BohraBohraConnect is built for the Dawoodi Bohra community, and protecting your data is a founding priority. This policy explains what we collect, how we use it, and the choices you have. It applies to the BohraConnect mobile app and this website.
1 Who we are
BohraConnect is a service operated by Low Cost Digital Services Limited, a company registered in England and Wales under company number 16503667. We are the data controller for the personal data described in this policy, and we operate the BohraConnect mobile app, this website and the BohraConnect WhatsApp business account.
2 What we collect
- Profile information you provide: name, photo, city, work, education and interests, for both your Social and Professional profiles.
- Verification photo (Rida/Topi) used to confirm community membership.
- Content you create: posts, reels, stories, comments, reactions and event RSVPs.
- Usage activity: the posts, reels and stories you view and interact with, used to rank your feed.
- Device information needed to run the app, such as a push-notification token.
- Call history: who called whom, when, how long the call lasted and its connection quality. Never the audio. See Voice calls below.
- Guest contact details for an event you host: the names and phone numbers you enter or import when you invite people. These are details about other people, provided by you, and we hold them only for that event. See Event invitations over WhatsApp below.
3 How we use it
We use this information to run BohraConnect: to verify members, show you relevant posts and people, deliver notifications, operate the B-Coin rewards system and, with your consent, to choose which ads you see. We do not sell your personal data.
4 Your messages are encrypted
Direct messages and group chats are encrypted. Encryption keys are generated on your device and we store only ciphertext. So your chats stay available when you sign in on a new device, your encryption key is also stored securely on our servers — which means messaging is not zero-knowledge. As a matter of policy we do not read your conversations, and you can add a passphrase (in the app) to protect your key so that only you can restore it.
5 Storage & security
Your photos and media live in private storage and are served only to you and to members allowed to see them, via short-lived signed links. Verification photos are visible only to you and our moderators. All data is protected by row-level security so that each member can access only what they are permitted to see.
6 Sharing
We share data with the service providers that host the app (for example our database and push-notification providers) strictly to operate BohraConnect, and when required by law. We also send guest phone numbers to WhatsApp (Meta Platforms) when a host invites people to an event that way — see Event invitations over WhatsApp. We never sell your personal profile or share it with third parties for their own marketing.
7 Voice calls
You can make one-to-one voice calls to other members. Call audio is encrypted end to end between the two phones and is never recorded or stored — not by us and not by anyone the call passes through. The app uses your microphone only while a call, voice note or video recording is in progress.
To connect a call, your phone briefly contacts Google (to learn its own network address) and, when the two phones cannot reach each other directly, sends the encrypted audio through a relay run by Cloudflare. Both can see your IP address for the length of the call; neither can hear it. To ring the other person’s phone we send a call notification through Apple or Google.
We keep a record of each call — who called whom, when, how long it lasted and connection-quality figures such as delay and dropped audio — so we can show your recent calls and fix call problems. This record is deleted with your account.
8 Event invitations over WhatsApp
If you host an event, you can invite guests by WhatsApp. To do that, we send the guest’s phone number and the invitation text to WhatsApp (Meta Platforms), who deliver the message and tell us whether it arrived and was read. This is a transfer of personal data about your guests to another company, and it happens only for the guests you choose to invite that way.
Guests are never added to any marketing list. A guest can reply STOP to any invitation and will not be messaged again about any event on BohraConnect, by any host. Guest contact details are used for that event and nothing else, and are deleted with the event.
If you are a host: you are responsible for having a genuine relationship with the people you invite. You confirm this before any invitations are sent, and we record that you did.
Meta’s handling of these messages is covered by the WhatsApp Privacy Policy.
9 Crash reports
When the app fails we record what went wrong — the error, where in the app it happened, your app version and whether you are on iOS or Android — so we can fix it. These reports are kept for 30 days and are read only by us. They are not sent to any third party and are not used to identify or profile you.
10 Advertising
BohraConnect may show ads served by Google AdMob. To do this, AdMob may use a device advertising identifier. Where required (for example in the EU/UK) we ask for your consent first, and on iOS we ask before any tracking takes place. You can always choose non-personalized ads. Our own engagement analytics remain first-party and consented; you can turn them off in Settings. For details on how Google uses data, see Google's privacy & terms.
11 Your choices
- Edit or hide your profile, or make your account private.
- Archive or delete any of your content.
- Control notification and analytics preferences in Settings.
- Delete your account and all associated data at any time. See How to delete your account.
12 Data retention & deletion
Your data is kept only while your account is active. When you delete your account, your profile, content, messages, coins and connections are erased immediately, and any residual copies in encrypted backups are purged within 30 days. See the account deletion page for exactly what is removed and how.
13 Children
BohraConnect is not directed at children under 13 (or the higher minimum age in your country), and membership requires community verification. If you believe a child has created an account, contact us and we will remove it.
14 Changes to this policy
If we make material changes to this policy, we will notify you in the app before they take effect. The "Last updated" date at the top reflects the latest revision.
15 Contact
Questions about your data? Reach us at privacy@bohraconnect.app.