Guest wishes, planner notes, budget amounts and uploaded documents are stored to provide event tools. Safety reports record the reporter, contributor, reason and event; hosts review them. Contributor blocks are stored for the invited guest. New public wishes require host approval. Contact alajmi4321@gmail.com for inappropriate content or support.

نحفظ التهاني وملاحظات التخطيط ومبالغ الميزانية والمستندات لتقديم أدوات المناسبة. تتضمن البلاغات المبلغ والمرسل والسبب والمناسبة ويُراجعها المضيف. نحفظ حظر المرسلين للضيف وتحتاج التهاني الجديدة موافقة المضيف قبل نشرها. للدعم: alajmi4321@gmail.com.

Privacy

Last updated 23 October 2026 · Dawati and the Daawati app (formerly Dawati Door)

Dawati sends event invitations over WhatsApp and checks guests in at the door. This page describes every category of information the service holds, why it holds it, and what leaves your control.

Who holds what

If you are a guest, the person hosting your event decides what to record about you and how long to keep it. Dawati stores it on their behalf. Ask the host to correct or delete your details; they can do it themselves at any time.

If you are a host, the information below is yours, and you control it.

What a host account holds

• Your name, email address, and phone number.
• Your password, stored only as a bcrypt hash. It cannot be read back, by us or anyone else.
• Your plan, and the date the account was created.
• Your events: titles, dates, venue, and any cover photo, video, or music you upload.

What an event holds about guests

Entered by the host, not collected from the guest:

• Name and phone number — the phone number is used to send the invitation over WhatsApp.
• Hall, seating table, and whether the invitation admits companions.
• A unique invitation token for the link and QR, and an event-specific eight-digit entry code.
• For a lost-invitation override: the authorizing host, admission time, count and reason. These audit records are deleted with the guest or event.
• RSVP status and party size, as answered by the guest.
• Arrival records: how many people were admitted, and when.
• A voice recording, only if the host switches the audio guestbook on and the guest chooses to leave one.

The Daawati app

The door scanner works without a network connection, so it keeps a copy of the guest list on the phone. That copy is deliberately smaller than what the server holds:

• It stores each guest's name, phone number, hall, RSVP status, party size, table assignment and arrival status in the app’s private storage.
• Authorized hosts can add and edit guests and save invitation message templates. These changes are sent to this service and synchronized with the website.
• Downloaded rosters do not contain invitation tokens or numeric entry codes. A token is a live credential — anyone holding one can open that guest's invitation. Rosters contain SHA-256 hashes of the token and event-scoped numeric code, which support local credential matching without including the original credentials, plus the token's last 8 characters so an usher can look up a guest whose code will not scan.
• When an authorized host opens sharing controls, the app retrieves the personal invitation link and, when eligible, its entry-pass image. Links and images can be copied or shared through apps chosen by the host. Temporary export files are removed after sharing; copies saved or sent by the host remain under their control.
• Scanner camera frames are decoded on the device and discarded. Photos, video, documents and audio you deliberately upload through event tools are stored by this service. The microphone is used only when you choose to record a guestbook message or host greeting.
• The local copy lives in the app's private storage and is deleted when you sign out.
• Each signed-in phone gets a device token so it can sync. You can revoke a lost phone's server access in Account → Signed-in phones. Revocation does not remotely erase an already downloaded roster.

The app contains no analytics, no advertising, and no third-party tracking of any kind. Account and event data synchronize with this service. The app also uses Expo services to check for and download app updates; those requests expose ordinary network information such as the IP address and app/platform version. Native-screen fonts are bundled. The invitation editor, planner and guestbook screens embed authenticated website tools and require internet; their website fonts may load from Google Fonts. Short-lived, single-use tickets create a private web session bound to your signed-in device, without exposing your device token to the page. Sharing through WhatsApp or another app is initiated by the host and is subject to that service’s privacy policy.

Apple subscriptions

If you purchase Pro or Elite in the iPhone app, Apple handles payment. We store an account-specific random identifier, Apple transaction and original-subscription identifiers, product and plan, purchase and expiry dates, and refund or revocation status. We send the transaction identifier to Apple to verify your subscription and receive renewal and refund updates. These records are linked to your Daawati account to activate access and restore purchases; they are not used for tracking. We do not receive your payment-card details. Deleting your Daawati account deletes these records from our service, but does not cancel an Apple subscription. Manage or cancel it in your Apple subscription settings. Apple retains its own purchase records under its privacy policy.

Entrance worker accounts

A host can create a separate worker account for one event. Workers can see names, RSVP, hall/table, admission allowance and arrival counts, and admit guests after verifying their credential. Worker rosters omit phone numbers. Workers cannot edit event or guest details, share invitations, export rosters, or use host overrides. Worker admissions require internet. Hosts can revoke access; revocation blocks future server requests but does not remotely erase data already downloaded. Admission records identify the account performing the admission.

Optional venue welcome screen

If the host enables a welcome screen, a guest’s name appears at the venue after their first successful web-scanner admission. Anyone holding the display link can see recent arriving names and the event’s welcome artwork, but not phone numbers or invitation tokens. Links expire after 24 hours and the host can disconnect them sooner. Welcome records are removed when the guest, event or account is deleted.

Optional ChatGPT connection and gate backups

If a host connects ChatGPT, they approve access to one selected event. ChatGPT can retrieve that event’s guest names, phone numbers and attendance, and add guests. It cannot send invitations, delete guests or change attendance. The host can revoke access in Settings → Connections. Data already retrieved by ChatGPT is subject to the host’s ChatGPT account settings and OpenAI’s policies.

Gate checklist exports contain names, hall, RSVP, party size and entry totals, without phone numbers or invitation tokens. Hosts control copies they download or print. Export snapshots, import receipts and guest-addition retry receipts stay until the associated event or account is deleted. Revoking a connection blocks future access but does not erase copies already downloaded by that connection.

Others who see something

• Our hosting provider (Hostinger) operates the servers and keeps standard access logs.
• Google Fonts serves the typefaces used by this website, which means Google receives the IP address of anyone loading a page here. This applies to website pages, including website tools displayed inside the app. Native app screens use bundled fonts.
• WhatsApp carries invitations you choose to send. Sending one opens WhatsApp with a message ready; what happens after that is governed by WhatsApp's own privacy policy.
• OpenAI / ChatGPT receives the event data described above only when a host explicitly connects their account and uses those tools.

Nobody else. We do not sell personal information, we do not share it for advertising, and we run no advertising or tracking on this service.

How long it is kept

Event and guest information is kept until the host deletes it. Deleting an event removes its guests, RSVPs, arrival records, and uploaded media with it. Closing your account removes everything belonging to it. Deletion is immediate and permanent — there is no recovery.

Security

Traffic is encrypted with HTTPS. Passwords are bcrypt-hashed. Repeated failed sign-ins are throttled. A guest's invitation link is protected by an unguessable 24-character token, and host pages check ownership on every request, so one host can never reach another's event.

Your choices

Guests: contact your host to see, correct, or delete what is held about you. Hosts: edit or delete anything from your dashboard, or write to us at the address below and we will act on it.

Contact

alajmi4321@gmail.com