Privacy policy
Last updated: 10 November 2026
Tallah (طلعة) is an app at yalatalla.fit for finding and hosting group activities in Saudi Arabia. This policy explains what personal data we collect, why, who can see it, and your rights under Saudi Arabia's Personal Data Protection Law (PDPL).
What we collect
- Account: your mobile number, password (stored only as a secure hash), and your email if you choose to add one.
- Profile: your name, gender, home city, and, if you add them, a bio and a profile photo.
- Activity in the app: activities you host or join, chat messages, thanks, reports you send, and photos you upload to an activity.
- Payments: when you pay in the app, the amount, the activity and the payment method type (for example mada or Apple Pay). Your card details go straight to our payment provider, Paylink. Tallah never sees or stores them.
- Hosts who get paid: the name on the bank account, the IBAN, an IBAN certificate and an ID document, so we can check who we transfer money to.
- Ratings: the stars and optional comment you give an activity you went to. The average shows on the activity and the host's profile. Your comment is public: it shows there with your first name and the activity's name and date, unless Tallah's team hides it.
- Technical: your IP address when you post, join or upload (to stop spam), a private key that keeps you logged in on your phone, anonymous usage counts (for example which tabs are opened, counted by phone without saying who you are), and error reports with your browser type when something breaks.
Why we use it
- To create your account and confirm your mobile number with a code we send on WhatsApp.
- To show activities, let you host and join, and run the group chats.
- To let hosts and the people they confirm contact each other.
- To take in-app payments, refund them, and pay hosts their share.
- To send you WhatsApp messages you need: login codes, a message when a host accepts you, reminders before activities you're going to and, for hosts, alerts when someone joins. You can turn these messages off in Profile → Settings (login codes still come when you ask for one).
- To keep Tallah safe: women-only activities, reports, blocks and spam limits.
Who can see your data
- Everyone: your name, photo, bio, city, the activities you host, how many thanks you've received, and the comments you write when you rate an activity (with your first name).
- The host and the confirmed members of an activity: the host's mobile number, and the members' numbers to the host from 3 hours before the start (or any time once we've verified the host's ID), so you can coordinate; and the activity's chat. In a women-only activity, who's going only shows to its host and the women who joined, and the meeting point only to women.
- Only you and Tallah's team: your gender, email, payment records and bank details.
- Tallah's team (admins): everything above, to run the app, handle reports and pay hosts. We never sell your data.
- Hosts who turn on "Let Tallah manage my account": Tallah's team can post, edit and cancel your activities, accept people, and write in your chats and communities for you, until you turn it off in Settings. It's off unless you turn it on, ask us to, or we set up your host page for you.
Photos and videos at activities
By joining an activity, you agree that the host and Tallah's team may take photos and videos during it and that you may appear in them. We only photograph and film people from behind, so your face isn't shown. We may use them to share the activity with the people who went and to promote Tallah and the host, for example in the app, on Tallah's and the host's social media, and in ads.
If your face shows in a photo or video by mistake, we won't post it, or we'll blur or crop your face out first. If you'd rather not appear at all, tell the host at the start of the activity. You can also ask us at any time to remove a photo or video of you from Tallah's channels, and we'll remove it as soon as we can. We can't remove copies other people have already saved or shared.
Service providers
We use these companies to run Tallah, and they only process your data for that purpose:
- Supabase: database, logins and file storage. Our database is hosted in India (Mumbai).
- Netlify: hosting the website.
- Paylink and Moyasar: in-app payments.
- Whapi.Cloud and WhatsApp: sending codes, reminders and alerts on WhatsApp.
- Brevo: sending password reset emails.
- Google (Google Ads): our ads on Google. When you open Tallah, Google's tag tells Google about the visit and may set cookies, so we can see how many people our ads bring. You can limit ads personalisation in your Google account at myadcenter.google.com.
Some of these providers store or process data outside Saudi Arabia. We only use them to provide the app.
How long we keep it
We keep your data while you have an account. When your account is deleted, we delete your profile, photos, the activities you host and your chat messages. Payment records are kept for as long as the law requires for accounting and tax, without your profile attached.
Your rights
You can see and change your profile at any time on the Me page. You can also ask us to give you a copy of your data, correct it, or delete your account, and you can withdraw your consent at any time. Contact us using the details below.
Security
Passwords and codes are stored only as secure hashes, connections are encrypted, and access to personal data is limited to the people who need it. No system is perfect, so please keep your password and the codes we send you to yourself.
Children
Tallah is for people aged 18 and over.
Changes
If we change this policy, we'll update this page and the date at the top. For important changes, we'll tell you in the app.
Contact us
Use "Contact us" on the Me page in the app.