Privacy Policy

Company SHAJRA AL-ASRA For Information Technology ("we," "our," or "us") is committed to protecting the privacy and personal data of our users in accordance with the Personal Data Protection Law (PDPL) of Saudi Arabia, Apple App Store Policies, and Google Play Store Policies. This Privacy Policy explains how we collect, use, and safeguard your personal data when you use our services.

1. Data Collection

1.1 Personal Data We Collect

We may collect the following types of personal data:

Identity Information: Name, age, gender.
Contact Information: Email address, phone number.
Account Information: Username, password, profile details.
Usage Data: Information about your interactions with Company SHAJRA AL-ASRA For Information Technology, including app interactions and preferences.
Device Information: IP address, device type, operating system, and other technical data.
Cookies & Tracking Data: Information collected through cookies, session tracking, and analytics technologies.

1.2 Methods of Data Collection

We collect personal data through:

Information you provide during account registration or profile setup.
Your interactions with the app, including posts and messages.
Automated technologies, such as cookies, log files, and analytics tools.

1.3 Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance user experience, analyze app usage, and provide personalized content. Users can manage cookie preferences via their device settings.

2. Legal Basis for Processing

We process personal data based on the following legal grounds:

User Consent: When you provide consent for specific uses of your data.
Contractual Necessity: When processing is required to provide our services.
Legal Obligation: When compliance with Saudi laws requires us to process certain data.
Legitimate Interest: When processing is necessary for security, fraud prevention, or service improvement, without overriding your rights.

3. Use of Personal Data

We use your personal data for the following purposes:

To provide and improve our services.
To verify your identity and manage your account.
To communicate with you about updates, features, and security alerts.
To comply with legal obligations under Saudi law.
To analyze usage patterns and enhance the user experience.
To support personalized content and targeted advertisements, where applicable.

4. Data Sharing and Disclosure

We do not sell your personal data. However, we may share data under the following conditions:

With your consent: When you explicitly authorize us to share your data.
For legal compliance: When required to comply with Saudi laws, regulations, or court orders.
With service providers: Third-party partners who assist in providing our services (e.g., cloud hosting, analytics, customer support), bound by strict confidentiality agreements.
For advertising and analytics purposes: If applicable, we work with third-party advertising networks that comply with platform policies.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. Specific retention periods include:

Account Information: Retained until account closure + 5 years (for legal compliance).
Transaction Data: Retained for up to 7 years for financial records.
Inactive Accounts: Deleted after 2 years of inactivity unless required by law.
Upon request: Users can request data deletion, subject to legal and contractual obligations.

6. Data Security & Breach Notification

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

Data encryption for stored and transmitted data.
Secure servers and firewalls to prevent unauthorized access.
Access controls and monitoring to detect potential threats.

In the event of a data breach, we will notify affected users and relevant authorities within 72 hours, in compliance with PDPL, Apple, and Google policies.

7. Your Rights

Under PDPL, you have the following rights:

Access and Review: Request access to your personal data and obtain a copy.
Correction: Request correction or updating of inaccurate or incomplete data.
Deletion: Request deletion of your personal data, subject to legal and contractual obligations.
Objection: Object to the processing of your data for specific purposes.
Data Portability: Request transfer of your data to another service provider.

How to Exercise Your Rights

To exercise your rights, please contact us using the details in Section 10. We will respond within 30 days as per legal requirements. Users may also request data deletion directly through app settings where available.

8. Children's Privacy

Company SHAJRA AL-ASRA For Information Technology is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a minor’s data has been collected without parental consent, we will delete it immediately.

To comply with Google Play Families Policy and Apple's Age Assurance Mechanism, additional parental consent verification may be required where applicable.

9. Cross-Border Data Transfers

If your data is transferred outside Saudi Arabia, we ensure it is done in compliance with PDPL, using approved safeguards such as:

Transferring data only to countries with adequate protection laws.
Implementing encryption and secure transfer protocols.
Ensuring contractual agreements with third-party processors.

10. Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or platform policies (Apple & Google). Users will be notified of significant changes via:

Email notification.
In-app notice.
Website announcement.

The latest version of this policy will always be available on our website and app.

الصفحة الرئيسية