Security
How we protect your account
This page lists the protections in place, in plain words. It describes only what Dziri does. If you find a weakness, please tell us.
Protections in place
Built into the product.
Passwords
Passwords are never stored in readable form, and each one must be at least 8 characters long.
One-time codes
Codes we send to verify your phone number expire after a short time, work only once and stop working after too many wrong attempts.
Sign-in session
Your sign-in session is kept in a cookie that is only sent over encrypted connections.
Staff access
Our internal tools check each staff member's permissions before any action.
Location
Features that need your precise location ask for permission first, and offers near you don't store your position.
Protect your account
A few simple habits.
Use a strong password
Choose a password you don't use anywhere else.
Keep codes to yourself
Dziri will never ask for your password or a one-time code. Don't share them with anyone, including someone who says they work for us.
Sign out on shared devices
On a shared phone or computer, sign out when you're done. Sign out is in Profile, under Account.
Something wrong with your account?
If you think someone else has access to your account, write to support@dziri.app from the email address on your account.
Report a vulnerability
We welcome reports made in good faith.
If you find a security weakness in Dziri, email security@dziri.app. Please include:
- what the weakness is and which page or feature it affects
- the steps to reproduce it
- what someone could do with it
- how to reach you, and whether you would like to be credited
While you test
- Use only your own account and data. If you reach someone else's data, stop, don't keep a copy, and tell us.
- Don't change or delete data that isn't yours.
- Don't degrade the service for other people.
- Give us reasonable time to fix the issue before you share it publicly.
Out of scope
- Denial of service
- Social engineering of our staff or members
- Physical attacks
- Findings that need a stolen device or malware already installed on a member's phone
We aim to confirm that we have received your report and to keep you informed while we work on it.
See also
Privacy policy
What we collect, why, and your rights.
Safety center
Tools to stay safe on Dziri.
Transparency
How recommendations and moderation work.
Help center
Short answers about your account and the app.