Privacy Policy

Welcome to Nashra! We are committed to protecting your privacy and ensuring you understand how we collect, use, and safeguard your personal information. This Privacy Policy explains our data practices in clear, transparent language.

1. Information We Collect

We collect several types of information to provide and improve our service:

1.1 Account Information

When you sign in to Nashra using Google Sign-In, we collect:

• Email address - To create and manage your account
• Full name (First name, Last name) - To personalize your experience
• Profile picture - Your Google profile photo for account identification
• Google User ID - A unique identifier from Google

1.2 Device & Technical Information

To ensure our app works properly on your device, we collect:

• Device ID (Android ID / iOS IDFV) - To identify your device
• FCM Token (Firebase Cloud Messaging) - To send you push notifications
• Device type - Android or iOS version information
• App language preference - English or Arabic
• IP address - For analytics and security purposes

1.3 User Behavior & Analytics

To personalize your news feed and improve our service, we collect:

• Articles viewed - Your reading history
• Time spent reading - Duration on each article
• User interactions - Likes, comments, shares, and bookmarks
• Category and source subscriptions - Your preferred news topics and sources
• Session data - App usage duration and session IDs
• App crashes and errors - Via Firebase Crashlytics for debugging
• App performance metrics - Via Firebase Analytics to improve app quality

1.4 User-Generated Content

• Bookmarked articles
• News category preferences
• News source preferences
• User comments (if applicable)

1.5 Location Data (Future Feature)

In future versions, we may collect approximate location (city/country level) to show you localized news. We will never collect precise GPS coordinates without your explicit consent.

2. How We Use Your Information

We use your information for the following purposes:

Purpose	Data Used
Account Management	Email, name, Google ID
Personalized News Feed	Reading history, preferences, interactions
Push Notifications	FCM Token, notification preferences
App Improvement	Analytics, crash logs, performance metrics
Fraud Prevention	Device ID, IP address, usage patterns
Legal Compliance	All collected data (if required by law)

We will never use your information for:

• Selling to third parties or data brokers
• Advertising outside the Nashra ecosystem
• Unauthorized marketing communications

3. Third-Party Services & Data Sharing

We work with trusted third-party services to operate Nashra. Here's who we share data with and why:

3.1 Service Providers

• Google Sign-In - Authentication service (collects email, name, photo)
• Firebase Authentication - User account management (Google-owned)
• Firebase Analytics - Usage tracking and insights (Google-owned)
• Firebase Crashlytics - Error reporting and crash analysis (Google-owned)
• Firebase Cloud Messaging (FCM) - Push notifications (Google-owned)
• AWS App Runner - Backend API hosting (Amazon Web Services)
• AWS S3 - Image hosting and content delivery (Amazon Web Services)

3.2 When We Share Data

We may share your information in the following circumstances:

• With your consent - When you explicitly authorize us to share your data
• For legal reasons - To comply with court orders, government requests, or legal obligations
• Business transfers - If The Velantro Inc. is acquired or merged, your data may be transferred (you will be notified)
• Aggregated data - We may share anonymized, aggregated statistics with partners (no personal identification)

3.3 We Do NOT Sell Your Data

We do not sell, rent, or trade your personal information to third parties for monetary or other valuable consideration.

4. Your Rights & Choices

You have full control over your personal information. Here are your rights:

4.1 Access Your Data

You can request a copy of all personal data we hold about you by emailing tech@thevelantro.com.

4.2 Delete Your Account

You can delete your Nashra account at any time through:

• App Settings → Account → Delete Account
• Emailing tech@thevelantro.com

When you delete your account, we will permanently remove all your personal data within 30 days.

4.3 Export Your Data

You can request a downloadable copy of your:

• Bookmarked articles
• Reading history
• Preferences and settings
• User-generated content (comments, likes)

4.4 Opt-Out of Notifications

You can disable push notifications:

• In the Nashra app: Settings → Notifications
• In your device settings: iOS/Android notification controls

4.5 Opt-Out of Personalization

You can disable personalized content recommendations in Settings → Privacy → Personalization.

4.6 Opt-Out of Analytics

You can limit data collection for analytics through your device settings:

• iOS: Settings → Privacy → Tracking → Limit Ad Tracking
• Android: Settings → Google → Ads → Opt out of Ads Personalization

5. Data Retention & Security

5.1 How Long We Keep Your Data

Data Type	Retention Period
Account data (email, name, profile)	Until you delete your account
Analytics data (Firebase)	90 days (automatic deletion)
Crash logs (Crashlytics)	90 days (automatic deletion)
Session data	30 days (automatic deletion)
Deleted account data	Permanently deleted within 30 days

5.2 How We Protect Your Data

We implement industry-standard security measures:

• Encryption in transit - All data transmitted between your device and our servers uses HTTPS/TLS encryption
• Secure storage - Data is stored on secure AWS and Firebase servers with access controls
• Access controls - Only authorized personnel can access user data
• Regular security audits - We conduct periodic security assessments
• Authentication - Google Sign-In provides industry-leading security

6. Children's Privacy

Nashra is not directed at children under 13 years of age. We comply with the Children's Online Privacy Protection Act (COPPA).

• We do not knowingly collect personal information from children under 13
• If we discover a user is under 13, we will immediately delete their account and data
• Parents who believe their child has created an account should contact us at tech@thevelantro.com

If you are under 18, please review this Privacy Policy with your parent or guardian.

7. International Data Transfers

Nashra operates globally, and your data may be transferred to and processed in countries other than your own, including:

• United States - Firebase (Google) and AWS servers
• United Arab Emirates - Our primary operations base

We ensure that international data transfers comply with applicable laws, including:

• GDPR (EU) - We use Standard Contractual Clauses (SCCs) for EU data transfers
• Adequate protection - All data processors comply with internationally recognized data protection standards

8. Cookies & Tracking Technologies

Nashra is a native mobile app, not a website, so we do not use browser cookies. However, we do use:

8.1 Mobile Analytics SDKs

• Firebase Analytics - Tracks app usage and user behavior
• Firebase Crashlytics - Collects crash reports and error logs

8.2 Device Identifiers

• Android ID (Android devices)
• IDFV (iOS devices)

These identifiers allow us to provide personalized features and improve app quality. You can reset your device identifier in your device settings.

9. California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

9.1 Right to Know

You can request information about:

• Categories of personal information we collect
• Purposes for collecting your information
• Categories of third parties with whom we share data
• Specific pieces of personal information we hold about you

9.2 Right to Delete

You can request deletion of your personal information (subject to legal exceptions).

9.3 Right to Opt-Out of Sale

We do not sell your personal information. However, you can opt out of data sharing for analytics purposes.

9.4 Non-Discrimination

We will not discriminate against you for exercising your CCPA rights.

9.5 How to Exercise Your Rights

Email us at tech@thevelantro.com with the subject line "CCPA Request".

10. European Union Rights (GDPR)

If you are in the European Union or European Economic Area, you have rights under the General Data Protection Regulation (GDPR):

10.1 Legal Basis for Processing

We process your personal data based on:

• Consent - You agree to our Privacy Policy when you create an account
• Contractual necessity - To provide you with the Nashra service
• Legitimate interests - To improve our service and prevent fraud
• Legal obligations - To comply with laws and regulations

10.2 Your GDPR Rights

• Right of access - Request a copy of your personal data
• Right to rectification - Correct inaccurate data
• Right to erasure ("Right to be forgotten") - Delete your data
• Right to restrict processing - Limit how we use your data
• Right to data portability - Receive your data in a machine-readable format
• Right to object - Object to certain processing activities
• Right to withdraw consent - Withdraw consent at any time
• Right to lodge a complaint - File a complaint with your local data protection authority

10.3 Data Protection Officer

For GDPR-related inquiries, contact our Data Protection Officer at tech@thevelantro.com.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our data practices
• New features or services
• Legal or regulatory requirements

When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via email or in-app notification
• Request your consent if required by law

We encourage you to review this Privacy Policy periodically. Your continued use of Nashra after changes means you accept the updated policy.

12. Contact Us