Last Updated: 27/07/2026
SHLA is a social content-sharing platform organized around user-created communities called "Shelas." This Privacy Policy is intended to give you a clear and accurate understanding of what personal data SHLA collects when you use the Service, why it is collected, how it is used and shared, how long it is kept, and what rights and choices you have with respect to it.
Because SHLA's Service is inherently social — built around profiles, communities, posts, comments, and messaging — much of the information described in this Privacy Policy is generated through your own participation in the Service. We have written this document to reflect SHLA's actual technical architecture, including the specific third-party infrastructure providers that support authentication, storage, messaging, and notifications, rather than describing hypothetical or generic data practices.
SHLA's approach to your personal data is guided by a small number of consistent principles: we collect only the data reasonably necessary to provide and secure the Service; we do not sell your personal data to third parties; you retain ownership of the content you create, subject only to the limited license necessary for SHLA to operate the Service, as described in SHLA's Terms of Service; and we aim to give you meaningful visibility into, and control over, the information associated with your account, including the ability to delete your account and, in appropriate circumstances, your content.
This Privacy Policy is organized so that you can review, in turn, what information SHLA collects (Sections 4–27), why and how SHLA uses it (Sections 28–29), how visibility and sharing work (Sections 30, 37–38), how SHLA secures and retains data (Sections 39–44), what rights you have (Section 45), and how to contact SHLA with any questions (Section 60).
Table of Contents
SHLA is a social content-sharing platform organized around user-created communities called "Shelas." This Privacy Policy is intended to give you a clear and accurate understanding of what personal data SHLA collects when you use the Service, why it is collected, how it is used and shared, how long it is kept, and what rights and choices you have with respect to it.
Because SHLA's Service is inherently social — built around profiles, communities, posts, comments, and messaging — much of the information described in this Privacy Policy is generated through your own participation in the Service. We have written this document to reflect SHLA's actual technical architecture, including the specific third-party infrastructure providers that support authentication, storage, messaging, and notifications, rather than describing hypothetical or generic data practices.
SHLA's approach to your personal data is guided by a small number of consistent principles: we collect only the data reasonably necessary to provide and secure the Service; we do not sell your personal data to third parties; you retain ownership of the content you create, subject only to the limited license necessary for SHLA to operate the Service, as described in SHLA's Terms of Service; and we aim to give you meaningful visibility into, and control over, the information associated with your account, including the ability to delete your account and, in appropriate circumstances, your content.
This Privacy Policy is organized so that you can review, in turn, what information SHLA collects (Sections 4–27), why and how SHLA uses it (Sections 28–29), how visibility and sharing work (Sections 30, 37–38), how SHLA secures and retains data (Sections 39–44), what rights you have (Section 45), and how to contact SHLA with any questions (Section 60).
This Privacy Policy applies to personal data processed by SHLA in connection with your use of the Service, including data collected through the Android application, the iOS application, and the SHLA website. It does not apply to third-party websites, applications, or services that may be linked from within the Service, which are governed by their own privacy practices, as described in Section 51.
This Privacy Policy applies to all users of the Service worldwide. SHLA currently operates primarily in Egypt and is governed by Egyptian law as described in SHLA's Terms of Service, but SHLA's infrastructure providers may process data in other countries as described in Section 38.
For purposes of this Privacy Policy:
"Personal data" means any information relating to an identified or identifiable natural person, including information that can be used to identify you directly or indirectly, such as your name, email address, IP address, device identifiers, or account credentials.
"Shela" means a user-created community within the SHLA platform, organized around a specific topic, interest, or purpose, with its own members, content, and administrators.
"User Content" means any content that you or other users submit, post, upload, or otherwise make available through the Service, including posts, comments, chat messages, voice messages, photos, videos, and any other materials.
"Processing" means any operation performed on personal data, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, or deletion.
"Service Provider" means a third-party company or individual that processes personal data on behalf of SHLA for the purpose of providing the Service, including cloud infrastructure providers, authentication services, and notification services.
SHLA collects information in three ways: (a) information you provide directly to us, as described in Sections 5 through 17; (b) information we collect automatically when you use the Service, as described in Sections 18 through 27; and (c) information that is generated through your participation and activity within the platform. The categories of information we collect are described in detail in the sections that follow.
When you interact with the Service, you may provide SHLA with certain information voluntarily. The specific types of information you provide depend on how you choose to use the Service and which features you engage with. You are not required to provide any information to SHLA, but if you choose not to provide certain information, you may not be able to register for an account or use certain features of the Service.
When you register for an SHLA account, you are required to provide a display name (a username) and an email address. You may also provide a profile picture and a profile bio at your discretion. Your display name is visible to other users and is part of your public profile. Your email address is used for authentication, account recovery, and service-related communications, and is not publicly visible on the platform.
Your SHLA profile consists of your display name, profile picture (if you choose to upload one), profile bio (if you choose to provide one), and information about your activity on the platform, such as the communities you belong to and the posts and comments you have created. Profile information that is designated as public on the platform is visible to other users as described in Section 30.
When you create or join a Shela, SHLA collects information about your membership and, if you are a creator or administrator, your administrative role within that community. If you create a Shela, you may provide a community name, description, community profile picture, and community banner image. This information is visible to members of that community and, depending on the community's privacy settings, may be visible to all users of the Service.
When you create a post within a Shela, SHLA collects the text content of your post, any media attached to your post (including photos and videos), and metadata such as the timestamp of your post and the community in which it was posted. Posts are visible to members of the community in which they are posted, subject to the community's privacy settings and visibility rules described in Section 30.
When you comment on a post within the Service, SHLA collects the text content of your comment and metadata such as the timestamp of your comment and the post on which it was made. Comments are visible to users who can view the associated post, subject to the same visibility rules described in Section 30.
When you send a private chat message to another user through the Service, SHLA collects the content of your message and metadata such as the timestamp of the message, the sender, and the recipient. Chat messages are private between the participants of the conversation and are not visible to other users or to community administrators, except as necessary to investigate violations of SHLA's Terms of Service as described in this Privacy Policy.
When you send a voice message through the Service, SHLA collects the audio recording and metadata such as the timestamp of the message, the sender, and the recipient. Voice messages are stored and transmitted through SHLA's infrastructure providers and are subject to the same privacy and visibility rules as chat messages. Voice messages may be processed for purposes of abuse detection and platform safety as described in Section 56.
When you upload a photo to the Service, whether as a profile picture, community media, post attachment, or chat message attachment, SHLA collects the image file and associated metadata. Photos are stored using SHLA's infrastructure providers and are subject to the visibility rules described in Section 30 and the storage practices described in Section 31.
When you upload a video to the Service, SHLA collects the video file and associated metadata. Videos are stored using SHLA's infrastructure providers and are subject to the visibility rules described in Section 30 and the storage practices described in Section 31.
Community banners and community profile pictures are uploaded by community creators or administrators and are stored as part of the community's information on the Service. These images are visible to users who can access the community and, depending on the community's privacy settings, may be visible to all users of the Service.
When you submit a report about content or behavior on the Service, SHLA collects the information you provide in connection with your report, including the content or behavior being reported, the reason for your report, and any additional information you choose to include. Reports are used for moderation and enforcement purposes as described in Sections 56 and 59.
When you contact SHLA for support, whether by email or through any support channel made available by SHLA, SHLA collects your contact information, the content of your communications, and any information you provide in connection with your support request. Support communications are used solely for the purpose of addressing your request and improving the Service.
In addition to information you provide directly, SHLA automatically collects certain information when you access or use the Service. This information is necessary for the operation, security, and improvement of the Service and is described in detail in Sections 19 through 27.
We collect information about the device you use to access the Service, including the device model, operating system version, and unique device identifiers. This information is used for service optimization, troubleshooting, and security purposes as described in Section 28.
SHLA's systems generate logs of application activity, which may include information about your interactions with the Service, errors and crashes, performance data, and other technical information. Application logs are used for debugging, performance monitoring, and service improvement purposes.
We collect information about how you use the Service, including which features you use, how often you use them, how long you spend on the Service, and your interaction patterns with content and other users. This information is used to improve the Service, understand user behavior, and develop new features. Usage analytics are aggregated where possible and are not used to identify you individually except as necessary for the operation of the Service.
We collect certain network-related information, including network type (such as Wi-Fi or mobile data), network carrier, and connection quality metrics. This information is used to optimize content delivery and ensure reliable service performance.
We collect the IP address of the device you use to access the Service. IP addresses are used for security purposes, including fraud prevention, abuse detection, and enforcement of SHLA's Terms of Service, as well as for general service operations such as routing traffic and diagnosing technical issues.
The SHLA web application uses cookies and similar technologies to maintain session state, remember preferences, and support authentication. Cookies used by SHLA are limited to those necessary for the operation of the Service. You may configure your browser to reject cookies, but doing so may prevent you from using certain features of the web application. For more detail on our use of cookies, please refer to Section 48.
The SHLA mobile and web applications may use local storage mechanisms, including browser local storage and mobile application storage, to cache data and improve performance. Data stored locally remains on your device and is used to provide a faster and more reliable user experience.
We collect session identifiers and authentication tokens that are used to maintain your login session and authenticate your requests to the Service. Session data is managed through Supabase Authentication and is essential for the secure operation of the Service.
If you enable push notifications on your device, SHLA collects a push notification token provided by Firebase Cloud Messaging (FCM) or the relevant platform notification service. This token is used solely for the purpose of delivering push notifications to your device and is not used for any other purpose. You may disable push notifications at any time through your device settings.
SHLA uses the personal data we collect for the following purposes:
Where applicable law requires a legal basis for processing personal data, SHLA relies on one or more of the following legal bases: (a) the processing is necessary for the performance of a contract with you, including providing the Service in accordance with SHLA's Terms of Service; (b) the processing is necessary for compliance with a legal obligation to which SHLA is subject; (c) the processing is necessary for the purposes of the legitimate interests pursued by SHLA or by a third party, including the security and integrity of the Service, fraud prevention, and abuse detection, except where such interests are overridden by your interests or fundamental rights and freedoms; and (d) you have given your consent to the processing of your personal data for one or more specific purposes, where SHLA has obtained such consent.
Where SHLA relies on your consent as a legal basis for processing, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Public Profiles: Your display name, profile picture, and profile bio are visible to all users of the Service. Your email address is not publicly visible.
Public Communities: Content posted in public communities is visible to all users of the Service, including users who are not members of that community.
Private Communities: Content posted in private communities is visible only to members of that community. Private communities are not listed in public community directories and are not discoverable by non-members.
Chat Privacy: Private chat messages and voice messages are visible only to the participants of the conversation. SHLA does not access the content of private communications except as necessary to investigate violations of SHLA's Terms of Service or as required by law.
Community Administrators: Community administrators have access to content posted within their communities for the purpose of community moderation, as described in Section 58.
User-Generated Content Visibility: The visibility of user-generated content on the Service is determined by the privacy settings of the community in which it is posted and the default visibility settings of the content type.
Photos, videos, voice messages, and other media files uploaded to SHLA are stored using Supabase Storage, SHLA's cloud storage provider. Media files are retained in accordance with SHLA's Data Retention policy described in Section 42 and are subject to the same security measures described in Section 39. Media files may be temporarily cached by Cloudflare, SHLA's content delivery network provider, for performance optimization purposes.
SHLA uses Supabase Authentication to manage user registration, login, and session management. Supabase Authentication handles the secure storage of authentication credentials and the issuance of session tokens. When you log in using email and password, your password is hashed and stored securely by Supabase Authentication. SHLA does not have access to your plaintext password.
If you choose to register or log in using Google Sign-In, SHLA uses Supabase Authentication's Google OAuth integration. When you authenticate through Google, SHLA receives the email address associated with your Google account and your Google profile information as configured in your Google account settings. SHLA does not receive your Google account password. The authentication process is governed by Google's privacy practices in addition to this Privacy Policy, and you should review Google's privacy policy for information about how Google processes your data in connection with Google Sign-In.
When you register for SHLA using an email address, SHLA sends a verification email to the address you provide to confirm that you control that email address. Email verification communications are sent through SHLA's email service provider. Your email address is used for authentication and service-related communications as described in this Privacy Policy.
Certain features of the Service, including realtime messaging and activity updates, are powered by Supabase Realtime. This service enables realtime data synchronization between SHLA's servers and your device. Information transmitted through realtime services is subject to the same data handling practices described in this Privacy Policy.
SHLA uses Firebase Cloud Messaging (FCM), a service provided by Google, to deliver push notifications to your device. If you enable push notifications, SHLA sends notification content to FCM for delivery to your device. FCM processes push notification tokens as described in Section 27. You may disable push notifications at any time through your device settings. Google's privacy policy governs FCM's processing of data in connection with push notification delivery.
SHLA does not sell your personal data to third parties. SHLA shares personal data only in the following circumstances:
SHLA does not share personal data with third parties for their own direct marketing purposes. SHLA does not use third-party advertising networks or share personal data with advertising partners.
SHLA may share aggregated or de-identified information that cannot reasonably be used to identify you for any purpose consistent with the operation and improvement of the Service.
SHLA's infrastructure providers, including Supabase, Firebase (Google), and Cloudflare, may process and store data in countries other than Egypt, including the United States and the European Union. When personal data is transferred internationally, SHLA relies on appropriate safeguards, including standard contractual clauses where required by applicable law. By using the Service, you acknowledge that your personal data may be transferred to and processed in countries outside your country of residence, which may have data protection laws that differ from those in your country.
SHLA implements technical and organizational measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include encryption of data in transit using TLS, encryption of data at rest where supported by SHLA's infrastructure providers, and access controls that limit access to personal data to authorized personnel only.
SHLA's infrastructure providers, including Supabase and Cloudflare, maintain their own security programs and certifications, which SHLA relies on as part of its overall security posture. SHLA conducts periodic reviews of its security practices and those of its service providers.
Despite these measures, no method of electronic transmission or storage is completely secure, and SHLA cannot guarantee the absolute security of your personal data. SHLA will notify you and the relevant supervisory authorities of any data breach that poses a risk to your rights and freedoms in accordance with applicable law.
SHLA encourages you to take steps to protect your account, including using a strong, unique password and enabling any additional security features that SHLA may offer.
You play an important role in protecting your account and the information associated with it. You are responsible for maintaining the confidentiality of your account credentials and for all activity that occurs under your account. If you believe that your account has been compromised, you should contact SHLA immediately and change your password through the account settings available within the Service.
When you share personal data on the Service, including in posts, comments, profile information, and chat messages, you are responsible for the information you choose to share. SHLA encourages you to consider your privacy carefully before sharing personal data on the platform, particularly in public communities, and to review the visibility settings described in Section 30 to understand who can see the information you share.
SHLA retains personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Active Accounts: Personal data associated with active accounts is retained for the duration of your use of the Service.
Deleted Accounts: When you delete your account as described in Section 43, SHLA deletes or anonymizes your personal data within a reasonable period, subject to the exceptions described in this Section.
Temporary Backups: Personal data may be retained in temporary backups for a limited period after deletion for technical recovery purposes. Backup data is not accessible for normal business purposes and is securely deleted at the end of the backup retention period.
Legal Retention Requirements: SHLA may retain personal data for longer periods where required by applicable law, regulation, or legal process, or where necessary to establish, exercise, or defend legal claims.
Where personal data is retained for the purposes described above, it remains subject to the security measures described in Section 39 and is processed only for the purposes for which it was retained.
You may delete your SHLA account at any time through the account settings available within the Service. When you delete your account:
Content associated with a Shela may remain on the Service after a user's account is deleted if that content is part of a community's ongoing conversations. Community administrators may have the ability to manage content within their communities, including deleting content that violates community rules or SHLA's Terms of Service. When a community is deleted by its creator or administrators, the content associated with that community is removed from the Service in accordance with SHLA's Data Retention policy.
Depending on the laws applicable to you, you may have the following rights with respect to your personal data:
To exercise any of these rights, please contact SHLA using the contact information provided in Section 60. SHLA will respond to your request in accordance with applicable law. SHLA may request additional information to verify your identity before processing your request.
If you are not satisfied with SHLA's response to your request, you may have the right to lodge a complaint with a relevant supervisory authority in your jurisdiction.
The Service is not directed at individuals under the age of 13 (or the equivalent minimum age in your jurisdiction). SHLA does not knowingly collect personal data from individuals under this age. If SHLA becomes aware that an individual under the applicable minimum age has provided personal data without verifiable parental consent, SHLA will take steps to delete that information promptly. If you believe that SHLA has collected personal data from an individual under the applicable minimum age, please contact SHLA using the contact information provided in Section 60.
SHLA relies on the following third-party service providers to operate the Service. Each provider processes personal data only on SHLA's behalf and in accordance with the provider's role in the Service:
Supabase: SHLA uses Supabase for authentication services, database storage (PostgreSQL), media storage, and realtime communication services. Supabase is SHLA's primary backend infrastructure provider. Supabase's processing of personal data is governed by Supabase's Data Processing Agreement with SHLA.
Firebase (Google): SHLA uses Firebase Cloud Messaging (FCM) for push notification delivery. FCM processes push notification tokens and delivers notification content to your device. Google's privacy policy applies to FCM's processing of data.
Cloudflare: SHLA uses Cloudflare for content delivery network (CDN) services, DDoS protection, and security services. Cloudflare may process certain network-level information, including IP addresses, in the course of providing these services.
Google: SHLA uses Google Sign-In as an authentication method. When you choose to authenticate through Google, Google processes your authentication request in accordance with Google's privacy practices.
Resend: SHLA uses Resend for email delivery, including verification emails and service-related communications. Resend processes email addresses and email content for the sole purpose of delivering communications on SHLA's behalf.
The SHLA web application uses cookies that are strictly necessary for the operation of the Service. These cookies support essential functions including authentication, session management, and security. SHLA does not use cookies for advertising, tracking, or analytics purposes. You may configure your browser to block or delete cookies, but doing so may prevent you from logging in or using certain features of the web application.
In addition to cookies, SHLA may use other tracking technologies that are necessary for the operation of the Service, including local storage, session storage, and application caches as described in Sections 25 and 26. SHLA does not use tracking technologies for cross-site tracking, advertising, or behavioral profiling.
Some web browsers offer a "Do Not Track" ("DNT") signal that communicates your preference not to be tracked across websites. SHLA does not currently respond to DNT signals because the Service does not engage in the type of cross-site tracking that DNT is designed to address. SHLA does not use third-party tracking services or advertising networks that would track your activity across different websites.
The Service may contain links to third-party websites, applications, or services that are not owned or controlled by SHLA. This Privacy Policy applies only to personal data processed by SHLA in connection with the Service. SHLA is not responsible for the privacy practices of third-party websites, applications, or services. You should review the privacy policies of any third-party services you access through links from the Service.
SHLA may update this Privacy Policy from time to time to reflect changes in SHLA's data practices, legal requirements, or the Service itself. When SHLA makes material changes to this Privacy Policy, SHLA will notify you through the Service (including by email, if you have provided an email address) or by posting a prominent notice on the Service. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. SHLA encourages you to review this Privacy Policy periodically.
If SHLA is involved in a merger, acquisition, financing, or sale of all or substantially all of its assets, personal data may be transferred to the acquiring entity as part of that transaction. SHLA will notify you of any such transfer and will ensure that any acquiring entity agrees to handle your personal data in a manner consistent with this Privacy Policy.
SHLA may disclose personal data in response to lawful requests from public authorities, including to meet national security or law enforcement requirements. SHLA will review each request to ensure it is valid and consistent with applicable law, and will challenge overly broad or invalid requests where appropriate. SHLA will notify you of any request for your personal data from a public authority unless SHLA is prohibited from doing so by law.
SHLA processes account information, device information, IP addresses, and usage patterns to detect and prevent fraudulent activity on the Service. This processing is necessary for the security and integrity of the Service and is based on SHLA's legitimate interest in protecting the Service and its users from fraud.
SHLA processes content and metadata, including posts, comments, chat messages, voice messages, and user reports, to detect and prevent abusive behavior on the Service, including harassment, spam, and violations of SHLA's Terms of Service. This processing may involve automated analysis and manual review by SHLA personnel or community administrators, as described in Sections 58 and 59.
When you submit a copyright complaint or counter-notice in accordance with SHLA's Terms of Service, SHLA collects your contact information and the information contained in your notice or counter-notice. This information may be shared with the other party to the dispute and may be disclosed to legal authorities as required by applicable law.
Community administrators have access to content posted within their communities for the purpose of community moderation. Administrators may delete or manage content that violates community rules or SHLA's Terms of Service. SHLA does not share personal data of community members with administrators except as necessary for the administration and moderation of the community. Administrators are subject to SHLA's Terms of Service and are not permitted to use personal data accessed through their administrative role for any purpose other than community moderation.
Information submitted through user reports is used by SHLA and, where applicable, community administrators to investigate potential violations of SHLA's Terms of Service. Report information is treated as confidential and is accessed only by personnel and administrators who are involved in the moderation and enforcement process. SHLA may retain report information as necessary to maintain a record of enforcement actions and to identify patterns of abusive behavior.
If you have questions, concerns, or requests regarding this Privacy Policy or SHLA's data practices, please contact us:
Company: SHLA TECHNOLOGIES, شركة شلة للتقنية
Address: Cairo, Egypt
General Support: shelaaeg@gmail.com
Privacy Inquiries: shelaaeg@gmail.com