Privacy policy

Updated October 25, 2026

Version 2026-10

Gawazy (the website gawazy.com and the Gawazy apps for iPhone and Android) helps people find wedding and event services and contact the businesses that offer them. This policy explains what personal data we collect, why, who can see it, how long we keep it and what your rights are under Egypt's Personal Data Protection Law No. 151 of 2020 and its executive regulations.

1. Who we are

Gawazy is operated by Mount Wolf for Information Technology, 53 Hassan Al Sherif St., Nasr City 11765, Cairo, Egypt, commercial register no. 10530 01001 58109, tax id 609-335-898 ("Gawazy", "we", "us"). We are the controller of the personal data described here.

Privacy questions and requests, including for our data protection contact: [email protected].

2. The data we collect

When you create an account

First and family name, e-mail address, password (stored only as a one-way hash, never readable), preferred language.
Mobile number: optional for customers; a business must give a public contact number. We do not verify numbers by SMS.
Gender, only if you choose to give it. We do not ask for your date of birth.
Your confirmation that you are 18 or older and your acceptance of the terms and this policy, with the date and the version you accepted.
If you sign in with Google or Apple: the account id that service gives us, your e-mail address (with Apple, possibly a private relay address) and your name. We never see your Google or Apple password.

To keep your account safe

Sign-in sessions: IP address, device and browser type, times of sign-in, devices you chose to remember for 30 days.
Two-step verification: the authenticator secret (encrypted), recovery codes (stored only as hashes) and passkeys (only the public key; your fingerprint or face never leaves your device).
Codes and links we send to your e-mail address to confirm it or reset your password (deleted after use or expiry).

If you run a business on Gawazy

Business name, logo and cover photo, description, phone, WhatsApp, e-mail, website and social links.
Branches with their address and, if you add it, a map location.
Listings, offers, posts and stories, with photos and videos. We remove location (GPS) and camera data from every photo before publishing it.
Team members you invite (their e-mail address until they accept, then their account).
Orders, receipts and invoices for Gawazy's own paid products (sponsored placements, banners, storage plans). Card payments are made on the payment provider's own page: we never receive or store card numbers.

When you use Gawazy

What you save (All Saved and your named collections), collection share links you create, and your wedding budget choices.
Businesses you follow or mute, and the stories you watched (a view is counted for the business after 5 seconds on screen).
Likes, comments, ratings and reviews (with any private note you write to the business), reports and blocks.
Chats with a business branch: your messages and images, and an inquiry card if you choose to send one (service, branch, the price shown at that moment, event date, number of guests). Your mobile number reaches the business only if you write it in a message.
Support tickets and our replies; copyright claims and appeals.
Notification settings, including whether you agreed to receive offers and news, and when.
On the apps: a push notification token for your device, only if you allow notifications.

Counting visits

When a page is viewed or a Call, WhatsApp or Share button is tapped, we count it for the business's statistics. For visitors without an account we use a random number stored in the browser, which does not identify you. These records are deleted after 13 months; businesses see totals, never who you are.

Technical data

Server logs (the address requested, time, result, IP address) and error reports, used to run, fix and protect the service.

What we do not collect: identity documents, card numbers, or data about health, religion, ethnic origin or political views. Please do not send such data in chats or tickets.

3. Why we use your data

To run your account and the marketplace (show your content, let customers find and contact businesses, chats, saved items): needed to perform our agreement with you (the terms of use).
To keep accounts and Gawazy safe (sign-in protection, fraud and abuse prevention, security records): our legitimate interest and our legal obligations.
To review and moderate content (listings, offers, posts, stories, comments, ratings, reports): the agreement with you and our legitimate interest in a safe, honest marketplace.
To send service messages (codes, chat and review notices, moderation results, changes to our terms): the agreement with you.
To send offers and news from Gawazy: only with your consent, per channel (e-mail, app). You can withdraw it at any time in Account → Notifications, and every promotional e-mail has an unsubscribe link.
To give businesses statistics about their own content: our legitimate interest; businesses see totals only.
To sell Gawazy's own products to businesses (orders, receipts, refunds, tax records): the agreement with the business and our legal obligations.
Analytics and advertising cookies, if we add them: only with your consent (see the cookies and ads notice).
To comply with the law and answer lawful requests from the authorities: legal obligation.

We do not make decisions about you based only on automated processing that have legal or similarly significant effects. Automatic word filters and spam limits only hold content for a person to review.

Everyone: what a business publishes (profile, branches, listings, offers, posts, stories, contact numbers) and public ratings and comments, which show your first name and the first letter of your family name.
A business you chat with: your name, messages and images, and the inquiry card if you sent one; your mobile number only if you wrote it. The team members who handle that branch see the same.
Gawazy staff: only people whose role needs it (for example moderators see content waiting for review, support sees support tickets). Every administrative action is recorded. Gawazy staff do not read your chats. Only when a chat is reported in a safety or legal case may a named Trust & Safety reviewer see the part needed for that case, for a limited time; every view is recorded.
Service providers working for us, under contracts that require them to protect the data and use it only on our instructions: Hostinger (servers in Europe), Cloudflare (network protection, content delivery and file storage), Zoho (ZeptoMail for e-mail delivery, Zoho Mail for our mailboxes), Sentry (error reports, stored in the EU), Google Firebase and Apple (delivery of app notifications), PayTabs (card payments by businesses), and Google or Apple when you choose to sign in with them.
Authorities, when Egyptian law requires it, and only what the request lawfully covers.

We do not sell your personal data and we do not share it with others for their own advertising.

5. Data outside Egypt

Our servers are in a data centre in Europe, and some providers above process data in the European Union or the United States. We transfer personal data outside Egypt only as Law No. 151 of 2020 allows, under written contracts with each provider and with the licence and safeguards the law requires. Gawazy serves Egypt today; other markets open only after their own legal review, and this policy will say so before they do.

6. How long we keep data

Your account: as long as you keep it.
After you delete your account: see your data rights and account deletion. Personal data is removed within 30 days; copies in our encrypted backups disappear as the backups rotate, at the latest after 12 months.
Chat images: 180 days after they are sent (you get a notice 7 days before), unless a legal hold applies to a reported case.
Visit and click records: 13 months.
Help centre searches: 13 months, without any link to you.
Security records of administrative actions: 2 years.
Orders, receipts and invoices of businesses: 5 years, as Egyptian tax law requires; the person's account details on them are anonymised when the account is deleted.

7. Your rights

Under Law No. 151 of 2020 you can:

know what personal data we hold about you and get a copy;
correct or complete it (most of it directly in your account);
have it deleted, or stop its processing, unless the law requires us to keep it;
withdraw your consent to offers at any time, without affecting anything else;
object to processing or ask us to restrict it;
be told if a breach affects your data;
complain to the Personal Data Protection Center.

How to use these rights, and what deleting your account does: your data rights and account deletion.

8. How we protect data

Encrypted connections (HTTPS) everywhere; passwords stored with a strong one-way hash; two-step verification available to everyone and required for every Gawazy staff account; access limited by role and recorded; private chat images served only through short-lived links; encrypted backups; regular security reviews and an external penetration test before payments go live. No system is perfectly secure: if a breach affects your data, we will tell you and the Personal Data Protection Center within the time the law requires.

9. Cookies

We use the cookies needed to run Gawazy and, only with your consent, analytics and advertising cookies. Details and how to change your choice: cookies and ads notice.

10. Age

Gawazy is for people aged 18 or older. We do not knowingly collect data from children. If you believe a child has created an account, write to [email protected] and we will delete it.

11. Changes to this policy

When we change this policy we publish the new version here with its date. For important changes we tell you by e-mail or a notice on Gawazy before they apply.

12. Contact

Mount Wolf for Information Technology, 53 Hassan Al Sherif St., Nasr City 11765, Cairo, Egypt · [email protected] · help and support: Account → Support · contact page.