Privacy Policy

Introduction

Azimah Tech ("we," "our," or "us") is committed to protecting your privacy in accordance with the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL) and its Implementing Regulations issued by the Saudi Data & Artificial Intelligence Authority (SDAIA). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use our mobile applications (Customer App and Provider App) and website.

Definitions

Under the PDPL:

• "Personal Data" means any data that can identify an individual directly or indirectly
• "Sensitive Data" includes data revealing ethnic origin, religious beliefs, health data, and financial information
• "Data Controller" means Azimah Tech, which determines the purposes and means of processing personal data
• "Data Subject" means you, the individual whose personal data is being processed

Legal Basis for Processing

We process your personal data based on the following legal grounds under PDPL Article 5:

• Your explicit consent provided during registration
• Performance of a contract to which you are a party (service booking and delivery)
• Compliance with legal obligations under Saudi law
• Our legitimate interests in providing and improving our services

Personal Data We Collect

Personal Information

• Full name, email address, and phone number (for account creation and communication)
• Profile photo (optional, for account personalization)
• Delivery addresses and precise location data (for service delivery)
• National ID or commercial registration (for provider verification only)

Financial Information

• Payment card details (processed securely by Paymob, not stored by us)
• Transaction history and order records

Usage Information

• Device information (device type, operating system, unique device identifiers)
• App usage data, preferences, and interaction logs
• IP address and approximate location

Purpose of Data Processing

We collect and process your data for the following specific, clear, and explicit purposes:

• To create and manage your user account
• To facilitate bookings between customers and service providers
• To process payments and issue invoices
• To provide customer support and respond to inquiries
• To send service-related notifications (order updates, confirmations)
• To send promotional communications (only with your explicit consent)
• To improve our applications and develop new features
• To comply with legal and regulatory requirements

Data Sharing and Disclosure

We do not sell your personal data. We may share your data with:

• Service providers you book with (name, phone, delivery address - necessary for order fulfillment)
• Paymob (payment processor) - for secure transaction processing
• Supabase (cloud infrastructure) - for data storage and authentication
• Firebase/Google (analytics and notifications) - for app functionality
• Government authorities - when required by Saudi law or court order

Cross-Border Data Transfers

Your data may be transferred to and processed in countries outside Saudi Arabia where our service providers operate. We ensure appropriate safeguards are in place through:

• Standard Contractual Clauses (SCCs) with international service providers
• Ensuring recipient countries provide adequate data protection
• Obtaining your explicit consent for such transfers during registration

You may withdraw consent for cross-border transfers at any time, which may affect service availability.

Data Retention

We retain your personal data only as long as necessary:

• Account data: For the duration of your account plus 5 years for legal compliance
• Transaction records: 10 years as required by Saudi commercial law
• Marketing preferences: Until you withdraw consent
• Support inquiries: 3 years from resolution

Upon account deletion request, we will delete or anonymize your data within 30 days, except where retention is required by law.

Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for all data transmission
• Encrypted storage on secure Supabase servers
• Access controls and authentication requirements
• Regular security assessments and updates
• Employee training on data protection

Third-Party Services

Our applications use the following third-party services, each with their own privacy policies:

• Supabase - Database, authentication, and file storage (servers in Singapore)
• Firebase/Google - Push notifications, analytics, crash reporting
• Paymob - Payment processing (PCI-DSS compliant)
• Google Maps - Location services and mapping

Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us immediately.

Cookies and Tracking

Our website uses essential cookies for functionality. Our mobile apps use device identifiers for analytics. You can manage cookie preferences in your browser settings.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes via the app or email at least 30 days before they take effect. Continued use after changes constitutes acceptance.

Contact Us

For any questions about this Privacy Policy or to exercise your data rights, please contact us: