Privacy Policy

Last updated: 19 August 2026

Wafra collects offers and discounts from shops across Bahrain into one place. This page explains what we collect, why, who we share it with, and what you can ask us to do about it.

1. Who we are

Wafra is based in the Kingdom of Bahrain. For anything to do with your data: info@wafra.bh

2. What we collect

Without an account: a random device identifier that says nothing about who you are, usage events (offers opened, searches, categories browsed), and any offers you save — which stay on your device.

With an account: your email address (required to sign in), and optionally your name, phone number and date of birth. Also your saved offers, so they follow you to another device, and your preferences: language, appearance, and whether you want offer emails.

If you register a business: business name, description, logo and photos, contact numbers, and branch addresses.

If you contact us: your name, email and the message, kept so we can reply.

What we do not collect: your location, a device fingerprint, advertising identifiers, or any payment details — the app processes no customer payments at all.

3. Why we use it

• To run the service — show offers, keep your saved list, manage your account.
• To improve it — see which categories get used and what people search for and don't find, so we know which shops to add.
• To contact you — offer emails if you switched them on yourself, replies to your questions, and necessary service messages such as password resets.

Our legal grounds: performing the service you asked for, your explicit consent for marketing messages, and our legitimate interest in improving the product and protecting it from abuse.

4. Offer emails

You only receive offer emails if you turned them on yourself in the app's settings. Every message carries a one-click unsubscribe link that needs no sign-in, and you can switch them off in settings at any time.

5. Who we share it with

We do not sell or rent your data. We use service providers who process data only on our behalf:

• Supabase — database hosting and sign-in
• Vercel — hosting the app and website
• Resend — sending email
• Sentry — recording technical faults so we can fix them (it receives no personal data, and its servers are in the EU)
• Google — if you choose to sign in with Google

We may also disclose data where the law requires it, or to protect our rights or someone's safety.

Some of these providers store data outside Bahrain. By using the app you consent to that transfer; we work with providers who meet recognised protection standards.

6. The shops we list

Wafra lists offers from independent shops. When you contact or visit one, your relationship is directly with them and we are not a party to it. We do not pass your personal data to a shop unless you contact them yourself.

7. How long we keep it

• Account data — for as long as your account exists.
• After deletion — personal data is removed within 30 days.
• Usage events — kept in aggregate, not identifying you.
• Contact messages — deleted 12 months after they are closed.

8. Your rights

Under Bahrain's Personal Data Protection Law (No. 30 of 2018) you may ask to see the data we hold about you, correct anything wrong, have it deleted, object to its use for marketing, and withdraw consent at any time.

Write to info@wafra.bh and we will respond within 30 days. You also have the right to complain to Bahrain's Personal Data Protection Authority.

9. Deleting your account

In the app: Settings → Delete account. Or email info@wafra.bh from your registered address.

10. Security

Connections to the app are encrypted, and passwords are stored hashed so nobody can read them — us included. Access to customer data is limited to what running the service actually requires. No system, however, can promise perfect security.

11. Children

The app is not directed at anyone under 16 and we do not knowingly collect their data. If we learn that we have, we delete it.

12. Changes

We may update this page. Any material change will be announced in the app before it takes effect, and the date at the top always reflects the current version.