Privacy Policy
Your privacy matters — here is exactly what we collect and why
What we collect
Order data
Name, mobile number, email (optional), city, district and address, and your notes. Needed to prepare, deliver and follow up on your order.
Payment data
We never store card numbers. Payments are processed by licensed gateways (Moyasar, Tabby, Tamara); we only receive the transaction status and reference.
Phone verification
We send a one-time code (OTP) to confirm the number is yours. The code is deleted after verification or expiry.
Location
Entirely optional. If you pin your location on the map, we store the coordinates with the order solely to help the courier find you.
How we use it
- Preparing, shipping and invoicing your order (ZATCA-compliant e-invoicing).
- Contacting you via WhatsApp or phone regarding your order.
- Reminding you about a cart you left without checking out (you may ignore it).
- Improving the store through aggregate, non-identifying visit statistics.
- Complying with Saudi regulations, including e-invoicing requirements.
iPhone app & camera
The camera is used inside the app only to scan product barcodes at the point of sale. We do not capture, store or transmit any images — the barcode value is read on-device and discarded. You may deny camera access and continue using the app with manual search.
Push notifications are optional and used only to update you about your order. You can disable them in your device settings at any time.
Who we share with
We never sell or rent your data to anyone.
- Supabase — Secure database hosting and image storage.
- Moyasar · Tabby · Tamara — Payment processing, under their own privacy policies.
- SMS provider — Delivering the verification code to your phone only.
- Courier companies — Name, address and phone to deliver your order — nothing more.
Your rights
You may request a copy of your data, correct it, or ask us to delete your account and data permanently. Contact us and we will act within 30 days. Order and invoice records are retained for the period required by Saudi law even after a deletion request.