Privacy Notice
Effective 2026-09-11. Version 2026-09-11-v1.
Who operates this application
Ahmed Meky operates this application. For privacy, correction, deletion, and refund requests, contact hello@gettahir.com.
What we collect
Your email address, your rough application answers, your consent and notice acknowledgement records, coded source and campaign data, duplicate and anti-abuse signals, and ordinary request and security logs.
Sensitive information
Applying to an Islamic investment purification pilot, and answers such as choosing zakat or a scholar ruling, can reveal or support an inference about your religious belief. Your account count, transaction bands, retirement status, and asset categories also create a rough financial profile. We treat both as sensitive, we collect only the rough details the application asks for, and we do not use them for any purpose beyond the ones stated here.
What we do not collect here
No brokerage credentials, statements, account numbers, holdings, balances, transaction files, or payment-card data. Do not send financial records by email. Any later record exchange for an accepted case uses a separately approved secure method, never this application or ordinary email.
Why we use it
To receive and review your application, to contact you about it, to measure the pilot, to prevent abuse, and to comply with law.
Who receives it
These service providers process the parts of it their role requires: Vercel hosting; Supabase records and founder authentication; Loops ID-only notification; Cloudflare Email Routing inbound mail; Resend outbound mail; Google mailbox; first-party analytics.
Analytics boundary
Analytics receive only coded source, anonymous or pseudonymous identifiers, step completion, validation codes, and internal disposition codes. They never receive your email, your answers, free text, or any financial data.
Retention and deletion
Our target is to keep rejected, withdrawn, and inactive application records in active systems for no longer than 90 days, and to keep accepted application records only as long as the case and the separately disclosed recordkeeping policy require. For this pilot, deletion is handled by request: write to hello@gettahir.com and we schedule and carry out the deletion of your record. When a record is deleted, some residuals expire on their own schedule: encrypted backups within 35 days, security logs within 90 days, the deletion tombstone within 365 days, and contact suppression records indefinitely so we can honor an opt-out. Records under a legal hold are retained until the hold is lifted.
Your choices
Write to hello@gettahir.com to access, correct, or delete your data, or to change your contact preferences, subject to lawful exceptions.
Security and incidents
We use reasonable safeguards, though no method is perfectly secure. If a security incident affects your application data, report it or ask about it at hello@gettahir.com. We investigate reported incidents and notify affected applicants and any authorities where the applicable law requires it.
Changes
If a material change affects your application, we update this notice and its version and ask you to acknowledge it.