Privacy — Discover Liwa
This page describes how the Discover Liwa app and this website work right now, based on a source-code review. No public build of the app exists yet. When that changes, this page will be checked again before anyone relies on it.
Discover Liwa is being built by Steven Barker. Questions about this page or your data: bertha@silvermere.tech.
The app
Your location never leaves your device. The app reads it on-device to show your position on the map and to work out prayer times and the direction to face. Saying no doesn't break anything: the app still works fully without it.
The only requests the app makes over the network are:
- A check for updated place information, sent when you open the app. This request carries your device's IP address and standard technical headers only: nothing that identifies you, and no location. It happens whether or not our server answers.
- Map tiles, fetched from OpenStreetMap, for the current build. OpenStreetMap's servers see your IP address and which part of the map you're looking at. That's not your exact position, though if you're viewing your own area, the difference thins out in practice.
- Anonymous interaction events: which places you tap, which button (for example Book, Website, or Directions), and when. We do not know who you are and we cannot connect one tap to another across days. The app makes up a fresh random label each time you open it, throws it away within 24 hours at the latest, and never derives it from anything about your phone. There is no account, no advertising ID, and nothing that persists.
- A feedback report, sent only if you choose to use the in-app report feature and tap send. It carries whatever you type, plus which screen you were on and, if you reported from a specific place, which place and which piece of text you were looking at (for example, an Arabic description). It also carries the language you were reading, your app version and phone type, and when you wrote it. Like any request, it reaches Silvermere's infrastructure with your device's IP address, and is processed with the help of a third-party service.
- Place photographs, for places whose picture is served rather than built into the app. The app asks our server for the image once, checks it is the exact file the place information said to expect, and keeps it on your device from then on. The request carries your device's IP address and standard technical headers only: nothing that identifies you, no location, and nothing about which places you looked at. If the image cannot be fetched or does not match, the app keeps the picture it already had, so nothing breaks. Described here in advance: this is in the app but switched off, and will be on in a later release.
Reports are read by the Discover Liwa team. Our own copy is deleted after twelve months; the third-party service holds its copy under its own terms.
Where this happens. Discover Liwa is run by Silvermere Consulting Limited, a company registered in the United Kingdom. The servers that answer the app and host this website are in the United Kingdom, so the requests listed above leave the UAE. Feedback reports are additionally routed to GitHub, a service in the United States, where our team reads and works on them. We keep the data footprint small deliberately: there is no account, no advertising identifier, and nothing that follows you between sessions, so what crosses a border is a report you chose to send and a request for information about places.
Nothing else leaves your device. Beyond what's listed above, the app doesn't use advertising, any device identifier, or track you across other apps and sites, and there's no account or login.
Stored only on your device, and gone the moment you delete the app: your language choice, the places you've saved, your trip plan and any notes you write in it, which mode you last used, offline map data you've downloaded, and a cached copy of place information, place photographs and map tiles.
If you tap to get directions, call a place, or share something, that hands off to another app (your maps app, your phone's dialler, or the system share sheet), only when you tap and only for that one action. Once it's handed off, that app's own privacy policy applies, not this one.
Sharing your plan works the same way. The app builds the shared text or image on your device, including any notes you chose to write, and hands it to the system share sheet: it goes only where you send it. The plan itself is never sent to us.
If you're testing this app through TestFlight, Apple collects crash reports and usage data from your device as part of how TestFlight works. That's Apple's process, not something we control or receive.
This website
This site uses Umami, a privacy-focused analytics tool we host ourselves, to count page visits. It doesn't use cookies, doesn't collect personal information, and can't identify you or track you across other sites. It tells us how many people viewed a page, not who they are.
This policy is published at https://discoverliwa.ae/privacy.
The business sign-up form
If you submit the business sign-up form, we collect what you enter: your business name, category, area within Liwa, and what you offer; your name, email, and phone if you give it; your website if you give it; and, if you choose to answer, which app features would be valuable to your business (including, if you select it, general customer patterns — never names or individual details).
We process this and submit it to Brevo, the contact-management service we use to store and follow up on submissions, acting on our behalf. When the consent checkbox says your details may be shared with "the Discover Liwa team and our partners," Brevo is what that means today: a processor working to our instructions, not an independent partner with its own right to use your details. If that changes — a genuine third party gaining independent use of your data — this page will say so before it happens, not after.
The form uses Cloudflare Turnstile, a check that runs in your browser to confirm the submission isn't automated, before it's sent. As part of that check, your IP address is sent to Cloudflare. We don't store it ourselves, and it isn't passed on to Brevo.
We don't use your details for marketing. Signing up creates a contact record that's marked not-for-marketing by default: you'll hear from us about the founding group and your listing, not promotional email, unless you separately agree to that later.
We don't keep your details for a fixed period. We hold them for as long as you're part of the founding group, and delete them if you ask — email bertha@silvermere.tech to have that done.
You can withdraw your consent at any time by emailing bertha@silvermere.tech.