Privacy Policy

Last updated: August 13, 2026

1. Introduction

Mamsha ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our consultation platform.

2. Information We Collect

We collect the following types of information:

• Account and Profile Information: Name, email address, phone number, user ID, preferences, profile photos or videos, and professional information or credential documents for consultants.
• Service Content: Bookings, purchase and payment status, messages, reviews, support requests, searches, AI prompts, and any files, calendar events, or consultation notes you choose to provide.
• Calls: Live audio and video streams needed for consultations. Mamsha does not record calls, but Azure Communication Services processes the streams while a call is active.
• Technical and Usage Data: IP address, approximate location derived from IP, browser and device information, app or installation identifiers, push tokens, app interactions, crash reports, and performance diagnostics.
• Marketplace Analytics: Optional consent status, pseudonymous IDs, and marketplace actions. These events are designed to exclude raw chat, payment-card, and consultation-sensitive content.
• Payments: Card details are entered on MyFatoorah's external checkout website. Mamsha receives transaction status and references but does not access or store full card numbers.

3. Camera and Microphone Access

Mamsha requests access to your device's camera and microphone solely for video consultation features. We do not:

• Record or store video calls without your explicit consent
• Access the camera or microphone outside an active consultation

Azure Communication Services processes live audio, video, and call metadata to provide the call.

4. How We Use Your Information

We use your information to:

• Provide and improve our consultation services
• Process payments and manage bookings
• Facilitate communication between customers and consultants
• Send service-related notifications
• Ensure platform security and prevent fraud
• Generate governed, aggregated marketplace intelligence after consent where required

5. Data Sharing

We share your information only with:

• Consultants you book appointments with (relevant booking details only)
• Payment processors for transaction handling
• Service providers who operate platform functions, including Microsoft Azure and Azure Communication Services, MyFatoorah, Firebase, and Google Gemini

Information submitted to an optional AI feature, such as a search request, question, profile text, review, or CV content, is sent to Google Gemini to generate the requested result. Do not include personal or sensitive information that is unnecessary for the request.

Marketplace analytics do not include raw chat contents, full payment details, card data, provider payloads, or consultation-sensitive content.

6. Data Security

We use access controls, audit logging, security monitoring, and encryption in transit to protect information. No method of storage or transmission can be guaranteed completely secure.

7. Your Rights

You have the right to:

• Access and update your personal information
• Request deletion of your account and associated data using the process below
• Opt-out of marketing communications
• Decline or withdraw consent for optional marketplace analytics
• Withdraw camera/microphone permissions at any time via device settings

8. Retention and Analytics Governance

We generally keep account and service data while your account is active and as needed to provide Mamsha. Marketplace analytics events are retained for up to 400 days and are detached from your user account during deletion.

After deletion, Mamsha retains minimized booking and payment transaction facts and limited operational, safety, fraud-prevention, and audit records where needed for reconciliation, disputes, abuse prevention, and legal obligations. Direct contact details and free-text consultation content are removed or anonymized. The current system does not yet enforce a maximum expiry period for these retained records; Mamsha is completing a legally approved retention schedule and automated expiry controls.

Service-provider telemetry and backups follow the provider's retention and deletion schedules and may not disappear immediately when the Mamsha account workflow completes.

9. Account and Data Deletion

This process applies to Mamsha — Expert Consultations (Android package app.mamsha.consultation), operated by BOARD BAY X PROJECT MANAGEMENT COMPANY.

How to request deletion

1. Email support@mamsha.app from the address associated with your Mamsha account. If you cannot access that address, provide enough account information for us to verify ownership without sending a password or one-time code.
2. Use the subject “Mamsha account deletion request.” We will verify the request and schedule deletion with a 30-day grace period. You may cancel during that period by replying to support.
3. After the grace period, an authorized operator processes the request. External-provider cleanup is checked and retried if a provider reports a temporary failure.

Request account deletion

Deleted or anonymized

• Account profile, credentials, consultant documents, owned profile media, authentication sessions, device and push registrations, saved payment-method references, calendar connection data, and notification preferences.
• Message, support, review, report, and booking free text is removed or replaced with a deletion marker; direct identifiers are removed from marketplace analytics records.
• Azure Communication Services identity and Mamsha-owned profile media or credential files are scheduled for external deletion.

Retained after deletion

• Minimized booking and payment transaction facts, such as timestamps, status, price, payment reference, and audit history, with contact details and free text removed.
• Limited operational, safety, fraud-prevention, dispute, and legal records where necessary. These records currently have no automated maximum expiry; the retention period requires a legal/business decision and expiry controls.
• Provider telemetry or backups until the applicable provider retention or deletion process completes.

10. Contact Us

For privacy-related questions or concerns, contact us at:

Email: support@mamsha.app

Website: https://mamsha.app

Mamsha is a trade name of BOARD BAY X PROJECT MANAGEMENT COMPANY, registered in Kuwait under Commercial Registration No. 520888. D-U-N-S: 850398246.

11. Changes to This Policy

We may update this Privacy Policy periodically. Changes will be posted on this page with an updated date.