2. Data Controller and Contact
The controller of the personal data processed under this Policy is:
- Name: Al-Injazat Technologies (مؤسسة الإنجازات لتقنية المعلومات)
- Location: Khobar, Kingdom of Saudi Arabia
- Privacy & Legal email: as.tazajni@lagel
For any request regarding your personal data or to exercise your rights, contact us at the email above.
3. Scope
This Policy applies to all your interactions with the Services, whether through mobile apps, websites, or programming interfaces, and to all of our current and future products and applications. Where needed, we may provide a supplementary privacy notice for a specific Service; such notices are read together with – not instead of – this Policy.
4. Personal Data We Collect
We minimize data to what is necessary to provide the Service. Depending on the Service you use, we may collect:
- Account & identity data: mobile number (for account creation and SMS code verification), display name if you provide one, and an internal user identifier.
- Usage & preferences: favorite tools, saved results, language and notification settings, and in-app usage history.
- Device & technical data: device type, operating system and version, device/push identifiers (notification token), device language, and crash/performance diagnostics.
- Location data: approximate or precise location, only with your permission, to operate location-based tools (such as qibla, prayer times, national address, weather). You may revoke permission at any time in your device settings.
- Sensor data: some tools use device sensors (magnetic compass, accelerometer/motion, camera, microphone) locally on your device to function. We do not upload camera or microphone content to our servers unless a tool’s function explicitly requires it (e.g. device-to-device broadcast tools), as described within the tool.
- Subscription & payment data: for paid services, payment is processed by the app store (Apple App Store / Google Play) and the subscription-management provider. We receive subscription status and a non-financial identifier; we do not access or store your full bank card details.
- Communications & support: messages, enquiries, or reports you send us.
We do not intentionally collect sensitive personal data except where necessary, in accordance with the Law, and with your consent where required.
5. How We Collect Data
We collect data: (a) directly from you when you register, enter data, or set preferences; (b) automatically as you use the Services (device, usage, and diagnostic data); and (c) from third parties such as infrastructure providers, app stores, and the subscription provider, to the extent needed to operate the Service.
6. Legal Basis for Processing
We process your data on one or more of the following bases under the Law:
- Performance of a contract or taking steps at your request (e.g. creating your account and providing the Service).
- Your explicit consent (e.g. access to location, camera, or microphone, and marketing messages); you may withdraw it at any time without affecting prior processing.
- Legitimate interests of the Developer, within limits that do not override your rights (e.g. securing and improving the Services and preventing fraud).
- Legal obligation where required by the competent authorities under applicable laws.
7. Purposes of Processing
We use your data only to: create and verify your account; provide tool and service functionality; sync your preferences and results across your devices; send operational notifications and alerts you request; process subscriptions; improve performance and fix issues; protect and secure the Services and prevent misuse; communicate with you about support; and comply with the law. We do not make automated individual decisions with legal effect about you without a lawful basis.
8. Data Sharing and Disclosure
We do not sell your personal data. We may share it, only as necessary, with:
- Sub-processors (service providers): cloud, authentication, and database providers (Google Firebase), the subscription-management provider, app stores (Apple, Google), and hosting, analytics, and notification providers. They process data on our instructions under agreements protecting its confidentiality.
- Competent authorities: where there is a legal obligation, a court order, or to protect rights and safety, under applicable laws of the Kingdom.
- Mergers or business transfers: while maintaining the same level of protection and notifying you where required.
9. Cross-Border Data Transfers
Operating some Services may require processing or storing your data with providers outside the Kingdom of Saudi Arabia. Where this occurs, we comply with the PDPL and its Implementing Regulations and SDAIA’s cross-border data transfer controls, ensuring an adequate level of protection and appropriate safeguards.
10. Cookies and Similar Technologies
Our websites may use cookies or local-storage technologies (such as localStorage) to save your preferences (e.g. language), operate the site, and measure performance. You can control these through your browser settings; disabling them may affect some functionality.
11. Data Retention
We retain your data for as long as necessary to fulfil the stated purposes, or for the period required by applicable laws, whichever is longer. When no longer needed, we delete it or render it into a form that does not identify you.
12. Data Security
We apply appropriate organizational and technical measures to protect your data against loss or unauthorized access, disclosure, or alteration, including encryption in transit and access controls. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security. In the event of a notifiable data breach, we will notify the regulator and affected individuals as required by the Law.
13. Your Rights as a Data Subject
The Law grants you the following rights regarding your personal data:
- Right to be informed of the basis and purpose of collecting your data.
- Right to access your data held by us.
- Right to obtain a copy of your data in a clear format.
- Right to request correction, updating, or completion of your data.
- Right to request destruction of your data when no longer needed, subject to legal exceptions.
- Right to withdraw consent at any time for processing based on it.
To exercise any of these rights, contact us at as.tazajni@lagel. We may verify your identity before acting. We respond within the periods set by the Law, free of charge unless the request is repetitive or excessive.
14. Children’s Privacy
The Services are intended for individuals aged 18 and over. We do not knowingly collect data from minors without the consent of a parent or legal guardian. If we learn that we have collected a minor’s data without a lawful basis, we will take steps to delete it.
15. Marketing and Notifications
We send operational notifications necessary to provide the Service. Marketing messages are sent only with your explicit consent, and you may unsubscribe at any time via the app settings or an unsubscribe option.
16. Third-Party Services and Links
The Services may include links to or integrations with third-party services (such as stores and map/data providers). These third parties have their own privacy policies, and we are not responsible for their practices; we recommend you review them.
17. Changes to this Policy
We may update this Policy from time to time. We will publish the updated version with its effective date and notify you of material changes by an appropriate means. Your continued use of the Services after the update takes effect constitutes acceptance.
18. Complaints and the Regulator
If you believe our processing of your data violates the Law, we welcome your complaint at as.tazajni@lagel so we can review it. You also have the right to lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA) as the competent authority.
19. Governing Law
This Policy is governed by and construed in accordance with the laws of the Kingdom of Saudi Arabia, and the competent judicial authorities in the Kingdom have jurisdiction over any dispute arising from it.
20. Regional Provisions for Users Outside Saudi Arabia
Where the Services are made available outside the Kingdom, we comply – in addition to the Saudi PDPL – with the laws applicable in your home jurisdiction, including:
- European Economic Area & United Kingdom (GDPR / UK GDPR): we process your data on lawful bases (consent, performance of a contract, legitimate interests, legal obligation). You have the right to: access, rectification, erasure (“right to be forgotten”), restriction of processing, data portability, objection, withdrawal of consent, and to lodge a complaint with your competent supervisory authority. Transfers outside the area are made with appropriate safeguards (such as Standard Contractual Clauses, SCCs).
- California (CCPA/CPRA): you have the right to know, delete, correct, opt out of the “sale/sharing” of your data (we do not sell your data), limit the use of sensitive data, and not be discriminated against for exercising your rights.
- Brazil (LGPD): you have equivalent rights, supervised by the National Data Protection Authority (ANPD).
- Japan (APPI): we handle your data in accordance with the law, under the Personal Information Protection Commission (PPC).
- South Korea (PIPA): we comply with consent and data-protection requirements under the Personal Information Protection Commission (PIPC).
Age of eligibility: the Services are for those aged 18 and over. Where local law sets a lower age of digital consent, parental consent is required for those below it.
International transfers: your data may be processed in countries other than your home jurisdiction; we apply the necessary safeguards under applicable law. In case of conflict, the mandatory provisions of your home jurisdiction prevail to the extent its law guarantees.
21. Contact Us
For any question about this Policy or your privacy: Al-Injazat Technologies, Al Khobar, Kingdom of Saudi Arabia – as.tazajni@lagel