Jawabi is an enterprise communication platform designed for organizations to manage internal communication securely through a web interface and mobile applications available on the Google Play Store and Apple App Store. This Privacy Policy explains how we collect, use, share, and safeguard information when organizations and authorized users access the Jawabi platform ("Service")—whether deployed on-premises, in the cloud, or in a hybrid environment.
1. Scope
This Privacy Policy applies to all versions of Jawabi, including:
- Web application
- Mobile applications (Android & iOS)
- Administrative console
- Private and group chats
- File and data sharing features
- Integrations and APIs
This Policy governs data processed within the Jawabi platform, regardless of deployment model. It does not apply to external services integrated through organizational configurations.
2. Information We Collect
Jawabi collects only the information necessary to operate, secure, and improve the Service.
2.1. Account & Profile Information
- Name, username, email address
- Profile photo or display picture (optional)
- Organization ID or tenant information
- Authentication and login credentials (encrypted)
2.2. Communication Data
- Messages (private and group chats)
- Files, images, documents, and other shared media
- Chat metadata such as timestamps, participant lists, delivery status
On-premises deployments:
All communication content and files remain stored within your organization's environment. Jawabi does not access or receive this data.
2.3. Device & Technical Data
Collected by the web interface or mobile apps, including:
- Device type, operating system, app version
- IP address, browser type, and configuration
- Cookies or similar technologies (web-only)
- Crash data and performance metrics
- Push notification tokens (Android/iOS)
2.4. Usage Data
- User activity logs (e.g., login times, feature usage)
- Security logs for auditing and compliance
- Interaction data used to improve performance and user experience
2.5. Administrative & Organizational Data
- User roles and access permissions
- Configured retention policies
- System settings, integration configurations, and audit trails
3. How We Use Information
Jawabi uses collected data for the following purposes:
- To provide secure private and group communication
- To enable file sharing and collaboration
- To authenticate users and manage access
- To ensure system reliability, performance, and security
- To provide technical support and troubleshooting
- To improve the functionality of the web and mobile applications
- To comply with legal and regulatory obligations
We do not use communication content for advertising or profiling, and we never sell user data.
4. Data Ownership & Control
- Organizations own all data processed within Jawabi.
- Jawabi acts as a processor of the Organization's data.
Depending on deployment:
On-Premises
- All data (messages, files, logs) remain within the Organization's servers.
- Jawabi does not access or transfer this data unless explicitly authorized for support.
Cloud Deployment
- Data is hosted in secure, encrypted data centers.
- Organizations control data retention, deletion, and export.
Mobile & Web Applications
- Local device data remains on the device unless synchronized with the Organization's server.
5. Data Disclosure
Jawabi may disclose limited information only under the following conditions:
1. With Organizational Authorization
When organizations request support, integration setup, or problem diagnosis.
2. With Trusted Service Providers
For hosting, infrastructure, security scanning, or analytics (data minimized).
3. Legal Compliance
When required by law, with notification to the Organization unless prohibited.
Jawabi never discloses communication content without explicit authorization.
6. Security Measures
Jawabi implements enterprise-grade security for all communication and data:
6.1. Encryption
- TLS encryption for all web and mobile communication
- Encryption at rest (AES-256 or equivalent)
- Optional end-to-end encryption (if enabled by the Organization)
6.2. Access Controls
- MFA and SSO support (OAuth, SAML, etc.)
- Role-based user access
- Admin-controlled permissions and data governance
6.3. Application Security
- Secure coding practices and regular code audits
- Penetration testing and vulnerability assessments
- Device-level encryption (required by Android/iOS)
- Optional biometric device authentication (fingerprint/Face ID)
6.4. Monitoring & Compliance
- Continuous infrastructure monitoring
- Detailed audit logs for organizational compliance needs
- Optional configurations for ISO, SOC2, GDPR, HIPAA, or local data protection laws
7. Data Retention
Organizations define their own retention policies, including:
- Message retention duration
- File and media storage rules
- Archiving and export mechanisms
- Deletion of users and associated data
Jawabi follows the Organization's retention policies in all deployments.
8. User Rights
Depending on your region and organizational policy, you may have the right to:
- Access your personal information
- Request correction of inaccurate data
- Request deletion where applicable
- Restrict or object to certain processing activities
- Download or export your data (organization-controlled)
All user rights requests should be directed to the Organization's administrator.
9. Mobile App Permissions
Jawabi mobile applications may request the following permissions:
- Camera: For taking photos or scanning codes
- Photos/Files: For uploading documents and media
- Microphone: For voice messages (if supported)
- Notifications: For message alerts
- Network Access: Required for messaging and syncing
Permissions are optional except those essential for core functionality.
10. Cookies & Tracking (Web App)
The web version of Jawabi may use cookies and similar technologies for:
- Authentication sessions
- Security protection
- Performance analytics
- User preference storage
Jawabi does not use cookies for marketing or cross-site tracking.
11. International Data Transfers
For cloud users, data may be processed in regional or international data centers. All transfers comply with applicable data protection laws and mechanisms, such as Standard Contractual Clauses.
12. Children's Privacy
Jawabi is intended for enterprise use and not directed toward children under the age of 16. We do not knowingly collect information from children.
13. Updates to this Policy
We may update this Privacy Policy periodically. Organizations and users will be notified of significant changes before they take effect.
14. Contact Us