Privacy Policy

1. Definitions

For the purposes of this Privacy Policy, the following terms have the meanings set out below:

• Personal Data: Any data that may lead to identifying an individual specifically or make it possible to identify them, such as name, contact details, digital identifiers, and location data.
• User: Any individual who uses the app or interacts with its services.
• Sensitive Data: Data that includes what the law considers sensitive (such as health data, biometric data, beliefs, etc.).
• Data Controller: The entity that determines the purposes and means of processing personal data (Haratna).
• Processing: Any operation performed on personal data (collection, recording, organization, storage, modification, retrieval, use, sharing, destruction, etc.).
• Consent: A clear and explicit approval from the user for the processing of their personal data when required.
• Retention Period: The period during which we retain data before destroying it or anonymizing it, in accordance with the purpose and legal requirements.

2. Data We Collect (Personally Identifying Information)

We may collect your data in multiple ways when you register, use features, create orders, or contact us. Depending on what the user provides and what is necessary to provide the service, this may include:

Account and Contact Data

• Name (if provided)
• Mobile number
• Email address (if provided)
• Language preferences within the app

Orders and Service Data

• Order details (such as the list of requested products/services, text notes, delivery instructions)
• Technical support data and your communications with us (such as complaints or inquiries)

Location and Address Data (with permission)

• Approximate or precise location to identify nearby stores/services, complete delivery, and improve the app experience
• Delivery addresses you add within the app

Payment and Transaction Data

Payments (Not Currently Supported): The App does not currently process payments and does not collect or store any payment card or banking details. If payment features are introduced in the future, we will update this Privacy Policy before enabling them and will explain what data is collected, how it is used, and with whom it may be shared.

3. Non-Identifying Data (Technical/Usage Data)

We may automatically collect technical data when you use the app, such as:

• Device type, operating system, and app version
• IP address and device/app identifiers (where applicable)
• Crash logs and app performance data
• Usage logs (such as pages visited and session duration) for improvement and analytics

4. Purposes of Collecting and Using Data

We use your data for the following purposes:

• Providing the service and operating the app: Creating an account, managing orders, coordinating with service providers/stores (if any), and order confirmations.
• Customer service and technical support: Responding to your inquiries and handling complaints.
• Improving the app: Understanding usage, fixing issues, and developing features.
• Security and prevention of fraud/misuse: Protecting users and the platform and verifying unusual activity.
• Legal obligations: Complying with relevant laws and competent authority orders when required.
• Marketing (if you consent): Sending messages/notifications about offers, features, or updates that may interest you. You can opt out or disable notifications through your device settings or by contacting us.

5. Legal Basis for Processing Data

We process your data based on one or more of the following legal bases (as applicable):

• Consent (e.g., when requesting permissions such as location, or for direct marketing when required).
• Performance of contractual obligations to provide the service you requested through the app.
• Legal obligation when laws require retaining data/records or disclosure to competent authorities in accordance with legal procedures.
• Legitimate interest (where applicable and subject to controls), such as improving security, preventing fraud, and improving the service—while respecting your rights and not processing sensitive data on this basis except as permitted by law.

6. Personal Data Protection

We take appropriate organizational, administrative, and technical measures to protect your data, such as:

• Access controls and role-based permissions as needed
• Encryption of communications where applicable
• Security monitoring and data minimization (collecting only what is necessary)
• Procedures for handling security incidents

We also comply with relevant cybersecurity requirements to the extent applicable to the nature of our business and systems.

7. Sharing Personal Data

We do not sell or trade your personal data. We may share your data, to the extent necessary, with:

Service Providers (Data Processors)

Such as: cloud hosting, analytics providers, support systems, payment providers, maps/notification providers—under contracts and controls that ensure data protection and limit use to the specified purpose.

Parties Related to Service Delivery

Such as stores/service providers/delivery partners (if any), to the extent necessary to fulfill your order and serve you.

Competent Authorities

We may disclose your data if required under law or by an official order/request issued in accordance with legal procedures.

Aggregated/Anonymized Data

We may use or share aggregated statistics that do not identify you for analytics and service improvement purposes.

8. Analytics and Cookies (If Applicable)

In mobile apps, we may use SDKs or third-party analytics tools to understand performance and usage and improve the service. If we have a website linked to the service, we may use cookies to improve the user experience. These tools are intended for improvement and are not used to identify you directly except as allowed by your settings, your consent, and legal requirements.

9. Transfer of Data Outside the Kingdom

Your personal data may be transferred outside the Kingdom in specific cases (such as using an external hosting/service provider), only in accordance with legal controls and with appropriate safeguards, and in line with requirements governing cross-border transfers of personal data.

10. Data Retention and Destruction

We retain your data for the period necessary to achieve the purposes described in this policy, or as required by legal obligations, then we destroy it or anonymize it securely.

Illustrative examples of retention periods (may vary depending on legal requirements and the nature of the transaction):

• Account data: For as long as the account is active, then for a reasonable period for compliance/dispute resolution.
• Orders and transaction data: For the period needed to evidence transactions, provide customer support, and comply with obligations.
• Security and crash logs: For the period needed for security, investigations, and stability improvement.

11. User Rights (Data Subject)

You have rights regarding your personal data, including (subject to legal controls):

• Right to be informed: Know the legal basis for collecting data and its purposes.
• Right of access: Request access to your personal data.
• Right to obtain a copy: Data in a clear format.
• Right to correct/update: Correct inaccurate or incomplete data.
• Right to request destruction: When there is no longer a legal need or the purpose for which it was collected no longer applies.
• Right to withdraw consent: At any time (without affecting the lawfulness of processing before withdrawal).
• Right to submit a complaint: To the competent authority in accordance with procedures.

Response mechanism for requests: We will work to respond to requests to exercise rights within no more than 30 days (with possible extension when needed under the controls). We may request what is necessary to verify identity before fulfilling the request.

12. Third-Party Websites and Services

The app may contain links or integrations with third-party services (such as maps or payments). We do not control their privacy practices and recommend reviewing their privacy policies before using those services.

13. Privacy Policy Updates

We may update this policy from time to time. We will publish the updated version within the app and/or through our official channels. Your continued use of the app after updates are posted will be considered acceptance of the changes.

14. Governing Law and Dispute Resolution

This policy and any disputes arising from it are governed by the laws of the Kingdom of Saudi Arabia. The competent courts in the Kingdom shall have exclusive jurisdiction over any dispute related to this policy, unless applicable law provides otherwise.

15. Contact Us

If you have any questions or requests regarding this policy or exercising your rights, you can contact us at:

Email: 51rrwxmjj@mozmail.com