Privacy Policy
Last updated: 26 July 2026
Malla connects travellers with Tunisian excursion organizers. Booking an excursion means giving an organizer enough information to run a trip you are physically attending — your name and a phone number they can reach you on. This policy explains exactly what that involves, because it is the part people are most often not told.
The short version
- Your phone number is the centre of your account. Verifying it is how you sign in, and it is what links you to the organizers you have booked with — including bookings you made before you had an account.
- Organizers see your name and phone number for their own excursions. They have to: they call you to confirm a trip you pay for in cash on the day.
- Two parties hold your booking record, not one. Malla operates the platform; the organizer keeps their own customer list. Deleting your account does not erase an organizer's record that a trip happened.
- We never sell your data, and we do not use your phone number for advertising.
Who we are
Malla ("we", "us") operates this website at wheretogointunisia.com. For any privacy question, including a deletion request, write to contact@wassimbenr.com.
Definitions used below:
- Booker — someone who books an excursion or joins an organizer's community.
- Organizer — a business publishing excursions on Malla. Organizers are independent: they decide what to run, whom to contact, and how.
- Member record — the row an organizer holds about you once you book with or join them.
What we collect
When you create an account
- Phone number, which you verify with a one-time SMS code. This is your login identity.
- Name, which you enter once. Organizers see it next to your booking.
- Email address and profile picture, only if you sign in with Google.
- Preferred language, so we know which language to write to you in.
We do not ask for a password. We do not collect your date of birth, address, payment card, or identity document, because none of them are needed to run a day trip paid in cash.
When you book an excursion or join a community
- Which excursion, how many people are coming, and when you booked.
- Your booking status — confirmed, waitlisted, or cancelled.
Automatically
- Analytics (PostHog): pages visited, approximate country, device type, and product events such as "a booking was submitted". Signed-in bookers are not individually identified in analytics.
- Bot protection (Vercel BotID) on forms that write data, to stop automated submissions from taking real seats.
- Server logs, kept short-term for debugging and abuse investigation.
We do not run advertising pixels, and we do not share analytics with ad networks.
Your phone number links you across organizers
This deserves its own section because it is the least obvious thing we do.
When you verify a phone number, we look for member records held by organizers that carry that same number, and attach them to your account. That is what lets you open Malla and find a trip you booked before you had an account, along with the messages the organizer had already sent you.
Two consequences you should know:
- It works across every organizer, so verifying one number can attach you to several organizers at once.
- Phone numbers get recycled. Prepaid numbers in Tunisia change hands. If a number previously belonged to someone else who had booked a trip, whoever verifies it next inherits that history. Nothing of monetary value transfers — Malla holds no payment details and processes no payments — but it can mean seeing a stranger's past trip. If this happens to you, write to us and we will detach the records.
What organizers can and cannot see
An organizer whose excursion you book, or whose community you join, can see:
- Your name and phone number.
- Your bookings on their own excursions, including party size and status.
- Whether you have agreed to receive their announcements.
- Any review you leave for their excursion, with the name you sign it with.
An organizer cannot see:
- Your bookings with any other organizer.
- Your saved excursions or saved organizers.
- Your inbox, or whether you have read a message they sent — they see totals only.
- Your email address or your Google profile.
Organizers are independent controllers of their own member records. What they do with your number outside Malla — including messaging you on WhatsApp — is their responsibility, governed by their own practices and by Tunisian law.
Announcements, and how to stop them
Joining an organizer's community means agreeing to receive their announcements. You can turn that off per organizer, at any time, under Communities in your account. You can also leave a community entirely.
One thing we consider imperfect and are telling you plainly: a booking also creates a member record with announcements switched on. If you had previously switched them off for that organizer, booking again does not switch them back on — but a first booking does opt you in, and you may not expect that. Turn it off under Communities, or write to us.
Messages about a trip you are actually booked on — a cancellation, a promotion from the waitlist — are operational and are sent regardless of that setting, because you need them.
How long we keep things
- Account data — until you ask us to delete it.
- Bookings and member records — retained by the organizer as their business record. See the next section.
- Reviews — kept while the excursion page exists, since they are public content other travellers rely on.
- Analytics — retained by PostHog under their standard retention.
- Server logs — days, not months.
Your rights, and the honest limit on one of them
You can:
- See your data — your trips, saved items, communities and inbox are all visible in your account.
- Correct your name or language under Settings.
- Change your phone number, which re-verifies the new one.
- Withdraw consent for an organizer's announcements, per organizer.
- Ask us to delete your account. Email contact@wassimbenr.com.
The limit: deleting your account removes your Malla profile and unlinks you from organizers' member records, but it does not delete an organizer's record that a booking happened. An organizer is entitled to keep an anonymized business record of trips they ran — how many people came on a given day. We will remove your name and phone number from it. We say this rather than promising an erasure we cannot deliver on your behalf: the organizer is a separate controller, and once they have exported their list we do not control their copy.
If you are in the EU/EEA you additionally have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR, and may complain to your national supervisory authority.
Cookies
We use:
- Essential cookies — your session, so you stay signed in, and your language preference. These cannot be switched off without breaking sign-in.
- Analytics cookies — PostHog, to understand which pages and excursions people find.
We do not use advertising cookies. See our Cookie Policy for the detail.
Who processes data on our behalf
- Supabase — database, authentication and file storage.
- Vercel — hosting, and BotID bot protection.
- Twilio — sending your one-time sign-in codes by SMS.
- Resend — sending email notifications to organizers.
- PostHog — product analytics.
- Google — only if you choose to sign in with Google.
- MapLibre with Carto tiles — map display. Maps load tiles from Carto; no account data is sent.
Some of these operate outside Tunisia, so your data is transferred internationally and stored on their infrastructure, typically in the EU or the United States.
Security
Access to your data is enforced in the database itself, row by row, not only in the application. Your phone number can only be written by a verified one-time code — never directly by a browser. Sensitive operations run through server-side functions with ownership checks rather than direct client access.
No system is perfect. If you find a security problem, please write to contact@wassimbenr.com before disclosing it publicly.
Children
Malla is not intended for under-16s and we do not knowingly collect their data. An adult booking a trip for a family may of course bring children — we ask for a party size, not the names or ages of everyone coming.
Changes
We will update the date at the top when this policy changes. For a change that materially affects how we use your data, we will tell you in your Malla inbox rather than quietly editing this page.
Contact
contact@wassimbenr.com — for questions, corrections, deletion requests, or to report a recycled number that attached you to someone else's history.