Effective 21 October 2026

Privacy Policy

This Privacy Policy describes how AL-MUHIB TOUR & TRAVELS uses personal information through AL-MUHIB UMRAH DESK, its private travel operations application. Contact: mohdosama7300800199@gmail.com.

1. Information processed

For travel administration, the business may record names, contact information, dates of birth, passport and visa information, travel itineraries, accommodation details, associated agents, invoices, payment references, amounts and travel documents. Information entered into the app is for the company's travel-service operations.

2. Purpose

The information is used to administer Umrah and related travel services, organize groups and passenger manifests, document bookings, issue invoices and vouchers, account for payments, communicate travel details, and maintain reliable records.

3. Google Drive data access

The app requests the https://www.googleapis.com/auth/drive.file permission together with basic Google account identity information to connect the owner’s Drive. It uses that permission to create its backup folder and create, read, verify or recover only files used by this application. We do not request access to all pre-existing Drive files. The app does not sell Google user data or use Google API data to train generalized artificial-intelligence models.

4. Security and storage

Business records and uploaded travel files are stored using private access controls in Supabase. App-created Google Drive backup payloads are encrypted before upload. The application’s integration uses encrypted server-side credentials and authenticated owner access. No internet service is risk-free; keep recovery credentials secure and contact the company if access is suspected to be compromised.

5. Service providers

Technical services can include Supabase (authentication, database, private file storage and server functions), Netlify (app hosting), Google Drive (owner-authorized encrypted backups), and Resend (administrative departure-email delivery). Information is used through these providers only as required for the described features.

6. Retention

Operational records are retained according to business and applicable legal requirements. Automated deletion of travel documents is currently disabled pending backup and restoration safeguards. Financial records may be retained where law or legitimate accounting purposes require it.

7. Access, correction and requests

For reasonable requests to review, correct or remove information, or questions about this policy, email mohdosama7300800199@gmail.com. Some data may be kept where required for legal or accounting purposes.

8. Google permissions and revocation

The Google account owner may revoke this app’s Google authorization using their Google Account connections settings. Revocation stops future access until the owner reconnects the application; it does not itself delete existing encrypted backup files.

9. Changes

This policy may be updated as the application's capabilities and data practices evolve. Material changes will be reflected on this page.