Last updated: 5 November 2026
1. Who we are
Nazafa is a service that connects people who need cleaning with cleaners and cleaning companies in Iraq. Nazafa is operated by Arkon Technology ("we", "us"). You can reach us at support@nazafa.app.
2. What we collect
Account: your email address, name, city, nationality, home address with the map pin you place for it, language, account type, a profile photo if you add one, and which version of the terms you accepted and when.
Cleaners and companies: profile photo, gender or team type, services, cities, prices, experience, team size, languages, working days, a short description and, for companies, a license number.
Phone number and whether you use WhatsApp.
Location: your device's location, only when you tap "Use my location" on the address map or "Verify my location" on the service-area screen. On the map it only moves the map and is not stored; what we save is the pin you confirm.
Service area: when you use Nazafa signed in, we check which country your connection comes from, using the country that our hosting provider's network (Cloudflare, in front of our Supabase servers) reports for your IP address. This check does not store your IP address. We store the result with your account: the country, whether it was confirmed by your connection or by your location, and a pass that lasts 7 days. If you tap "Verify my location", one location reading is sent to our server only to check that it is inside Iraq; the reading is not stored, only the pass and a count of attempts (without any location) to limit retries.
Identity documents: photos of the front and back of your Iraqi ID card or, if you are not Iraqi, your passport's photo page and both sides of your residence permit; a selfie; and for companies a license photo.
Work references from individual cleaners: the name and phone number of one to three people or companies they worked for, the work they did and when.
Activity: requests you send or receive and the messages and notes on them, job posts, reviews, saved cleaners, blocks and reports.
Technical data: sign-in sessions, the basic logs our hosting providers keep to run the service securely, and crash and error reports from the app and the website (see Service providers).
3. How we use it
To show verified cleaners to customers and job posts to verified cleaners; to confirm that you are in Iraq, the area Nazafa serves, before showing search, profiles and job posts; to check identity documents, and to call a cleaner's work references, before a cleaner or company appears in search; to ask for the right identity documents for your nationality; to show customers roughly how far away a cleaner is and to sort search results by distance; to keep a customer's nationality so that, if there is an incident, we can identify customers who are foreign nationals; to share phone numbers between two people once a request is accepted; to email you about new requests, interest in your job posts and accepted requests (you can turn these emails off in Settings or with the link in every email); to keep Nazafa safe by reviewing reports, removing content and suspending accounts; and to prevent fraud and misuse. We do not sell your data and we do not show ads.
4. Who can see what
Signed-in users in Iraq can see the public profile of a verified cleaner or company: name, photo, services, cities, price, experience, rating and reviews.
Your phone number is only visible to the other person after a request between you is accepted, and is hidden again if you block each other or mark that you did not agree on the job.
A verified individual cleaner's nationality is shown on their public profile.
Your home address and map pin are never shown to other users. Customers searching for cleaners only see a rounded distance, such as "~3 km", which our servers work out from a point a few hundred metres away from the cleaner's pin.
A customer's name and rating are visible to cleaners they have a request with. A customer's nationality is only visible to our admins. Job posts are visible to verified cleaners who work in the job's city.
Identity documents, work references and home addresses are only visible to our admins. Reports are only visible to the person who sent them and to our admins; we never tell anyone who reported them.
5. Identity documents
ID, passport, residence permit and license photos are stored in private storage that only our admins can open. We keep the photos for one year after we review them, so we can check them again if there is a complaint or a safety problem, and then delete them. Work references are kept and deleted together with the photos. We keep only a record that the review happened: the result, the date and which admin reviewed it. When we call a reference, we tell them who we are and why we are calling.
6. Service providers
We use these companies to run Nazafa. They process data for us and only on our instructions:
Supabase: database, sign-in and file storage, on servers in Frankfurt, Germany.
Cloudflare: hosting of the nazafa.app website, the network in front of our Supabase servers (it reports the country of your connection for the service-area check), email delivery and domain services. Cloudflare may keep the content of an email for up to 7 days to diagnose delivery problems.
Sentry (Functional Software, Inc.): crash and error reports, stored in Sentry's EU data region. When the app or the website hits an error, it sends a report with the error details, the screens and steps just before it, your device model and operating system version (on the website, your browser and its version) and the app version. Your IP address is used to deliver the report but is not stored. Reports do not include your name, email address or phone number.
OpenFreeMap: the map on the address page. Your app or browser loads the map images directly from OpenFreeMap, like any website it visits, so OpenFreeMap receives your IP address and the area of the map you look at.
OpenStreetMap Foundation (Nominatim): to suggest an address for your pin, your app or browser sends the pin's position, rounded to about 10 metres, directly to Nominatim, without your name or anything else about your account. Like any website, Nominatim receives your IP address.
Apple and Google: distribution of the mobile apps.
7. How long we keep data
We keep your data while your account exists. ID photos and work references are deleted one year after review. Error reports are deleted by Sentry after at most 90 days. The service-area pass is renewed when you are confirmed in Iraq again and is deleted with your account; location-check attempt counts are deleted after one day. When you delete your account, your data is deleted at once from our live systems; copies may remain in encrypted backups for up to 30 days until they are overwritten. Emails already delivered stay in your own mailbox.
8. Deleting your account
You can delete your account at any time in the app (Settings → Delete account) or without the app at https://nazafa.app/delete-account, where you confirm your email address with a code. Deleting your account permanently removes your profile, phone number, nationality, home address, identity documents, work references and photos, your requests and job posts, the reviews you wrote, your saved cleaners, blocks and reports. Reviews other people wrote about you are removed together with your profile. If something goes wrong, write to support@nazafa.app and we will complete the deletion.
9. Your choices and rights
In the app, on your Account page (tap your name at the top of Settings), you can see and change your name, city, nationality, home address, phone number, profile photo and sign-in email address; cleaners and companies also edit their public profile in the app. A name, gender, nationality or license number that was checked with your ID can only be changed by writing to us. You can ask us for a copy of your data, to correct it, to delete it or to stop a use you object to by writing to support@nazafa.app. We answer within 30 days.
10. Age
Nazafa is only for people aged 18 or older. We do not knowingly collect data from anyone younger.
11. Security
Data is sent over encrypted connections. Access to each piece of data is limited by rules in our database, so that, for example, phone numbers and identity documents can only be read by the people allowed to see them.
12. Changes
If we change this policy we will update the date above, and for important changes we will tell you in the app or by email before they take effect.
13. Contact
Arkon Technology · support@nazafa.app