Privacy Policy

Who we are (data controller)

Coffee Kanaka | كنكة قهوة is a nonprofit community project operated by Moataz Ibrahim, Dubai, United Arab Emirates. He is the controller of your personal data. Contact: hello@coffeekanaka.com.

What we collect

• Account: your name, email address, password (stored only as a secure hash by our auth provider), preferred language, and your confirmation that you are 18+ and accept the community guidelines.
• Optional profile details: phone number.
• Event activity: your RSVPs (going / maybe / not going), waitlist positions and event check-ins.
• Notifications: if you turn on push notifications, a technical push subscription for your device and your notification preference.
• Reports you send through “Report a Concern”: the category, description, related event and, only if you choose, your account and contact details. Anonymous reports are not linked to your account.
• Security data: a salted, one-way hash of your IP address to rate-limit reports (cleared after 30 days), and the IP address of failed admin-login attempts (deleted after 24 hours).
• Usage statistics: a daily count of views per page. No IP address, no device fingerprint, no tracking cookies.

Why we use it and our legal basis

• To create and run your account and let you RSVP, join waitlists and attend events — necessary to provide the service you asked for.
• To send you emails you need (e.g. confirming your email address) and, only if you opt in, notifications about new events — your consent, which you can withdraw anytime in My Kanaka.
• To keep the community safe: handling reports, enforcing the guidelines and preventing abuse — our legitimate interest in a safe community, and to comply with law.
• To understand which pages are useful using aggregate page counts — legitimate interest, with no personal data.

We never sell your data, never share it with advertisers and never use it for profiling.

Who processes it for us

• Supabase (database, authentication and file storage) — hosted in the AWS Mumbai region (ap-south-1), India.
• Cloudflare (website hosting, security and content delivery) — global network.
• Resend (sending our emails, such as email confirmations and admin alerts).
• Google Firebase Cloud Messaging / Apple Push / Mozilla push services — only if you enable push notifications, to deliver them to your device.

These providers act on our instructions and may process data outside the UAE. We only use providers that offer appropriate safeguards for international transfers.

Cookies and similar technologies

We use essential cookies only: one to keep you logged in (Supabase auth / kk_session), one to remember your language (lang), and, for admins, a short-lived security cookie (kk_admin_gate). Your browser also stores your light/dark theme and whether you installed the app (local storage). We use no advertising or analytics cookies, so no cookie banner is needed.

How long we keep it

• Account and profile: until you delete your account.
• RSVPs: while your account exists. When you delete your account, RSVPs for upcoming events are removed and past RSVPs are kept only as anonymous counts.
• Reports: as long as needed to handle them, and for up to 24 months after they are resolved for safety records, unless the law requires longer.
• Push subscriptions: until you turn notifications off, your browser revokes them, or you delete your account.
• Security data: report-rate-limit hashes 30 days; failed admin-login IPs 24 hours.

Your rights

In line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, PDPL), you can ask to access, correct, or delete your personal data, restrict or object to its processing, withdraw consent, and receive a copy of your data. You can edit your profile and notification settings in My Kanaka, and delete your account yourself (My Kanaka → Delete my account). You can also email hello@coffeekanaka.com from your account email — we reply within 30 days. If you're not satisfied, you may contact the UAE Data Office.

Photos

Community photos are published only with the consent of the people in them. Ask us and we'll remove any photo of you.

Age

Coffee Kanaka is for people aged 18 and over. We don't knowingly collect data from children.

Security

Data is encrypted in transit (HTTPS/TLS), access is restricted to a small number of admins protected by an additional password, and database access is limited by row-level security.

Changes

If we change this policy we will update the date above and, for significant changes, tell members by email or on the website.