Privacy Policy
Effective 3 November 2026
Ghaf helps you track the payments on property you have bought off plan. It is made by Abdalkareem Omarieh ("we"). This policy explains what happens to your information when you use the Ghaf app for iPhone.
The short version: your properties and payments stay on your iPhone and in your own iCloud account. We cannot see them. There are no accounts, ads, analytics or tracking.
Your property data
Everything you enter in Ghaf, including properties, payment plans, payments, notes, photos and amounts set aside, is stored on your device. If iCloud is turned on for Ghaf, it is also stored in your private iCloud account using Apple's CloudKit, so it can sync to your other devices. Apple handles that storage under the Apple Privacy Policy. We have no access to it.
If you share a property with family, Apple's iCloud sharing makes it visible to the people you invite. You choose whether they can edit it or only view it, and you can stop sharing at any time.
Importing a payment plan from a PDF
Importing is optional. You can always enter a plan by hand. When you choose to import a PDF:
- Ghaf reads the text from the PDF on your iPhone and sends only that text to our server over an encrypted connection.
- Our server sends the text to OpenAI to turn it into a list of payments, and returns the result to the app for you to review.
- We do not keep the text or the result. Our server logs only the time, an anonymous device ID, the number of payments found and the amount of processing used.
- OpenAI does not use data sent through its API to train its models. It may keep it for up to 30 days to detect abuse, then deletes it. See the OpenAI Privacy Policy.
Please do not import documents that contain information you do not want processed this way.
Device registration
To stop the import service from being misused, the app proves to our server that it is a genuine copy of Ghaf, using Apple's App Attest. The server keeps a random device ID, the app version, a scrambled (hashed) access key and dates. This is not linked to your name, Apple ID or any of your property data. Registrations expire automatically.
Things that stay on your device
- Reminders are scheduled on your iPhone. No notification server is involved.
- Face ID lock is handled by iOS. Ghaf never sees your face data.
- Exports (PDF statements and CSV files) are created on your iPhone and go only where you send them.
- Widgets read from the app's data on your device.
What we do not do
- No sign-up or account.
- No advertising and no advertising IDs.
- No analytics, tracking or selling of data.
Deleting your data
Deleting a property in Ghaf removes it from your devices and your iCloud. Deleting the app removes the data on that device. To remove Ghaf's iCloud data entirely, open the Settings app, tap your name, then iCloud, then Manage Storage.
Children
Ghaf is meant for adults managing a property purchase. It is not directed at children.
Changes
If this policy changes, the new version will be posted on this page with a new effective date.
Contact
Questions about privacy: support@myappsbrain.com