سياسة الخصوصية

Welcome to Assal — a platform connecting cat owners with trusted sitters. We respect your privacy and are committed to protecting your personal data in line with Saudi Arabia's Personal Data Protection Law (PDPL). This policy explains what we collect, why, and how we handle it.

1. Who we are

The Assal app is owned by [Company Name Here], commercial registration [CR Number], Riyadh, Saudi Arabia. For privacy questions: privacy@assal.app.

2. What data we collect

a. At signup

• Phone number (for OTP verification)
• Full name
• City and neighborhood
• Profile photo (optional)

b. From sitters

• Home photos
• Short bio
• Approximate geolocation

c. Per booking

• Cat details (name, age, photos, health condition)
• Booking dates and requirements
• Messages between owner and sitter
• Daily updates during the stay

d. Payment data

• We do not store your card details. All payments are processed by our partner Moyasar (moyasar.com).
• We retain only the payment ID and status for accounting.

3. Why we collect this data

• Create your account and secure access
• Show nearby sitters and enable booking
• Send booking, message, and update notifications
• Prevent fraud and keep the platform safe
• Comply with legal and accounting requirements

4. Who we share data with

We share the minimum necessary data with trusted third parties:

• Moyasar — payment processing (cards, Apple Pay, STC Pay)
• Authentica — OTP SMS delivery
• Cloudflare R2 — photo and file storage
• Firebase / Apple Push Notification — notifications

We do not sell your data to third parties.

5. Data retention

• Account data: as long as you use the app
• Booking and payment records: 7 years (Zakat / tax compliance)
• Messages: 36 months after last activity
• On account deletion: data removed within 30 days, except records we must legally keep

6. Your rights under PDPL

• Access: request a copy of your data
• Correction: fix inaccurate data
• Deletion: request account and data deletion
• Restriction: ask us to limit processing
• Objection: object to specific processing

To exercise: privacy@assal.app — we respond within 30 days.

7. Security

We use strong encryption (TLS 1.3) in transit, and store data on servers located in Saudi Arabia (Oracle Cloud — Riyadh). We do not store passwords (OTP-only authentication).

8. Children

The app is not directed to anyone under 18. We do not knowingly collect children's data.

9. Policy changes

We may update this policy. We'll notify you of material changes in the app at least 30 days before they take effect.

10. Contact

Inquiries: privacy@assal.app
Support: support@assal.app