Privacy policy
Last updated 11 August 2026
Mabrouk helps you invite people to a simcha and share it with them afterwards. That means we hold some personal information. This page says exactly what, why, and for how long — in plain language, because a policy nobody reads protects nobody.
What we collect
- Your account. Your name, and the email address or phone number you sign in with. If you add a profile photo, that too.
- Your events. Titles, dates, descriptions, venue names and addresses. We convert a venue address into approximate coordinates so we can show a map and work out local sunset times.
- Your guest list. If you are a host, the names, email addresses and phone numbers you enter or import from your contacts. Importing contacts is always your choice, one contact at a time, and we only ever read them — we never write to your address book.
- What you share in an event. Chat messages, posts, photos, videos, comments and reactions.
- Timing preferences. So we do not send a notification during Shabbat or a yom tov, we calculate the rest window that applies to you from your time zone and location. This tells us something about your religious observance, and we treat it as sensitive.
- Notification tokens. An identifier from Apple or Google that lets us deliver a push notification to your device.
- Gifts. The amount, the date, and a reference from our payment processor. We never see or store your card details.
What we do with it
We use it to run the product: deliver invitations, show you the events you are part of, deliver notifications at a time that respects your observance, and process gifts. That is the whole list.
We do not sell your personal information, and we do not share it with advertisers. We do not use your guest list to market to anyone.
Who else touches it
We use a small number of processors, each for one job: Supabase (database, file storage and sign-in), Stripe (payments), Resend (invitation emails), Expo (push notification delivery), and Vercel (this website). They process data on our instructions and are not permitted to use it for their own purposes.
People on a guest list who never signed up
If a host adds you to a guest list, we hold your name and contact details in order to send you that invitation, even though you do not have an account. You can ask us to delete them and to stop contacting you, at any time, by emailing support@example.com. Every invitation email also carries an unsubscribe link.
How long we keep it
Your account data lasts until you delete your account. Event content lasts as long as the event exists. Payment records are kept without any name attached, because financial records must be retained — see deleting your account.
Your choices
- Delete your account from Account → Delete my account, at any time.
- Block anyone, which hides their content from you and yours from them.
- Turn off notifications in your device settings.
- Decline the contacts permission — you can still add guests by hand.
- Ask us what we hold about you, or ask us to correct or delete it, by emailing the address above.
Children
Mabrouk is for people aged 13 and over. Many simchas are celebrations for children, and children are often on the guest list — but the account belongs to an adult or a teenager. If you believe someone under 13 has created an account, email us and we will remove it.
Changes
If we change this policy in a way that matters, we will tell you in the app before it takes effect rather than quietly updating this page.