Privacy Policy
Maraheb | مراحب
Effective Date: October 12, 2026
Last Updated: October 12, 2026
- Introduction
Welcome to Maraheb ("Maraheb," "we," "us," or "our").
Maraheb is a digital travel companion focused on Syria. Our mobile application and website help users discover destinations, attractions, activities, and accommodations, receive AI-assisted travel recommendations, and plan trips.
We respect your privacy and are committed to protecting personal information in accordance with applicable data protection laws, including the European Union General Data Protection Regulation (GDPR), where applicable.
This Privacy Policy explains what information we collect, how we use it, who we share it with, how long we retain it, and the rights available to you.
This policy applies to:
The Maraheb mobile application for Android and iOS.
Our website at https://maraheb.net.
Our AI travel assistant and related features.
Account registration, authentication, and preferences.
Travel listings, saved places, feedback, and support.
Reservation services, where available.
Using Maraheb does not replace any consent required by applicable privacy law. We request separate consent where legally necessary.
- Who We Are
Maraheb is operated by:
Operator: Maraheb
Address: Zabdeen, Rural Damascus, Syria
Website: https://maraheb.net
Email: info@maraheb.net
Maraheb is the data controller responsible for determining how personal information is processed through its services.
For any privacy-related questions, complaints, or data requests, contact us at info@maraheb.net.
- Information We Collect
The information we collect depends on the features you use.
3.1 Account information
When you create or use an account, we may collect:
Name or display name.
Email address.
Account identifiers.
Authentication and verification records.
Selected language and account preferences.
Account creation and activity timestamps.
Records of applicable terms acceptance and privacy choices.
Authentication is managed through Supabase.
Some features are accessible without creating a permanent account.
3.2 Travel preferences and saved content
When you use personalization or saved-content features, we may collect:
Selected cities and destinations.
Travel interests and preferences.
Budget preferences.
Preferred activities and travel styles.
Travel dates and trip details.
Group size and transportation preferences.
Saved attractions, places, and travel plans.
Providing optional travel preferences is voluntary.
3.3 AI conversations
When you use our AI travel assistant, we process:
Messages and questions you submit.
Relevant previous conversation messages.
Responses generated by the assistant.
Travel information you voluntarily provide.
Feedback on AI responses.
Technical request information, including usage counts, timestamps, processing status, and error records.
We use this information to provide travel recommendations, maintain conversation history, prevent misuse, and improve service functionality.
3.4 Location data
Maraheb may request access to your approximate or precise device location when you choose to use location-based features.
Location information may be used to:
Find attractions and activities near you.
Calculate approximate distances.
Display nearby destinations.
Provide location-based suggestions.
Open directions through an external mapping application.
Location access is optional.
You may browse destinations manually without granting location permission.
You can revoke location permission through your device settings at any time.
Maraheb does not require continuous background location tracking for its core travel features.
3.5 User feedback and reports
When you submit feedback, reviews, or reports, we may collect:
Written feedback and ratings.
Reports of incorrect information.
Photos or attachments you voluntarily submit.
Associated listing or conversation identifiers.
Account identifiers where applicable.
Submission timestamps.
Public reviews, where available, may be visible to other users. Private support requests and incorrect-information reports are processed for review and service improvement.
3.6 Booking information
When reservation services are available and you choose to use them, we may collect:
Your name and contact information.
Selected accommodation or activity.
Requested booking dates and times.
Number of guests.
Reservation requests and special instructions.
Reservation status and confirmation information.
Transaction references and payment status, where applicable.
Relevant booking information may be provided to the accommodation or activity provider responsible for fulfilling the reservation.
If online payment functionality becomes available, payment credentials will be handled by the selected payment service provider. We do not intend to store complete payment card details or security codes in our application database.
3.7 Website information
When you use https://maraheb.net, we may collect:
Technical connection information, including IP address.
Browser and device information.
Website request and security logs.
Information voluntarily submitted through contact forms.
Name, email address, and message content when contacting us.
We do not currently operate a newsletter subscription service through our website.
3.8 Technical and security information
Our systems may process:
IP addresses and pseudonymous network identifiers.
Device type and operating system.
Application version.
Language preferences.
Authentication and session identifiers.
Request timestamps.
Error and diagnostic information.
Usage and rate-limit information.
We use this information to operate our services, investigate technical problems, protect user accounts, and prevent misuse.
Maraheb does not require access to your personal contacts, SMS messages, or call history for its core travel functionality.
- How We Use Your Information
We use personal data for the following purposes:
Purpose
Legal basis under GDPR, where applicable
Creating and managing accounts
Performance of a contract
Providing travel information and requested features
Performance of a contract
Processing AI travel requests
Performance of a contract
Processing optional location data
Consent where required, or provision of a requested service
Saving preferences and travel content
Performance of a contract
Responding to support requests
Contractual necessity or legitimate interests
Preventing fraud and abuse
Legitimate interests
Maintaining technical security
Legitimate interests or legal obligation
Managing bookings and payments
Performance of a contract or legal obligation
Meeting legal and regulatory requirements
Legal obligation
Where processing relies on legitimate interests, we consider the impact on individuals and their applicable privacy rights.
We do not sell personal information to advertisers or use private AI conversations for targeted advertising.
- AI Assistant and DeepSeek
Maraheb uses DeepSeek as its AI technology provider for supported travel-assistant requests.
AI requests are processed through Maraheb's backend infrastructure, using Supabase services to manage authentication, approved travel information, and communication with the AI provider.
When an AI request is sent to DeepSeek, the information may include:
Your current question or message.
Limited prior conversation context.
Relevant travel preferences.
Approved public travel information.
A pseudonymous technical identifier for service management.
We do not intentionally send your account email, phone number, payment information, or precise device location to the AI provider as separate identifying fields.
However, information you voluntarily write inside a chat message may be included in the request sent for AI processing.
We recommend that you avoid submitting passwords, financial credentials, identification numbers, medical information, or other sensitive personal details through the AI assistant.
AI requests may be processed on infrastructure outside Syria or the European Economic Area. DeepSeek processes information according to its applicable API terms and data protection arrangements.
Maraheb stores conversation information within its own backend systems to support chat functionality, user history, and service operations.
We do not publish private AI conversations or sell conversation data to third parties.
AI-generated travel recommendations are informational. The assistant is not used to make solely automated decisions that produce legal or similarly significant effects concerning users.
- Third-Party Services and Data Sharing
We use external service providers for certain technical functions.
We share personal information only where necessary for a service, where requested by the user, or where legally permitted.
6.1 Supabase
Purpose: Database hosting, user authentication, secure sessions, backend functions, and storage of application records.
Information processed: Account details, identifiers, preferences, AI conversation records, and other information required to operate the requested features.
Website data may include contact-form information and related technical records.
Website: https://supabase.com
6.2 DeepSeek
Purpose: AI-assisted travel recommendations and conversation processing.
Information processed: Submitted messages, limited conversation context, approved travel records, and pseudonymous identifiers.
DeepSeek receives information only through the relevant AI processing workflow.
Website: https://www.deepseek.com
6.3 Zoho
Purpose: Email delivery and communication services, including account-related transactional emails.
Information processed: Email addresses and message content needed to deliver authentication or service-related communications.
Website: https://www.zoho.com
6.4 Cloudflare
Purpose: Website delivery, network performance, and security services, where used by Maraheb's web infrastructure.
Information potentially processed: IP addresses, browser information, technical request details, and security-related connection information.
Website: https://www.cloudflare.com
6.5 External mapping applications
When you choose to open directions, Maraheb may transfer a destination link or coordinates to an external mapping application, such as Google Maps or Apple Maps.
The selected mapping service may independently process your information according to its privacy policy.
6.6 Communication services
When you choose to contact a travel provider through WhatsApp, telephone, email, or an external website, the selected service may process information associated with that interaction.
The applicable third party is responsible for its own independent processing activities.
6.7 Accommodation and activity providers
When you voluntarily request a booking, we may share the information necessary to arrange the reservation with the selected provider.
This may include contact information, booking dates, guest numbers, and relevant reservation instructions.
We do not provide your private AI chat history to travel providers as part of an ordinary reservation request.
6.8 Legal disclosures
We may disclose information when required by applicable law, a valid legal process, or a competent authority.
We may share relevant information with professional advisers where necessary to establish, exercise, or defend legal claims.
Maraheb does not sell personal data or disclose it to third parties for their independent behavioral advertising purposes.
- International Data Transfers
Maraheb operates from Syria and uses international technology infrastructure.
Our Supabase travel application database is hosted in the United Kingdom, and the website database is hosted in Ireland.
Certain third-party providers, including AI and infrastructure services, may process information in other countries.
Where personal data is subject to the GDPR, transfers outside the European Economic Area must comply with applicable international transfer requirements.
Depending on the transfer and destination, the relevant legal mechanism may include an adequacy decision, approved Standard Contractual Clauses, or another lawful safeguard.
Users may contact info@maraheb.net to request information about applicable international transfer arrangements.
- Data Retention
Maraheb's standard personal data retention period is one year.
We normally retain personal data for up to 12 months from its collection or the last relevant activity, depending on the category and purpose.
For active accounts, the information required to maintain account access may remain for the duration of the active account. Continued relevant activity may renew the applicable retention period.
This policy applies to:
AI conversations and associated records.
Travel preferences and saved data.
Website contact submissions.
Technical and security logs.
User feedback and reports.
Guest usage records.
You may request deletion earlier under Section 10.
Personal data may be retained beyond one year where a longer period is required by applicable law or is necessary for an active legal claim, dispute, fraud investigation, or financial obligation.
Data retained under an exception will be restricted to the relevant purpose and deleted when the lawful need ends.
Backup copies are subject to controlled retention and deletion procedures.
- Data Security
We take appropriate technical and organizational steps to protect personal information.
These measures include:
Encrypted network connections.
Authentication and session controls.
Database access restrictions.
Role-based access to administrative functions.
Restricted access to user conversations.
Protection of private service credentials.
Abuse-prevention and request-limiting controls.
Technical monitoring and error investigation.
We limit access to personal information according to operational responsibilities.
No internet-based system can guarantee complete protection against every security risk.
If a personal data breach occurs, we will investigate it and notify affected individuals or regulatory authorities where required by applicable law.
- Account Deletion and Personal Data Removal
You have the right to request deletion of your personal information.
10.1 Account deletion
Maraheb provides an account deletion process through its application and website.
You can request deletion by:
Using the account deletion function in the Maraheb app.
Visiting the account deletion page on https://maraheb.net.
Emailing info@maraheb.net.
You may submit a deletion request through the website without needing the Maraheb application installed on your device.
10.2 What deletion includes
A verified account deletion request covers eligible personal data associated with your account, including:
Account profile information.
Authentication-related personal information.
Saved travel preferences.
Saved places and itineraries.
AI conversation history.
Associated personal records that are no longer required.
Certain records may be retained when required by law or for another applicable lawful exception.
10.3 Processing deletion requests
We may verify your identity before acting on a request to prevent unauthorized deletion.
We will process verified requests within the periods required by applicable data protection law and explain any applicable retention exceptions.
Where the GDPR applies, we normally respond within one month, subject to legally permitted extensions.
10.4 Deleting conversations or other content
You may request deletion of specific conversations, reviews, or other personal content without deleting your entire account.
10.5 Uninstalling Maraheb
Removing the application from your device does not automatically delete information stored in your online account.
Use the deletion options described above to request removal of server-side personal information.
- Your Privacy Rights
Depending on applicable law, you may have the following rights:
Right of access: Request a copy of personal information held about you.
Right to correction: Request correction of inaccurate or incomplete information.
Right to erasure: Request deletion of personal information where the legal conditions are met.
Right to restriction: Request that certain processing activities be restricted.
Right to object: Object to processing based on legitimate interests in qualifying circumstances.
Right to portability: Receive qualifying personal information in a structured, commonly used, machine-readable format.
Right to withdraw consent: Withdraw consent at any time for processing that relies on your consent.
Rights concerning automated decision-making: Exercise applicable protections concerning qualifying automated decisions.
Right to complain: Submit a complaint to a competent data protection supervisory authority.
For individuals covered by the GDPR, these rights are governed by the applicable provisions of that Regulation and their exceptions.
To exercise your rights, email info@maraheb.net.
We may request reasonable identity verification before responding.
We will respond within the legally applicable timeframe.
- Cookies and Local Storage
The Maraheb website may use strictly necessary cookies or similar technologies for website operation, security, and functionality.
Our application may store limited information locally on your device, including:
Authentication session information.
Language preferences.
Application settings.
Cached travel content.
Necessary technical information.
These mechanisms help the application function and maintain the user experience.
Maraheb does not currently use its website to operate a newsletter subscription service or sell personal information for advertising.
If non-essential tracking technologies requiring consent are introduced, we will provide any legally required notices and consent controls before their activation.
- Device Permissions
Certain features may request permission to access device capabilities.
Location: Used for nearby results and location-based features.
Photos or files: Requested when you voluntarily choose to upload a photo or attachment, where supported.
Notifications: Requested if a feature requiring device notifications is introduced or enabled.
Permissions are requested through the relevant operating-system mechanisms.
You can change or withdraw permissions through your device settings.
Declining an optional permission does not prevent use of unrelated application features.
- Children's Privacy
Maraheb is intended for users aged 18 and older.
Our service is not intended for children or minors under the age of 18.
We do not knowingly invite minors to create accounts or submit personal information.
If we become aware that personal information has been collected from a person under 18 contrary to this policy, we will take appropriate steps to delete the information, subject to applicable law.
Parents or guardians may contact info@maraheb.net to submit relevant privacy concerns.
- Third-Party Links
Maraheb may provide links to attractions, accommodations, external websites, mapping services, and communication platforms.
External services operate independently and may have their own privacy policies.
We encourage users to review the relevant provider's privacy information before submitting personal information through external services.
Maraheb is not responsible for independent third-party privacy practices.
- Changes to This Policy
We may update this Privacy Policy to reflect changes in our services, legal requirements, or data processing practices.
The most recent revision date will appear at the beginning of this policy.
Material changes will be communicated where legally required.
If a new processing activity requires consent, we will request the necessary consent before the activity begins.
The current policy will remain publicly accessible through https://maraheb.net and the Maraheb application.
- Contact Information
For privacy questions, access requests, data deletion, complaints, or other concerns, please contact:
Maraheb | مراحب
Address: Zabdeen, Rural Damascus, Syria
Email: info@maraheb.net
Website: https://maraheb.net
Account deletion requests may be submitted through the account deletion page on our website or by contacting the email address above.
Users covered by the GDPR retain their right to contact a competent supervisory authority.
Maraheb is committed to protecting user privacy, maintaining transparent data practices, and respecting applicable data protection rights.