Skip to content
NAKTASHIF | نكتشف

Privacy Policy

Effective date: 16 October 2026

This Privacy Policy explains how NAKTASHIF processes information when you use our website, commerce-related services, or customer-support channels, including WhatsApp.

1. Information we may process

When you interact with NAKTASHIF through WhatsApp or our digital services, we may process information needed to provide the service, including your WhatsApp identifier or phone number, profile name when supplied by WhatsApp, message content, timestamps, delivery or read status, and technical event identifiers.

If you ask about an order, we may process relevant order-reference and fulfilment information that is already available in our approved commerce systems. We do not ask you to send passwords, card details, one-time passcodes, or other authentication secrets through WhatsApp.

2. How we use information

We use information to respond to customer questions, provide approved product and order information, route requests to a human when appropriate, prevent duplicate processing, maintain security and service reliability, and improve support operations.

Automated tools, including AI-assisted customer-service systems, may be used to classify a request, retrieve relevant approved information, and draft or provide a response. High-risk legal, privacy, payment-dispute, refund, or exceptional commercial decisions may be routed for human review.

When you use Ask Ahmad with a photo, the photo is reduced on your device and its location data is removed; it is sent once to our analysis provider without being stored; we do not keep it or use it to train any system. If the creature is not in NAKTASHIF, we keep only a short text description of its visible features so we can add it later.

3. On the website: questions to Ahmad, measurement, the store link and your browser

When you ask Ahmad a question on the website, we use it to find an answer in approved NAKTASHIF knowledge. To word an answer, or to translate a question that is not in Arabic or English, the question, up to four earlier questions of the same conversation and the approved knowledge needed may be sent to our AI service provider (section 4). Please do not write personal information in a question.

If Ahmad has no approved answer, we keep the question as a topic to research: the creature and subject it is about, how many times and on which days it was asked, and the wording of the question and of similar questions on the same topic, each one line of at most 160 characters (a question in another language is kept in its English machine translation). Before the wording is kept, e-mail addresses and runs of five or more digits written as 0–9 or ٠–٩ are replaced automatically by a mark. This cleaning recognises only these two patterns: names, places, phone numbers written with spaces or dashes and other details are not removed, so they may stay in the wording if they are written in a question. We do not keep the account, IP address or device of the person who asked with the topic. The wording is used for research, including by automated research tools and AI services that look for sources, and it is deleted no later than 180 days after we receive it, together with its copies kept with research tasks, follow-up requests, ratings and notifications; the topic, its counts, the research it started and the sources found are kept. If the knowledge is approved later, the topic may be shown on the website as a question Ahmad can now answer, in wording written and approved by our team; your wording and who asked are not shown. The deletions described in this section apply to the records in our database; they do not cover backups or logs kept by our hosting providers, wording already sent to a service provider (section 4) or e-mails already sent.

If you ask us to tell you when an answer is available, we keep with your request the question, cleaned as described above, and your account or, if you are not signed in, the e-mail address you confirm. We use that address only for this follow-up; the message is sent through our e-mail provider and contains your question. The address is deleted 30 days after it was last used if no other follow-up or open request needs it, the request is deleted with the address or with your account, and the question's wording in it is deleted under the same 180-day rule. If you rate an answer, we keep the rating, the reasons you choose, any comment you write, as you wrote it, and the question, cleaned as described above, linked to your account if you are signed in. The comment and the question are deleted no later than 180 days after we receive the question, and the rating and the reasons are kept; no period for deleting them automatically has been set yet, we will state it here when it is, and they are unlinked from you when your account is deleted.

If you are signed in to an Explorer account, your questions as you wrote them (they are not cleaned) and short extracts of Ahmad's answers are also saved in your account's history of questions to Ahmad, so you can return to them. The history stays on until you turn it off in your account's privacy settings. You can delete one question or the whole history at any time; each question is deleted after 180 days, and the whole history is deleted with your account.

We measure the use of the website as daily totals: page views, visits that arrive through shared links and the app they came from, presses of the share buttons, searches that find no creature, and questions Ahmad had no approved answer for. These totals use no cookies and are not linked to an IP address, account or device. Before search or question text is counted, e-mail addresses, phone numbers, runs of five or more digits and a name given after phrases such as “my name is” or «اسمي» are removed; other details may remain. Totals more than 180 days old are deleted periodically as new totals are recorded, except the totals of questions Ahmad had no approved answer for: no later than 180 days after they are counted, their text is replaced by a mark and only the number is kept. Browsers that send Do Not Track or Global Privacy Control, and automated crawlers, are not counted.

If you have an Explorer account and turn on the link with the NAKTASHIF store on Salla, we compare the e-mail address on each of your store orders with the confirmed e-mail address of your account. The order's e-mail address is used only for this comparison and is not saved with the link. The link keeps your Salla customer number, the store, the link's status and its dates, and your linked orders are marked with your customer number. Turning the link off or deleting your account deletes the link and your consent to it. Your orders themselves are processed by the store and our order systems as described in sections 1 and 2.

Your browser keeps, on your device only, the codes of the last creature, world and journey pages you opened and when, so you can continue where you left off; it keeps no page text and no questions. To show them, the website sends up to five of these codes to check that the pages are still published, and does not store them. You can remove a place or clear the list in “My journey”, and the list is cleared from this browser when you sign out. The browser also keeps display choices you make on the website, such as Ahmad's dialect or reduced motion.

4. Service providers and disclosures

NAKTASHIF may use service providers that support messaging, hosting, databases, automation, commerce, and AI-assisted support. Depending on the service used, this can include Meta/WhatsApp, Vercel, Supabase, n8n, approved AI service providers, and approved commerce platforms.

We do not sell personal information. We disclose information only as needed to operate the service, comply with law, protect rights and security, or complete a user-requested transaction or support task.

5. Data minimization, retention, and security

We aim to collect and retain only information reasonably necessary for the purposes described above. Operational records may be retained for security, audit, fraud prevention, service continuity, legal, or support purposes, and are deleted or de-identified when they are no longer reasonably required.

We use technical and organizational safeguards intended to protect information, including authenticated service-to-service connections, restricted credentials, role-based access, event deduplication, and audit logging. No method of storage or transmission is completely risk-free.

6. Your choices and rights

You may request access, correction, or deletion of personal information associated with your interactions, subject to applicable legal and operational retention requirements.

For deletion instructions, use the Data Deletion page linked below. You may also make a deletion request in the same official WhatsApp conversation through which you contacted NAKTASHIF.

7. Children

NAKTASHIF may provide educational products for families and children, but the customer-service channels covered by this policy are intended for adults or for use by a parent, guardian, educator, or other authorized adult. We do not intentionally request sensitive personal information from children through WhatsApp support.

8. International processing

Some service providers may process or store information in countries other than your own. Where applicable, we use available contractual, technical, and organizational safeguards for such processing.

9. Changes to this policy

We may update this policy when our services, legal obligations, or data practices change. The current version will be published at this URL with its effective date.

10. Contact and deletion requests

Privacy and deletion requests can be submitted through the official NAKTASHIF customer-service channel used for your interaction. Please do not include passwords, payment-card details, one-time passcodes, or other authentication secrets in a request.

View data deletion instructions