Privacy Policy

Last updated: 16th February 2026

1. Introduction

Baithak ("we", "us", "our") is owned and operated by Muhammad Umar Hayat and Faisal Ahmad, based in Graz, Austria. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Baithak mobile application and related services (the "Service"). If you do not agree with this Privacy Policy, please do not use the Service.

For questions, contact: admin@baithak.io

2. Who We Are (Data Controller)

Under the General Data Protection Regulation (GDPR), the data controllers are Muhammad Umar Hayat and Faisal Ahmad, based in Graz, Austria. Email: admin@baithak.io

3. Information We Collect

A. Account Information

When you create an account using Google or Apple Sign-In, we collect your name, email address, and profile photo (if provided). Authentication is handled through Google or Apple.

B. User-Generated Content

We collect and store content you voluntarily provide, including posts, likes, and profile images. This content is visible to other users within the app.

C. Technical Information

We may collect device information, app version, crash logs, and diagnostic data. We currently do not intentionally collect IP addresses, but server infrastructure may process IP data automatically for security purposes.

D. Backend & Infrastructure

Baithak uses Supabase for authentication and database services. In the future, we may integrate analytics services such as Expo or Firebase. If implemented, this policy will be updated accordingly.

Under GDPR, we rely on:

  • Contractual necessity — to provide the Service.
  • Legitimate interest — to improve performance and prevent abuse.
  • Legal obligation — where required by law.

5. How We Use Your Information

We use collected data to create and manage accounts, provide social features (posts, likes), improve app performance, diagnose technical issues, and ensure security and prevent misuse. We do not sell personal data.

6. Data Retention

We retain data as long as your account is active. When you delete your account, posts are deleted immediately and profile data is removed from active systems. Backup systems may retain encrypted copies for a limited period for security purposes.

7. Your Rights Under GDPR

If you are located in the EU, you have the right to access your personal data, correct inaccurate data, request deletion ("Right to be Forgotten"), restrict processing, data portability, object to processing, and lodge a complaint with an EU supervisory authority. Requests can be sent to: admin@baithak.io

8. Data Transfers

Some service providers may process data outside the European Union. Where this occurs, appropriate safeguards such as Standard Contractual Clauses are applied.

9. Children's Privacy

Baithak is not directed at children. The minimum age is 13 years (16 years in the EU). We do not knowingly collect data from children below the applicable age.

10. Security

We implement reasonable technical and organizational measures to protect user data. However, no system is completely secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on our website with a revised date.