Privacy Policy — RafeeqCast
Publisher: ALCASHLK · Last updated: October 2026
RafeeqCast is an app for travel groups (Hajj, Umrah, tourism, sea and land trips). It broadcasts the guide's voice to group members and helps keep them safe during the trip. We use the minimum data possible.
Data we use
- Name, language and gender: entered by the traveler or the trip supervisor to identify them within the trip.
- Photo (optional): added by the supervisor to recognize the traveler; visible only to the trip supervisor and members.
- Location during the trip: required to join, for group safety, with clear consent. Visible only to the trip supervisors and the traveler's family within the trip. It continues during the trip even when the screen is locked, and stops when the traveler leaves the trip or it ends.
- Supervisor location and group route: the supervisor's phone shares its location while on duty, as the center of the “trip radar” and safety radius. The group's route for the last 24 hours is kept so the organizer can see it on the tracking map. The organizer does not see individual travelers' locations — only counts (inside the radius, outside, no signal) — except a traveler in a critical situation (pressed “Lost?”, called emergency, or left the safety radius), whose name and location are shown to the organizer until the situation ends.
- When the network drops: the app keeps the latest locations on the phone temporarily and sends them as soon as the network returns.
- Traveler card: full name, photo, ID type and number, nationality, country of residence and an emergency contact. All optional; entered by the traveler, their supervisor, or imported from the organizer's list, and visible only to the trip's supervisors and management. The ID number is shown masked, every reveal is logged with who revealed it, and this data is deleted 30 days after the trip starts.
- Registration and payment: the app never collects money or asks for your card details. If the organizer requires payment, you transfer it directly to the organizer's account and upload a photo of the receipt (and optionally the transaction number and payer name). Only the trip's supervisors and management see it, to verify it, and it is deleted 30 days after the trip starts. For Hajj trips, booking and payment are done only through the official Nusuk platform; the app only records your Nusuk booking number for verification.
- Return path and saved maps: your recorded path and the area maps you download are stored on your phone only and are not sent to us; they are removed when you clear them in the app or delete it. Maps come from OpenFreeMap (OpenStreetMap data).
- Emergency call: the emergency button opens a normal phone call to the emergency number over the mobile network; the voice does not pass through our servers. When pressed, an alert with the number and location is sent to the trip supervisors, management and the traveler's family, and kept in the trip log.
- Audio and video: guide and management broadcasts, calls and meetings are live and not recorded. “Lost?” voice messages and voice reports are stored with the trip so the supervisor can hear them, and are automatically transcribed and translated by the server provider's AI service (Cloudflare).
- Reports and the trip room: notes and photos travelers send, and the trip room chat, are visible only to the trip supervisors and the organizer (the chat only to those allowed into the room).
- Trip program and meeting points: set by the organizer.
- Family plan: the head of the family creates the family group and supervises it; only they and the group members see members' locations. When the trial or subscription ends, tracking stops; locations, photos and member data are deleted after 30 days, and the whole group after 90 days.
- ID tag (QR bracelet or NFC sticker): created by the supervisor or head of family for a child or elderly person without a phone. Whoever scans it sees only the first name and group name, and can send their location, a note and an optional phone number to the supervisor and the tag owner's family. No other data is shown, and the tag can be revoked at any time, which disables its link.
- Tracker link: if the supervisor or head of family adds a share link from a tracker (such as AirTag), the link is stored as-is and shown only to supervisors and the owner's family; we do not read or store the tracker's location.
What we don't do
- We never sell data or share it with advertisers or anyone outside the trip.
- No ads and no marketing tracking.
- No phone number, email or personal account required — access is by trip code only.
Retention and deletion
Delete your data yourself: at the bottom of the traveler screen tap “🗑️ Delete my data and leave the trip” to delete your name, photo, location, details and voice messages from the trip immediately. A family organizer can delete the whole family group from the Trip tab. 30 days after a trip is created, locations, the group route, photos and recordings are deleted automatically. Trip records, reports, chat and invoices are kept for the period agreed with the organizer (3, 6 or 12 months), then deleted entirely. The supervisor can remove any traveler and their data at any time, and travelers can leave the trip whenever they want.
Security
Data is transmitted encrypted (HTTPS/WSS), and only holders of the trip code can access a trip.
Contact
For any request about your data, contact your trip organizer, or ALCASHLK via the app's store page.