How we protect your data
In plain words: what we keep about you, how we protect it, who can see it, and what you control.
Encrypted before it's stored
Your national ID, document numbers, ID images and every file you upload are encrypted on the server with AES-256 before they're saved. The key isn't in the database, so a stolen copy of it reveals nothing.
Seen only by who needs it
Your request is seen only by the staff of the office handling it, not by all staff. Your ID images are seen only by the staff assigned to verification. Your name, phone and national ID never appear on any public page.
Every view is logged
Every time someone opens your ID image or downloads your documents, the staff member's name and the time are logged in a record staff can't change, reviewed by the platform's administrators.
Sign-in without a password
You sign in with a 6-digit code sent to your email, valid for 10 minutes and cancelled after 5 wrong tries. There's no password to steal or guess, and staff themselves sign in with a password plus an email code.
A person verifies your identity
We don't use AI or outside companies to check your ID. An assigned staff member compares the card with your details, so nobody can send requests in your name.
An automatic check for abusive content
Before reports, questions, notices and their photos are accepted, AI (Google's Gemini service) checks them to stop indecent photos, insults and threats. Only the text and photo are sent, without your name or number. A refused photo is deleted at once. After 5 refused tries in a day, sending from that device or number stops for 24 hours; for this we keep scrambled codes, not your number or internet address, and one cookie that tells browsers apart. Your ID images and request documents are never sent to any outside service.
Your data, your control
From “My services” you can, at any time, download everything we keep about you in one file, or delete your account for good with its requests, documents and files.
Who sees what?
| Data | Who can see it |
|---|---|
| Name, phone, email | Staff of the office handling your request, and the platform's administrators |
| Full national ID | Only the administrators and verifiers (others see the last 4 digits) |
| ID card images | Only verifiers, and every view is logged |
| Request documents | Staff of the responsible office, and every download is logged |
| Family, vehicles, properties, your documents | Only you |
| Reports (without your name) | Everyone sees only the type, status and district |
What we will never do
- We never sell your data or share it with anyone for commercial or advertising purposes.
- We use no tracking cookies and no ads.
- No staff member will ever call you to ask for your sign-in code. Anyone who does is a scammer.
- We never ask you to pay through the platform. Fees are paid only at official cashier desks.
How to stay safe
- Check the address bar shows ainalraqqa.com before entering your details.
- Never share your sign-in code with anyone, even if they say they're from the platform.
- Sign out if you used a shared computer or an internet café.
- If you see a request you didn't send or anything odd in your account, contact us right away.
A question about your data, or a security problem to report?