Wasel — Privacy Policy

Last updated: August 2026

Wasel ("we," "us") runs waselportal.com, a shared portal that lets independent service providers (trainers, tutors, designers, and similar) manage sessions, shared files, and payment tracking with their clients. This page explains what information we collect, why, and what you can do about it.

What we collect

Account information

Email address and password (used only for login — we never see or store your plain-text password; it's handled by our authentication provider, Supabase). Full name and phone number, which you provide when creating an account or which your provider adds when setting you up as a client. An optional profile photo.

Session and payment records

Session dates, times, and notes; charges and payments entered by your provider (amounts, currency, payment method label like "Whish" or "Cash"); files and links shared between you and your provider; and photos of payment receipts uploaded as proof of payment.

Technical information

When something breaks in the app, our error-monitoring tool (Sentry) automatically records the technical details of what happened — the error message, which page it occurred on, and basic browser/device information — so we can fix it. It does not capture your passwords or payment receipt images.

What we don't do

We don't run advertising trackers, sell your data to anyone, or use analytics tools that profile you across other sites. Wasel doesn't process card payments or ever see your bank/card details — Whish and OMT numbers shown in the app belong to your provider, and any money transfer happens directly between you and them, outside of Wasel.

Who we share information with

We use a small number of service providers to run Wasel, and only share what each one needs to do its job:

  • Supabase — hosts our database, authentication, and file storage.
  • Vercel — hosts the website itself.
  • Sentry — receives technical error reports only, as described above.

If you tap "Send via WhatsApp," Wasel opens WhatsApp with a message pre-filled for you to review and send yourself — we don't transmit anything to WhatsApp automatically or on your behalf.

Your data, your control

Providers can delete a client record at any time, which permanently removes that client's sessions, files, ledger history, and receipts. If you're a client and want your account or data removed, or you have any other question about your data, contact us at charbelnaddsor@gmail.com.

Security

All traffic to Wasel is encrypted (HTTPS). Access to your data is restricted by row-level security rules in our database, so one provider's account can never read another's data, and a client can only ever see their own portal.

Children

Wasel is not directed at, and should not be used by, anyone under 16.

Changes to this policy

If we make meaningful changes to how we handle your data, we'll update this page and change the "Last updated" date above.