Privacy notice

• Account: name, email, password (stored hashed), role and language.
• Profile: the details you add, such as bio, languages, interests and photos.
• Bookings and payments: dates, status and amounts. No card numbers are stored.
• Messages: the text of conversations between a tourist and a host.
• Approximate location: kept only in your session, rounded, and only if you share it.
• ID evidence: hosts who ask to be verified upload an ID document.

To run the service: sign you in, show hosts, handle bookings and messages, keep people safe, and verify hosts.

Your profile is visible to other users as shown on the site. Messages are visible to the two people in the conversation; a moderator reads a thread only if someone reports it. ID evidence is visible to administrators only, and each time they open it, it is written to an audit log.

• ID evidence is deleted 90 days after the verification decision.
• Messages and closed conversations are deleted after 365 days.
• Server backups are deleted after 7 to 14 days.
• Location is not stored in your profile; it disappears with your session.
• The audit log of status changes is kept, because it protects everyone.

You may ask to see your data, receive a copy, correct it, or have it deleted.

Use the settings page when these options are available. Until then, email noreply@ahla.example and we will answer within 30 days.

Maps use OpenStreetMap tiles. Loading a map contacts the tile provider, which receives normal browser request information. Host areas remain approximate; exact private host locations are not sent.

We use only two cookies: the session cookie that keeps you signed in, and a cookie that remembers your language. No tracking or advertising cookies.