Baham Privacy Policy
Last updated: 7 November 2026
Baham ("we", "us") is an app for Persians living outside Iran to find events, groups and local businesses, and to plan get-togethers. This policy explains what we collect, why, who helps us run Baham, and the choices you have. Baham is run by Hamidreza Ensafian, an individual based in Sydney, Australia (Baham is not yet a registered company). Contact: support@joinbaham.com.
The short version
- We collect what Baham needs to work: your account, your profile, and what you do in the app (events, groups, messages, photos you add).
- We never sell your personal information, and we don't show third-party ads that track you.
- Your date of birth and gender are private. Others only ever see totals, such as "12 women, 9 men, mostly 25–34", and only when at least 5 people have answered.
- You can delete your account at any time in Settings → Delete account.
What we collect
When you sign up. You can sign in with Google, with Apple, or with a one-time code sent to your email.
- From Google we receive your name, your email address, whether that address is verified, and your profile photo. We ask Google only for the basic "openid", "email" and "profile" permissions.
- From Apple we receive a private account identifier and, if you choose to share them, your name and email (which may be an Apple private relay address).
- We don't receive or store any password.
Your profile. Name, profile photo, home city or neighbourhood, search radius and interests.
- Optionally, your date of birth and gender. We use these only for age checks (you must be 16 or older) and for anonymous totals.
- Your choice of who may send you direct messages.
Your location. If you allow it, we use your device's location to show events and groups near you and to estimate travel times. Otherwise we use the city you choose. We don't track your location in the background.
What you do in Baham. This includes:
- events you create, join, save or request to join;
- groups you join or organize;
- messages in event chats, group chats and direct messages;
- polls, checklists, carpools, expenses and receipt photos you add;
- photos you add to event albums;
- vouchers you claim and businesses you follow;
- reports and blocks you make.
Businesses. If you list a business, we keep its details and plan. When you view a business page, we record the visit. The business only sees totals (visits, rough area, gender and age ranges, with small numbers grouped together). It never sees who you are.
Your device. A push notification token, so we can send you notifications you've turned on. We also keep basic technical records (such as IP address and request logs) to keep Baham secure and working.
How we use it
- To run Baham: your account, your feed, events, groups, chats, tickets, carpools, expenses, vouchers and notifications.
- To keep people safe: preventing spam and abuse, enforcing our Terms, handling reports, and suspending accounts that break the rules.
- To send you emails you need, such as sign-in codes, and, if you choose, news about Baham. You can unsubscribe from news at any time.
- To understand overall use with totals and averages, so we can improve the app.
We don't use your information for advertising profiles, and we don't sell or rent it to anyone.
What other people see
- Other members can see your name, profile photo, the city you chose, the events you're going to (where the event shows its guests), the groups you're in, and what you post in chats you share with them.
- Hosts and group organizers see who has joined or asked to join.
- Nobody else ever sees your email, date of birth or gender.
Who helps us run Baham
We use trusted service providers that process data only on our behalf:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and the photos you upload | Australia |
| Fly.io | Servers and live chat | Australia |
| Redis host | Temporary data (sign-in codes, caching) | Australia |
| Resend | Sign-in and service emails from hello@joinbaham.com | Japan |
| Expo | Delivering push notifications to your phone | United States |
| Google and Apple | Signing you in, if you choose them | United States |
| OpenStreetMap (Nominatim) | Finding an event's address on the map (the address text is sent) | Europe |
| Open-Meteo | Weather forecasts for events (the event's location is sent) | Europe |
| OSRM | Travel time estimates (start and end points are sent) | Europe |
We may also share information if the law requires it, to protect someone's safety, or as part of a sale or reorganisation of Baham, in which case this policy continues to apply.
How long we keep it
- Your account. We keep it while it's active.
- When you delete your account:
- your name, photo, email, phone, date of birth, gender, interests, location and sign-in links are erased at once, and you're removed from groups and upcoming events;
- events you host alone are cancelled;
- messages you sent and shared expenses stay so other people's records still add up, but they show "Deleted member" instead of your name.
- Sign-in codes expire after 5 minutes.
- Backups and logs. Our providers keep them for a limited time, after which they are deleted.
Your choices and rights
- See and change your profile any time in the app.
- Control who can message you, which notifications you get, and whether the app uses your location.
- Delete your account in Settings → Delete account.
- Ask us for a copy of your data, or to correct or delete it, by writing to support@joinbaham.com.
Depending on where you live (for example under the GDPR, UK GDPR, Australian Privacy Principles, PIPEDA or California law), you may have further rights, including objecting to some uses and complaining to your data protection authority.
Age
Baham is for people aged 16 and older. If we learn that someone younger has an account, we delete it.
Security
- Connections are encrypted.
- We never store passwords, because there aren't any.
- Sign-in codes are stored only in scrambled form.
- Sessions can be ended at any time.
- Access to our systems is limited to the people who run Baham.
No system is perfectly secure, so please contact us at once if you notice anything wrong.
Changes
If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect.