Privacy Policy

The data controller for Dabarli is Dabarli, operating the Dabarli platform for the Tunisian market. Our registered office is in Tunis, Tunisia.

For privacy and data-protection requests, contact support@dabarli.app. For general business inquiries, contact employers@dabarli.tn.

This policy applies to the Dabarli website, Android and iOS mobile applications, and the provider web experience. It covers data you provide directly, data generated through your use of the platform, and limited technical data needed to operate and secure our services.

We collect only the data needed to run accounts, hiring flows, messaging, support, and platform security. Depending on how you use Dabarli, this may include:

• Account data: email address, phone number, password (stored securely via our authentication provider), and optional sign-in through Google, Facebook, LinkedIn, or Apple.
• Profile data: name, profile photo, biography, skills, company or employer information, and other details you choose to add.
• Job and application data: job listings, applications, cover letters, work sessions, ratings, and related hiring activity.
• Messages and user-generated content: chat messages and other content you create on the platform.
• Device and diagnostic data: crash reports, error logs, device type, operating system, and app version collected through Sentry to improve stability.
• Push notification tokens: tokens used to deliver notifications through Firebase Cloud Messaging (Android) or Apple Push Notification service (iOS).
• Optional telemetry (only with your consent): hashed installation identifier, network type, and optionally approximate location if you explicitly opt in through the in-app consent screen.

We use personal data for the following purposes:

• Creating and managing your account and authentication.
• Operating hiring features: posting jobs, applying, messaging, and managing work sessions.
• Sending service-related notifications and support responses.
• Preventing fraud, abuse, and security incidents.
• Monitoring crashes and improving app reliability.
• Complying with legal obligations and responding to lawful requests.

We process personal data where necessary to perform our contract with you (providing the Dabarli service), where we have a legitimate interest (such as security, fraud prevention, and service improvement), or where you have given consent (for example, optional telemetry).

You may withdraw consent for optional processing at any time through in-app privacy settings or by contacting us.

We do not sell your personal data. We do not share data with third parties for advertising or cross-app tracking.

We use trusted service providers (data processors) to operate Dabarli. These may include:

• Supabase — authentication and file storage.
• Google Cloud Platform — backend hosting and infrastructure.
• Sentry — crash and error reporting.
• Expo / Firebase — mobile app delivery and push notifications.
• OAuth providers (Google, Facebook, LinkedIn, Apple) — only when you choose to sign in with them.
• Email delivery providers — for transactional and support emails.

We keep personal data only as long as needed to provide the service, resolve disputes, enforce our terms, and meet legal obligations.

When you request account deletion, we delete or anonymize your data within a reasonable period, except where retention is required by law or for legitimate security and audit purposes.

We protect data in transit using HTTPS/TLS. Sensitive credentials and tokens are stored using industry-standard secure storage on devices and servers.

No method of transmission or storage is completely secure. If you believe your account has been compromised, contact support@dabarli.app immediately.

Depending on applicable law, you may have the right to access, correct, delete, or restrict processing of your personal data, and to object to certain processing.

To exercise these rights:

• Email support@dabarli.app with the subject line "Privacy request" and the email or phone number linked to your account.
• Visit our Data Deletion page at dabarli.app/data-deletion for account and telemetry deletion instructions.
• Adjust optional telemetry consent in the Dabarli app privacy settings.
• Disconnect linked OAuth providers from your profile settings in the app.

Dabarli is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a minor has created an account, contact us and we will take appropriate action.

Your data may be processed on servers located outside Tunisia, including within the European Union and the United States, by our infrastructure and service providers. We require appropriate safeguards from our processors.

We may update this Privacy Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Continued use of Dabarli after changes means you accept the updated policy.