MSRA

Last updated: June 16, 2026 MSRA collects account data (email, username, profile selection, identifiers and verification state); location only when you use nearby, maps or route features; user content such as saved items, community messages, reviews, suggestions, reports, blocks and support requests; and technical data such as app/device version, crash diagnostics, security signals, IP address and server logs. MSRA does not continuously track location in the background. We use this data to authenticate users, provide tourism and map features, synchronize content, operate and moderate communities, answer support, prevent abuse, secure the service, diagnose failures and comply with law. We do not sell personal data. Service providers include Supabase (authentication, database and storage), Google Maps Platform (maps and route calculations), Sentry (crash/performance diagnostics when enabled), and hosting/email providers. They process data only as needed for their services and under their own terms. We may disclose data when legally required or necessary to protect users and MSRA. Location permission is optional and can be revoked in device settings. Community content may be visible to other signed-in users. Users can report messages and block users; automated filters and human moderators may restrict or remove content and accounts. Account data is retained while the account is active. Support, moderation and security records are retained only as reasonably necessary for resolution, safety, fraud prevention and legal compliance. Logs follow operational and provider retention schedules. Data is deleted or de-identified when no longer needed. You can update your profile and delete your account in Profile > Delete Account or at https://cms.msra.om/account-deletion. Deletion removes the account and associated personal content, subject to limited retention required for security, law, disputes or de-identified records. Contact privacy@msra.om for access, correction or deletion requests. We use encrypted transport, access controls, row-level database security, authenticated deletion and operational monitoring. No system guarantees absolute security. MSRA is not directed to children under 13 and does not knowingly collect their data. Providers may process data outside Oman with appropriate safeguards. We may update this policy and will publish the revised date and material notices.