Privacy
Last updated 6 September 2026 · Dawati and the Dawati Door app
Dawati sends event invitations over WhatsApp and checks guests in at the door. This page describes every category of information the service holds, why it holds it, and what leaves your control.
Who holds what
If you are a guest, the person hosting your event decides what to record about you and how long to keep it. Dawati stores it on their behalf. Ask the host to correct or delete your details; they can do it themselves at any time.
If you are a host, the information below is yours, and you control it.
What a host account holds
- Your name, email address, and phone number.
- Your password, stored only as a bcrypt hash. It cannot be read back, by us or anyone else.
- Your plan, and the date the account was created.
- Your events: titles, dates, venue, and any cover photo, video, or music you upload.
What an event holds about guests
Entered by the host, not collected from the guest:
- Name and phone number — the phone number is used to send the invitation over WhatsApp.
- Hall, seating table, and whether the invitation admits companions.
- A unique invitation token, which is what makes each guest's link and QR code work.
- RSVP status and party size, as answered by the guest.
- Arrival records: how many people were admitted, and when.
- A voice recording, only if the host switches the audio guestbook on and the guest chooses to leave one.
The Dawati Door app
The door scanner works without a network connection, so it keeps a copy of the guest list on the phone. That copy is deliberately smaller than what the server holds:
- It stores each guest's name, hall, RSVP status, party size, and table label.
- It never receives guest phone numbers. They are not part of what the app downloads.
- It never receives invitation tokens. A token is a live credential — anyone holding one can open that guest's invitation. The phone gets only a SHA-256 hash of the token, which is enough to recognise a QR code and useless for anything else, plus the token's last 8 characters so an usher can look up a guest whose code will not scan.
- The camera is used to read QR codes and nothing else. Frames are decoded on the device and discarded; no image or video is stored or transmitted, ever.
- The local copy lives in the app's private storage and is deleted when you sign out.
- Each signed-in phone gets a device token so it can sync. You can revoke a lost phone's access at any time — ask us and the device is cut off immediately.
The app contains no analytics, no advertising, and no third-party tracking of any kind. It talks to exactly one server — this one — and to nothing else. Its fonts are built into the app rather than fetched, so simply opening it contacts no one.
Others who see something
- Our hosting provider (Hostinger) operates the servers and keeps standard access logs.
- Google Fonts serves the typefaces used by this website, which means Google receives the IP address of anyone loading a page here. This applies to the website only — the mobile app bundles its fonts and makes no such request.
- WhatsApp carries invitations you choose to send. Sending one opens WhatsApp with a message ready; what happens after that is governed by WhatsApp's own privacy policy.
Nobody else. We do not sell personal information, we do not share it for advertising, and we run no advertising or tracking on this service.
How long it is kept
Event and guest information is kept until the host deletes it. Deleting an event removes its guests, RSVPs, arrival records, and uploaded media with it. Closing your account removes everything belonging to it. Deletion is immediate and permanent — there is no recovery.
Security
Traffic is encrypted with HTTPS. Passwords are bcrypt-hashed. Repeated failed sign-ins are throttled. A guest's invitation link is protected by an unguessable 24-character token, and host pages check ownership on every request, so one host can never reach another's event.
Your choices
Guests: contact your host to see, correct, or delete what is held about you. Hosts: edit or delete anything from your dashboard, or write to us at the address below and we will act on it.
Contact
الخصوصية
آخر تحديث 6 September 2026
يرسل دعوتي دعوات المناسبات عبر واتساب ويسجّل دخول الضيوف عند الباب. توضّح هذه الصفحة ما الذي يُحفظ، ولماذا، ومن يطّلع عليه.
من يملك المعلومات
إذا كنت ضيفاً، فإن صاحب المناسبة هو من يقرّر ما يُسجَّل عنك ومدة الاحتفاظ به، ونحن نحفظه نيابةً عنه. تواصل معه لتصحيح بياناتك أو حذفها. وإذا كنت مضيفاً، فالمعلومات ملكك وتحت تصرّفك.
ما يُحفظ
- حساب المضيف: الاسم والبريد ورقم الهاتف، وكلمة المرور مشفّرة بحيث لا يمكن قراءتها.
- المناسبات: العنوان والتاريخ والمكان وما يرفعه المضيف من صور أو فيديو أو موسيقى.
- الضيوف: الاسم ورقم الهاتف والقاعة والطاولة وحجم المجموعة وحالة الردّ وأوقات الدخول.
- تسجيل صوتي، فقط إذا فعّل المضيف دفتر الضيوف الصوتي واختار الضيف ترك رسالة.
تطبيق باب دعوتي
يعمل التطبيق دون اتصال بالإنترنت، لذلك يحتفظ بنسخة من قائمة الضيوف على الجهاز. هذه النسخة أقل مما لدى الخادم عمداً:
- لا يستقبل التطبيق أرقام هواتف الضيوف إطلاقاً.
- لا يستقبل رموز الدعوة، بل بصمة مشفّرة (SHA-256) تكفي للتعرّف على رمز الاستجابة السريعة ولا تصلح لشيء آخر، مع آخر ٨ خانات للبحث اليدوي.
- تُستخدم الكاميرا لقراءة رمز الاستجابة السريعة فقط، ولا تُحفظ أي صورة أو مقطع ولا تُرسل.
- تُحذف النسخة المحلية عند تسجيل الخروج.
لا يحتوي التطبيق على أي تتبّع أو إعلانات أو أدوات تحليل، ولا يتصل بأي جهة سوى خادمنا.
الاحتفاظ والحذف
تُحفظ البيانات إلى أن يحذفها المضيف. حذف المناسبة يحذف ضيوفها وردودهم وسجلات دخولهم وما رُفع لها، وحذف الحساب يزيل كل ما يخصّه. الحذف نهائي ولا يمكن التراجع عنه.