Privacy Policy

This Privacy Policy explains how Muzahim (the “app”) and this website, operated by Muzahim (“we”, “us”), handle your information. Effective date: 27 September 2026. The English text of this policy is the operative version; the Arabic summary above is provided for convenience only.

The app and this website are both run by Muzahim.

Information we collect

We collect the following categories of personal data, and only these:

• Name -- your name, used to identify you within your agency.
• Email address -- used to sign in and to receive password-reset and account-deletion codes.
• Date of birth -- to verify that creators are at least 18. It is not a public profile field. Full dates are restricted to authorised administrative access; ordinary staff receive eligibility status rather than the birth date.
• User ID -- an account identifier that links your data to your account and to the agency you belong to. You can create an account with Apple, with an email address and password, or with TikTok. If you sign in with Apple or with TikTok, it also includes the identifier that provider hands us so it can recognise you the next time you sign in. Personal Apple and TikTok social sign-in does not send your provider password to us, and we do not keep the sign-in tokens TikTok issues: they are revoked right after your TikTok profile is read. An agency owner may separately connect business Backstage credentials as described below.
• TikTok username -- your public TikTok handle. A verified TikTok sign-in can establish ownership of the matching creator identity. A handle typed into an application is a request for review, not proof of ownership, and does not by itself grant access to a creator record.
• Contact details you type about someone else -- a free-text contact field on a creator record if you are agency staff, and the TikTok username, display name and optional phone, email or other contact account for a person you recruit through enabled creator-agent features. Provide another person’s details only when you are authorised to share them for this purpose. You type these in; the app never reads them from your device’s address book.
• Phone number -- if you enter one in the optional recruit contact field in the app, or pick it as your reply method on the application form on this website, described below.
• Financial records -- agency compensation settings, the selected EGP conversion rate and frozen monthly rate, informational Coin and EGP calculations, typed adjustments, prizes and penalties, reward statements, and related appeal details. These records help the agency calculate and explain estimated amounts. They are not payment instructions, payment statuses or a wallet, and the app does not hold, send or settle money.
• Private messages -- conversation text and sender/recipient information for enabled in-app messaging, with read status and the records needed to operate it safely. A message may include a private attachment such as a photo, document, video or stored voice-note audio.
• Support and safety requests -- report reasons, notes, relevant message or content references, agency appeals and their handling records, shared with authorised people who respond to the request or investigate abuse.
• Crash reports -- recoverable app errors, including an error message, stack, app version and account/agency identifiers. We redact sensitive text before keeping these first-party diagnostic records, but they remain linked to the reporting account. A crash that happens before you sign in is reported with no account identifier at all, and carries only a random per-installation value.
• App interactions -- records of product actions, sign-ins and when an authenticated session or registered device was last active, together with the screens you open and a small number of named buttons you press. These support app features, the first-party aggregate usage statistics described below, and the diagnostics described under Usage analytics and crash reports.
• Other user-generated content -- content you create in the app, such as messages you send to the in-app AI growth coach, its generated replies, support requests, notes or details entered while managing a roster, an agency logo image you choose to upload as your agency’s branding, and -- where your agency has switched the feature on -- the text prompts you write for the in-app image and video generator together with the pictures it makes for you.
• Report feedback -- comments written by authorised agency staff, with author and timestamps, visible to the report’s creator and authorised staff. These are not private staff notes and are not sent to AI providers.
• Notification token -- if you turn on push notifications, a notification token issued by your device’s operating system and your device platform (iOS or Android), used only to deliver the notifications you have enabled to your own device.
• Microphone recording -- only when you press and hold the record control in the mobile app to make a voice note. The microphone closes when you release or cancel. The app does not record in the background. Releasing the control creates a local draft, not a sent message; the audio is uploaded only if you press Send. A cancelled or removed unsent recording is deleted from the device.
• Connection records -- the IP address and the browser or app identification string your device sends with every request, written to a security log so that a suspected account takeover can be investigated. It is not used to work out where you are and it is never assembled into a profile.

The application form on this website, where an agency has opened one, collects those same categories and nothing beyond them: your TikTok username, your name, and a phone number or email address so the agency can reply, plus -- all optional -- your market, your own estimate of your follower and diamond figures, and a note. The reply address you type is stored encrypted and is readable only by the agency you applied to.

An agency’s own Backstage sign-in credentials are handled separately under How the app connects to TikTok below.

New message attachments, including their captions, are held for review by authorised agency moderators before recipients can view them. The sender and authorised reviewers can access the held content. Rejected attachments are not delivered. This review does not send the attachment to an additional AI provider.

تُحجب مرفقات الرسائل الجديدة ونصوصها عن المستلمين حتى يراجعها مشرف مخوّل في الوكالة. يستطيع المرسل والمراجعون المخوّلون الوصول إلى المحتوى المحجوب. لا تُسلَّم المرفقات المرفوضة، ولا تُرسل هذه المراجعة المرفق إلى مزوّد ذكاء اصطناعي إضافي.

We do not collect payment-card or bank-account details, or process or transfer money. Financial records described above are informational agency records. We do not collect precise or coarse location, health information, your contacts, camera input or advertising identifiers. Microphone access is limited to the voice-note action described above. The app touches your photo library in two places only: it reads the single image you pick as your agency’s logo, and it writes one back if you save a picture the app generated for you. It never browses, scans or uploads the rest of your photos.

How we use your information

We use the data above for the following purposes:

• App functionality, to provide the features of Muzahim: managing a roster, showing monthly LIVE figures, levels, event standings and informational Coin and EGP reward calculations, and powering optional AI coaching and media generation.
• Account management, to create and secure your account, sign you in, send password-reset and deletion codes, and keep the service working correctly.
• First-party usage statistics, to understand how the service is used and operated. Internal dashboards count active accounts over the last day, week and month, and show aggregate sign-in methods, device platforms and account roles. These counts are derived on our servers from account-linked activity and registration records. Aggregating the dashboard does not make the underlying records anonymous. No third-party analytics SDK receives these statistics, and they are not used for advertising or cross-app tracking.
• Personalised coaching, if you choose the Coach and consent to its provider processing: your display name, language, role and permitted performance context help the Coach address and guide you. Your email address is not included in that Coach context.

We do not use your data for advertising or for building a marketing profile, and we do not use it for any purpose incompatible with the ones above.

How the app connects to TikTok

Monthly LIVE figures shown in the app -- diamonds, valid days and LIVE hours -- are read through the agency’s own TikTok LIVE business (Backstage) connection. This is the agency’s own business data about its own creators; the app reads it and does not post, message or change anything. This connection is not a creator’s personal TikTok account.

When an agency chooses to connect its Backstage account, the agency’s Backstage login credentials (the username and password for that business account) are stored encrypted at rest on our servers. With the owner’s explicit permission, authorised server processes decrypt them when needed and send them to TikTok to authenticate and fetch that agency’s own roster and LIVE performance data. They are not disclosed to other agencies or sent to the AI Coach or media providers. The app and console never display saved credentials. We record the permission version, time, authorising account and agency/market; replacing credentials, a changed permission version or an expired permission requires the owner to agree again before further imports. An agency can disconnect at any time, and when it does, or when the agency’s account is deleted, the stored Backstage credentials are deleted.

How your data is protected

Your data is encrypted in transit between your device and our servers. Passwords for Muzahim email sign-in are stored only as secure hashes and cannot be recovered by us. Backstage business credentials are encrypted and accessed only as described above, not hashed. Access is restricted: agency staff see only the data their role permits, and each agency’s data is kept separate.

Data sharing and selling

We do not sell your personal data or share it for advertising. The parties that process data on our behalf are the service providers strictly needed to run the app -- a hosting provider that runs our servers, an email provider that delivers your sign-in, password-reset and deletion codes, a push-notification provider (Expo) that delivers app notifications to your device, and the AI providers described below for optional coaching and media generation. Provider processing is subject to the applicable service terms and privacy policies. Those providers may process data in countries other than yours and may retain limited data for service operation, safety, abuse prevention or legal compliance under their own terms. We do not promise a provider retention period or a use restriction that its applicable terms do not give us. Each service provider that processes personal data on our behalf is bound by contract, through its data-processing or service terms, to protect that data with safeguards at least equal to those described in this policy. We may disclose information if required by law or valid legal process.

The in-app AI growth coach

The app includes an optional AI growth coach you can chat with for guidance on growing your LIVE performance. Before the first message, the app asks you to consent to sending your current message, recent Coach transcript and the limited account context needed to answer to DeepSeek. That context may include your display name, language, role, agency or region, and permitted performance or reward-calculation facts. It does not include your email address. The request is processed under DeepSeek’s terms and privacy policy. As set out under international processing below, this may mean your Coach data is processed outside your country. Declining leaves the rest of the app available. We do not use your coach messages for advertising or to build a marketing profile. AI replies may be inaccurate and are not professional financial, legal or medical advice. Allowances and shared limits are explained below. Using the coach is optional, and you control what you type into it -- please do not put sensitive personal data (for example government identifiers, financial account details, or health information) into your coach messages.

Scheduled creator reports

If you are a creator and have given the DeepSeek consent above, the service also prepares a weekly and a monthly performance report for you on a schedule, without a request from you. The server calculates every figure itself. What the request sent to DeepSeek contains depends on the consent you gave. With the current consent, it contains your figures for the period: whether the report is weekly or monthly, whether the comparison with the previous period is complete or partial, your diamonds, LIVE hours, valid days, new followers and PK matches for the period and the period before with the direction of change, your diamonds per LIVE hour and average LIVE length, your LIVE days and valid days in a row; your level and targets: the agency’s level requirements, the valid days and LIVE hours you have and need for the next level and the days left in the month, your TikTok tier and the diamonds to the next tier, your diamond target and your PK-match target; when you go LIVE: your own strongest LIVE weekday and how your times of day or weekdays compare by diamonds per LIVE minute; and the server’s own short suggestions for you, with the figure behind each. If you gave the earlier consent and have not agreed again, the request contains only categories: whether the report is weekly or monthly, whether the comparison with the previous period is complete or partial, the direction of change (up, down, steady or no comparison) for your diamonds, LIVE hours, valid days, new followers and PK matches, the name of your own strongest LIVE weekday by diamonds when your recent LIVE history shows one, and a yes or no for whether a diamond target, a next-level target and a PK-match target exist. Neither request ever contains your name, handle, account or TikTok identifiers, messages, dates, restrictions or violations, or any money, reward or payout figure. DeepSeek returns only a short summary and plainer wording for the server’s suggestions; it may not add advice or figures, and the app shows the figures it calculated. Consent is checked again before sending a scheduled request. Withdrawing consent prevents future reports but cannot recall an in-flight request, which remains subject to DeepSeek’s own retention terms. You can report a delivered report from inside the app; your agency’s owner or a permitted agent reviews it. Minimal report alerts also go to developer escalation, without report evidence or reporter identity.

Authorised staff may add creator-visible feedback to a report. You can report a comment and block its author. Blocks prevent new messages and report feedback between the pair, without hiding past history. Block management remains available when chat is disabled. Authors can edit their own feedback when still authorised; authors and owners can remove it.

يمكن للموظف المخوّل إضافة ملاحظات إلى التقرير يراها المبدع والموظفون المخوّلون مع اسم الكاتب والتاريخ. ليست ملاحظات داخلية، ولا تُرسل إلى مزوّدي الذكاء الاصطناعي. يمكنك الإبلاغ عنها وحظر كاتبها. يمنع الحظر الرسائل وملاحظات التقارير الجديدة بينكما، ويبقى السجل السابق. تتوفر إدارة الحظر حتى عند إيقاف المحادثات. يمكن للكاتب تعديل ملاحظاته ما دامت لديه الصلاحية، ويمكنه أو المالك حذفها.

Optional AI images and video

When image generation is configured and enabled, OpenAI processes the request to create your image. The request contains the template, brief, palette and any event name and date you enter. When video generation is configured and enabled, Google Gemini processes the source image, its associated prompt and your animation choices to create a video. Video processing is not activated simply by having an account or receiving an allowance.

Before sending content, the app identifies the provider and asks for your explicit permission. An allowance granted by the owner is not consent to share your content. You may decline and use the rest of the app. Only submit content you have the right to use, and do not include sensitive personal data. Provider handling is subject to the applicable service terms and privacy policies of that provider. Those terms may permit retention needed for service operation, safety, abuse prevention or legal compliance. We do not promise immediate deletion, zero retention or use limits that the applicable provider terms do not give us. Generated results may be inaccurate or unsuitable and should be reviewed before use.

Free AI allowances

Coach and media allowances start at zero for every user, and only the agency owner can allocate them. The service also applies an owner-set monthly spending ceiling and separate deployment-wide safety limits. An individual allowance does not guarantee availability when a spending limit is reached, a provider is unavailable or a request is declined for safety. There are no paid AI credits, purchases or subscriptions in the app.

Usage analytics and crash reports

To keep the app working and to see which features are actually useful, the app records two kinds of diagnostic information about itself.

• Usage analytics -- which screen you opened, how long you stayed on it, the names of a small number of buttons you pressed in the flows we are working on, and requests to our own server that failed. Each record carries your user ID and your agency, so it is linked to your account.
• Crash reports -- when the app hits an error, the error message and its technical stack trace, the screen you were on, the app version, and your device model and operating-system version. A crash that happens before you have signed in is reported without any account identifier at all; it carries a random value that identifies the installation and nothing about you.

These records deliberately contain no content: not what you typed, not a TikTok username, not an email address, not an amount, and not a message. The app sends only a fixed list of technical fields, and anything outside that list is discarded before it is stored.

We use this for one purpose: keeping the app working and deciding what to build. We do not use it for advertising, we do not build a marketing profile from it, we do not sell it, and we do not share it with any third party. It is stored on our own servers, and usage analytics are deleted after 30 days. You can ask us what has been recorded about you, or ask for it to be deleted, using the contact details below.

Push notifications

If you turn on notifications, your device’s operating system issues a notification token that identifies your device to Apple’s or Google’s push service, and we store that token with your device platform (iOS or Android). We use it for one purpose only: to deliver the app notifications you have enabled to your device. Delivery is handled by Expo, our push-notification service provider, which passes each notification to Apple or Google on our behalf and is bound to use it only for that delivery. You can turn notifications off at any time in your device settings, and choose which kinds reach you in the app’s own notification settings; a token from a device that has uninstalled the app is dropped when its push service reports the device is gone.

Data retention

Usage analytics are kept for 30 days and then deleted. Crash reports are kept as first-party security and diagnostic records for as long as reasonably needed to investigate a problem, protect the service or meet a legal obligation.

Private messages and their attachments, including voice notes, are kept for the retention period configured by the agency and are removed together after that period. Evidence copied into an open safety report may be kept while the report is investigated. Account deletion removes the deleting person’s private conversations and their stored attachment files.

For Coach, we store provider and model identifiers, usage and cost records, a request fingerprint, a system-prompt checksum and the encrypted committed reply needed for safe retry and review. The Coach ledger does not store a copy of the full input transcript. Account deletion clears the personal committed reply while non-content usage, billing and attempt records may remain.

Account deletion removes report feedback authored by the deleting person, feedback attached to a deleting creator and related moderation evidence. Removing a comment during ordinary use hides its text from the report; a retry-prevention record and existing moderation evidence may remain.

يحذف حذف الحساب ملاحظات التقارير التي كتبها صاحب الحساب، والملاحظات المرتبطة بالمبدع الذي يُحذف حسابه، وأدلة المراجعة ذات الصلة. أمّا حذف ملاحظة أثناء الاستخدام العادي فيزيل نصها من التقرير؛ وقد يبقى سجل لمنع تكرار الطلب وأدلة مراجعة موجودة مسبقًا.

AI media prompts, request options, provider and moderation records, and generated files form the generation history. Generated files become eligible for removal after the agency’s configured asset-retention period. A source image may be kept longer while a retained video depends on it. Account deletion removes the prompt, request options, generated files and related report evidence. Non-content operation, cost and moderation-status records may remain without the prompt, generated file or moderation reason for operational, safety, audit or legal purposes. DeepSeek, OpenAI and Google control their own provider-side retention under the terms and privacy policies that apply to our use of their services.

We keep your personal data for as long as your account is active. When you delete your account, your sign-in identifiers, name, email address, sign-in credentials and the personal content on the account are deleted. Direct TikTok identifiers are removed from the creator record and source copies linked to the account by proven ownership or stable source identity. Accounting figures and audit event history remain. Classified personal text and account/network identifiers attributed to the deleted person are removed through field-specific erasure controls, without changing financial amounts. Technical account and membership IDs may remain, but they no longer enable sign-in. These technical records are not described as anonymous aggregates. A reused handle alone is not treated as proof that a historical third-party record belongs to your account. You can request deletion at any time.

Agency-scoped keyed suppression tokens are used only to prevent deleted source identities from being imported again. They store no raw handle, but remain pseudonymous operational data, not anonymous accounting figures. Keyed retry proofs also recognize previously processed requests without retaining their personal note text. A different verified source identity is treated separately even if it later uses the same handle. These tokens remain while needed to prevent re-import; no fixed expiry or legal retention period has been established.

تُزال معرّفات تيك توك المباشرة من سجل المبدع ونسخ المصدر التي يعالجها الحذف. تبقى الأرقام المحاسبية. قد تبقى المعرّفات التقنية للحساب والعضوية، لكنها لا تتيح تسجيل الدخول. تُزال الحقول الشخصية المصنّفة ومعرّفات الحساب والشبكة المنسوبة إلى الشخص المحذوف من سجلات التدقيق بضوابط حذف محدّدة، مع الحفاظ على الأحداث والمبالغ المالية. لا نصف السجلات التقنية المتبقية بأنها إجماليات مجهولة الهوية. لا يكفي تشابه اسم المستخدم لإثبات ملكية سجل تاريخي لطرف آخر. تُستخدم رموز مشتقة بمفتاح خاص بكل نطاق وكالة لمنع إعادة استيراد بيانات المصدر المحذوفة فقط، ولا تخزّن اسم المستخدم نفسه. تبقى هذه الرموز بيانات تشغيلية مستعارة الهوية. تتيح بصمات إعادة المحاولة التعرّف على الطلبات المعالجة سابقًا من دون الاحتفاظ بنص الملاحظات الشخصية. تُعامل هوية مصدر مختلفة بصورة مستقلة ولو استخدمت اسم المستخدم نفسه لاحقًا. لم تُحدّد مدة ثابتة لانتهاء هذه الرموز أو مدة قانونية للاحتفاظ بها.

Deleting your account and data

You can initiate deletion of your Muzahim account and its personal data in the app. An email-verified web flow is also available:

• In the app: open Account → Delete account and confirm. A sole owner can confirm an in-app deletion request for the developer team to complete within 24 hours. No replacement owner or separate support email is required. If no other owner remains, the agency workspace is suspended when the account is erased. The request screen shows the deadline. A secure receipt on the requesting device can show completion when you next open the app, including after sign-out. Completion email is also sent when a verified address is available. Uninstalling the app or losing its secure storage can remove the device receipt.
• On the web: visit https://muzahimagency.com/account/delete, enter the email address on your account, and confirm with the code we email you. No app and no password are needed. A sole owner must use the in-app deletion request described above.

يمكن للمالك الوحيد فتح «الحساب ← حذف الحساب» وتأكيد طلب حذف يتولّاه فريق التطوير خلال 24 ساعة، من دون تعيين مالك بديل أو مراسلة الدعم. تظهر مهلة التنفيذ في شاشة الطلب. تُعلّق مساحة عمل الوكالة عند حذف الحساب إذا لم يبقَ مالك آخر. يعرض إيصال آمن على الجهاز الذي أرسل الطلب تأكيد الإتمام عند فتح التطبيق مجددًا، حتى بعد تسجيل الخروج. يُرسل تأكيد بالبريد أيضًا عند توفر عنوان متحقق منه. قد تؤدي إزالة التطبيق أو فقدان التخزين الآمن إلى فقدان إيصال الجهاز.

The completion-email address is encrypted while awaiting delivery and removed after successful sending or after seven days. Completed owner-deletion receipts are retained for 90 days to support confirmation and delivery troubleshooting, then removed. Pending requests are retained until fulfilled. Device receipts contain a secret that grants only access to deletion status, not to the account or agency data; only a hash of that secret is stored on the server.

يُحفظ عنوان بريد تأكيد الإتمام مشفّرًا حتى الإرسال، ثم يُحذف بعد نجاح الإرسال أو مرور سبعة أيام. تُحفظ إيصالات طلبات حذف المالك المكتملة 90 يومًا للتأكيد ومتابعة مشاكل التسليم ثم تُحذف. تبقى الطلبات المعلّقة حتى تنفيذها. يمنح سر إيصال الجهاز الوصول إلى حالة الحذف فقط، وليس إلى الحساب أو بيانات الوكالة، ولا يخزّن الخادم إلا بصمته.

Deletion removes your name, email address, date of birth, sign-in identities and credentials, personal content and open sessions. Deletion is permanent once completed; there is no recovery afterwards. A temporary processing or storage failure may delay completion. We retain unfinished requests for retry. The account deletion page explains exactly what is deleted and the limited records that may remain.

Your rights

Depending on where you live, you may have rights under laws such as the GDPR and the CCPA, including the right to access the personal data we hold about you, to request its correction, and to request its deletion. You may also object to or restrict certain processing and, where applicable, request data portability. Because we do not sell data, there is nothing to opt out of on that basis. To exercise any right, use the in-app or web deletion flow, or write to us at info@muzahimagency.com. We do not charge for a privacy request and we will not ask you why.

Children’s privacy

Muzahim is intended for adults (18+) and is not directed at children. TikTok LIVE is not open to under-18s. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

International processing

We operate the service from, and store data in, facilities that may be located outside your country. DeepSeek may process Coach requests, OpenAI may process image requests, and Google may process Gemini video requests in other countries when those optional integrations are configured and you consent. Applicable data-protection safeguards and each provider’s terms and privacy policy govern those transfers.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the effective date at the top and post the new version here. Where a change requires direct notice under applicable law, we will provide it.

Contact us

Questions, requests and complaints about privacy all go to the same place: info@muzahimagency.com.

Muzahim, Cairo, Egypt