Privacy Policy
Last updated: February 2026
Our Core Privacy Promise
Sunnahfy will never sell your data. We will never serve you targeted advertising. We will never share your personal information with third parties without your explicit consent. Your data belongs to you.
1. Information We Collect
We collect information you provide directly:
- -- Account information (email, username, display name)
- -- Profile information (bio, avatar, cover image)
- -- Content you create (posts, messages, photos, polls)
- -- Community membership and interactions
We automatically collect minimal technical data necessary to operate the service (session tokens, basic device info for security).
2. How We Use Your Information
- -- To provide and maintain the Platform
- -- To authenticate your identity and secure your account
- -- To deliver your content to the people you choose to share it with
- -- To enable real-time communication features (messaging, calling)
- -- To prevent abuse and enforce our Terms of Service
3. Travel Shield & Identity Protection
Sunnahfy includes a Travel Shield feature that allows users to activate a decoy profile for identity protection. Travel Shield data is encrypted client-side using cryptographic passphrases and is never accessible to Sunnahfy servers in its decrypted form. We cannot access, read, or share your Travel Shield configurations.
4. Data Encryption & Security
All data in transit is encrypted via TLS. Passwords are hashed using bcrypt with a cost factor of 12. Session tokens are cryptographically generated. We implement rate limiting, CSRF protection, and regular security reviews. WebRTC calls are peer-to-peer and do not pass through our servers.
5. Data Sharing
We do not share your personal data with third parties except: (a) when you explicitly authorize it through our Developer API with OAuth consent; (b) if required by law with valid legal process; (c) to protect the safety of our users in emergency situations.
6. Data Portability & Deletion
You have the right to export all your data at any time. You may also request complete deletion of your account and associated data. Deletion requests are processed within 30 days. We provide data import tools to bring your content from other platforms.
7. Cookies & Tracking
Sunnahfy does not use third-party tracking cookies or analytics. We use minimal, essential cookies for session management and authentication only. We do not track your behavior for advertising purposes.
8. Your Rights
Under GDPR, CCPA, and similar regulations, you have the right to: access your data, correct inaccurate data, delete your data, restrict processing, data portability, and withdraw consent. To exercise any of these rights, contact us through the Platform.
9. Changes to This Policy
We will notify you of any material changes to this Privacy Policy through the Platform. Continued use of Sunnahfy after changes constitutes acceptance of the updated policy.
10. Contact
For privacy inquiries, please contact us through the Platform or visit our About page.