Privacy policy.

Mahaam (mahaam.app) is built and run by Fady Mondy, Heliopolis, Cairo, Egypt, who is responsible for the data this website collects. For anything on this page, write to info@3x1.io or call +201207860084.

This policy covers the mahaam.app website — its pages, blog, forms and newsletter — not sites it links to.

Newsletter: if you subscribe, your email address, the language and page you subscribed from, your subscription status and when it changed, and a random single-use confirmation token.

Forms and chat: what you type into a contact form or the chat, an opaque random visitor id kept in a cookie so a conversation survives a page reload, the page you wrote from, and your browser's user-agent string.

Server logs: ordinary web-server records of requests, used to operate the site and diagnose faults.

This page is about the website. What you put into the Mahaam application itself is handled by the application.

When a Google Analytics measurement id or Google Tag Manager container is configured for the site, those scripts load in your browser and send Google pageview and session data, including a device identifier and an approximate location derived from your IP address.

I read this only as aggregate traffic reports — visits, top pages, referrers. I do not try to identify individual visitors from it. You can block it with a tracker-blocking extension or Google's own opt-out add-on without losing any site functionality.

The site sets a random chat visitor id so a conversation survives a page reload, and — only if you sign in to the admin area — an httpOnly session cookie. Your language and theme choices are also remembered in the browser.

Any further cookies come from Google Analytics or Google Tag Manager when those are enabled. I do not run advertising cookies of my own and do not sell any data.

The newsletter runs on your consent, given by confirming the double opt-in email, and you can withdraw it at any time.

What you send through a form or the chat is used to answer you. Logs and analytics support the legitimate interest of keeping the site running and knowing which pages and articles are read.

Email is delivered through an SMTP provider, which necessarily handles your address and the message. Analytics data goes to Google. The site runs on hosting and a CDN that process requests on its behalf.

Beyond that, nothing is shared, sold, or handed to advertisers. Data is disclosed to authorities only where the law requires it.

Subscriber rows are kept while you are subscribed. Unsubscribing marks the record as unsubscribed rather than deleting it immediately, so the same address is not re-added by mistake; ask and it is deleted outright.

Messages sent through a form or the chat are kept as a record of the conversation. Anything can be removed earlier on request.

You can ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Email info@3x1.io from the address concerned and it is handled without charge.

For the newsletter specifically, the unsubscribe link in any issue is the fastest route and needs no email to me at all.

This site is aimed at professionals and is not directed at children under 16, and no age data is collected.

If a child's details reach me through a form, tell me and I will delete them.

This section covers the Mahaam apps for iPhone, iPad and Android. They use the same account as the web console at console.mahaam.app.

Account: your name and email address, and your password, stored only as a one-way hash. If you sign in with Apple, Google or GitHub, that provider gives us your name, your email address (or Apple's private relay address) and an account identifier; with Apple we also keep a token so we can revoke the link when you delete your account. A profile photo, if you add one.

Work content: the projects, tasks, issues, comments, requests, time entries and attachments (photos you take or pick, and files) that you and your teammates add to a workspace. Workspaces are private and open only to the people invited to them.

Diagnostics: when the app hits an error, it sends a crash report (device model, operating system, app version, the error and where it happened) to Mahaam's own servers. A report you send through "Report a problem" contains what you write, device information and logs, and a screenshot if you attach one.

Timer reminders are scheduled on your device, so the app does not send us a push token. The Face ID or fingerprint lock is checked by your phone only. The app has no advertising and no third-party analytics, crash-reporting or tracking SDKs.

Only the providers needed to run Mahaam: our hosting and database servers, an email provider for account emails (sign-up confirmation, password resets, invitations and the notifications you chose), and Apple, Google or GitHub when you choose to sign in with them. Crash reports and problem reports stay on Mahaam's servers. The people in a workspace see the work shared in it. We disclose data if the law requires it. We do not sell personal data and do not use it for advertising.

In the app: Settings (the gear icon) → Danger zone → Delete account. On the web, and if you can't sign in: https://console.mahaam.app/en/delete-account has the steps. You can also email info@3x1.io from the address on your account. You confirm with your password (or a code we email you if your account has no password), and with your two-factor code if you use one. If you are the only owner of a workspace, first make someone else an owner or delete that workspace.

You are signed out everywhere at once, and every token, device and connected agent stops working. For 14 days, signing in again cancels the deletion. After 14 days the account is permanently anonymised: your email address, name, photo and password are removed, together with your memberships, assignments, notifications, devices and your Apple, Google and GitHub sign-in links. Work you did in a shared workspace, such as comments or time entries on an invoice, stays with that workspace attributed to a deleted user, because it is part of other people's records.

As features are added to the site this text is updated to match them. The date at the top is the last material change.

The aim is that this page always describes what the code actually does, not a generic template.

Email info@3x1.io , phone or WhatsApp +201207860084, or write to Heliopolis, Cairo, Egypt.