Dorehami Privacy Policy
Last updated: 10 November 2026
Dorehami ("we", "us"), formerly called Baham, is an app for Persians living outside Iran to find events, groups and local businesses, and to plan get-togethers. This policy explains what we collect, why, who helps us run Dorehami, and the choices you have. Dorehami is run by Hamidreza Ensafian, an individual based in Sydney, Australia (Dorehami is not yet a registered company). Contact: support@joinbaham.com.
The short version
- We collect what Dorehami needs to work: your account, your profile, and what you do in the app (events, groups, messages, photos you add).
- We never sell your personal information, and we don't show third-party ads that track you.
- Your date of birth and gender are private. Others only ever see totals, such as "12 women, 9 men, mostly 25–34", and only when at least 5 people have answered.
- You can delete your account at any time in Settings → Delete account.
What we collect
When you sign up. You can sign in with Google, with Apple, or with a one-time code sent to your email.
- From Google we receive your name, your email address, whether that address is verified, and your profile photo. We ask Google only for the basic "openid", "email" and "profile" permissions.
- From Apple we receive a private account identifier and, if you choose to share them, your name and email (which may be an Apple private relay address).
- We don't receive or store any password.
Your profile. Name, profile photo, home city or neighbourhood, search radius and interests.
- Optionally, your date of birth and gender. We use these only for age checks (you must be 16 or older) and for anonymous totals.
- Your choice of who may send you direct messages.
Your location. If you allow it, we use your device's location to show events and groups near you and to estimate travel times. Otherwise we use the city you choose. We don't track your location in the background.
What you do in Dorehami. This includes:
- events you create, join, save or request to join;
- groups you join or organize;
- messages in event chats, group chats and direct messages;
- polls, checklists, carpools, expenses and receipt photos you add;
- photos you add to event albums;
- vouchers you claim and businesses you follow;
- reports and blocks you make.
Businesses. If you list a business, we keep its details and plan. When you view a business page, we record the visit. The business only sees totals (visits, rough area, gender and age ranges, with small numbers grouped together). It never sees who you are.
Your device. A push notification token, so we can send you notifications you've turned on. We also keep basic technical records (such as IP address and request logs) to keep Dorehami secure and working.
How we use it
- To run Dorehami: your account, your feed, events, groups, chats, tickets, carpools, expenses, vouchers and notifications.
- To keep people safe: preventing spam and abuse, enforcing our Terms, handling reports, and suspending accounts that break the rules.
- To send you emails you need, such as sign-in codes, and, if you choose, news about Dorehami. You can unsubscribe from news at any time.
- To understand overall use with totals and averages, so we can improve the app.
We don't use your information for advertising profiles, and we don't sell or rent it to anyone.
What other people see
- Other members can see your name, profile photo, the city you chose, the events you're going to (where the event shows its guests), the groups you're in, and what you post in chats you share with them.
- Hosts and group organizers see who has joined or asked to join.
- Nobody else ever sees your email, date of birth or gender.
Who helps us run Dorehami
We use trusted service providers that process data only on our behalf:
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and the photos you upload | Australia |
| Fly.io | Servers and live chat | Australia |
| Redis host | Temporary data (sign-in codes, caching) | Australia |
| Resend | Sign-in and service emails from hello@joinbaham.com | Japan |
| Expo | Delivering push notifications to your phone | United States |
| Google and Apple | Signing you in, if you choose them | United States |
| OpenStreetMap (Nominatim) | Finding an event's address on the map (the address text is sent) | Europe |
| Open-Meteo | Weather forecasts for events (the event's location is sent) | Europe |
| OSRM | Travel time estimates (start and end points are sent) | Europe |
We may also share information if the law requires it, to protect someone's safety, or as part of a sale or reorganisation of Dorehami, in which case this policy continues to apply.
How long we keep it
- Your account. We keep it while it's active.
- When you delete your account, this is what happens straight away:
- Erased: your name, profile photo, email, phone, date of birth, gender, interests, location, sign-in links, push devices, saved events, follows and notifications. You leave your groups and upcoming events.
- Deleted files: the photos you added to events, your receipt photos, the screenshots you sent with problem reports, and any other file you uploaded, from our storage as well as from the app.
- Cancelled: upcoming events you host alone. Events you co-host pass to the other host.
- Kept, without your name: so that other people's records still add up and our community stays safe, we keep messages you sent in event and group chats, shared expense amounts, the text of problem reports you sent us, and reports you made about other members. They show "Deleted member" instead of your name and can no longer be linked to you.
- Kept with the event, group or page: a cover photo you chose for an event or group that carries on with other people, or a photo on a business page that is still live, stays with it. Ask us at support@joinbaham.com and we will remove it.
- Sign-in codes expire after 5 minutes.
- Backups and logs. Our providers keep them for a limited time, after which they are deleted.
Your choices and rights
- See and change your profile any time in the app.
- Control who can message you, which notifications you get, and whether the app uses your location.
- Delete your account in Settings → Delete account.
- Ask us for a copy of your data, or to correct or delete it, by writing to support@joinbaham.com.
Depending on where you live (for example under the GDPR, UK GDPR, Australian Privacy Principles, PIPEDA or California law), you may have further rights, including objecting to some uses and complaining to your data protection authority.
Age
Dorehami is for people aged 16 and older. If we learn that someone younger has an account, we delete it.
Security
- Connections are encrypted.
- We never store passwords, because there aren't any.
- Sign-in codes are stored only in scrambled form.
- Sessions can be ended at any time.
- Access to our systems is limited to the people who run Dorehami.
No system is perfectly secure, so please contact us at once if you notice anything wrong.
Changes
If we change this policy in a way that matters, we'll tell you in the app or by email before it takes effect.