider and are stored hashed — we never see them.
Your profile. Anything you choose to add: profile photo, cover photo, interests, and your notification and messaging preferences.
If you host. Your host display name, bio, phone number, links to your Instagram, website or Facebook, the languages you host in, and the areas you host in. To verify hosts we ask for an identity document, a selfie, and — if you host as a business — a business document. If you accept CliQ, we store the alias you give us and any payment note you write.
Your bookings. Which experiences you book, the number of people in your party, any note you send the host, your booking reference, whether you checked in, and whether you cancelled or did not show up.
What you write. Messages you send other people through the app, reviews you leave, listings you publish, and posts in clubs you belong to.
Safety records. Reports you make or that are made about you, and any moderation action taken on an account.
Technical data. A push notification token and device name if you turn on notifications, and basic usage records such as which listings were viewed, so we can tell hosts how their listing is doing.
The map can sort experiences by how close they are to you. When you tap the locate button, your browser asks your permission and gives us your coordinates. Those coordinates stay in your device’s memory for as long as the page is open and are never sent to us and never stored. Close the tab and they are gone. We do not track your location in the background, ever.
To create and run your account, to take and show bookings, to issue tickets and check people in, to let hosts and guests reach each other, to send you the notifications you asked for, to keep the platform safe from harassment and fraud, and to meet legal obligations. That is the full list. We do not use your data to build advertising profiles.
Be aware of this part. Your display name and profile photo are visible to other people on Tajroba. Reviews you write appear publicly with your name and photo. If you are an approved host, your host name, bio, and social links are visible to anyone.
Profile photos and experience photos are kept in public storage, which means the direct file link works for anyone who has it, without signing in. Don’t upload anything as a profile or listing photo that you wouldn’t be comfortable being seen.
Host verification documents are the opposite: identity documents, selfies, and business documents live in private storage that is not reachable from the public internet. They are used to decide whether to approve a host and for nothing else.
When you book, the host sees your name, profile photo, party size, and any note you wrote, because they need it to run the session and check you in. If a host has chosen to show only the neighbourhood on the public map, the exact address is released to you once your booking is confirmed — not before. The same rule applies to payment details: if the experience is paid and the host accepts CliQ, their CliQ alias reaches you only once you have a confirmed booking, and never on the public listing.
Messages between you and a host are private to that conversation. They are not private from us: we can access message content when we are investigating a report or a safety concern. We do not read them otherwise.
We use Supabase for our database, authentication, and file storage, and it is where all of the above is held. Its servers are outside Jordan, which means your data is transferred and stored abroad. We use email and push notification providers to deliver messages to you.
We do not sell your personal data. We do not share it with advertisers or data brokers. We share it with the authorities only where the law actually requires it.
We keep your data while your account is open. When you ask us to delete your account, we remove your profile, your listings, and your content.
One exception, and we would rather tell you than hide it: if an account is removed for a serious safety violation, we keep the phone number and email address associated with it so that the same person cannot immediately return under a new name. That is the only thing kept after deletion, it is kept for safety alone, and it is never used to contact you.
Booking and report records may be kept for a limited period where we need them to resolve a dispute or meet a legal obligation.
Under Jordanian law you can ask us to: give you a copy of the data we hold about you; correct anything wrong; delete your account and your data; stop a particular use of your data; or withdraw consent you previously gave. You can also complain to the Personal Data Protection Council in Jordan.
Most of it you can do yourself in the app — edit your profile, change your notification and messaging settings, delete your account. For anything else, email hello@tajroba.app and we will respond within 30 days.
Traffic between your device and our servers is encrypted. Access to database rows is restricted per user at the database level, so one account cannot read another’s private data. Verification documents sit in private storage. No system is perfectly secure, and we will tell you promptly if a breach affects your data.
Tajroba is for people 18 and over. We do not knowingly collect data from children. If you believe a child has created an account, tell us and we will remove it.
If we change this policy we will update the date at the top, and if the change is significant we will tell you in the app before it takes effect.