Qurb — Privacy Policy

Last updated 2026-08-27 · v1.0 · Draft pending Saudi counsel review; drafted against the Saudi Personal Data Protection Law (PDPL).

1 · Principle

Qurb is a map of nearby merchant offers, built on data minimisation. Browsing needs no account; a mobile number is the only field ever required, and only at first redemption. No name, email, birth date, or national ID.

2 · Location

Precise location is used on the device only — to center the map and sort by proximity. It is never transmitted to our servers and never stored in any user-linked record; the database schema itself has no column for user coordinates. The app sends only the visible map viewport. If location permission is declined, choosing a district shows the identical full list of offers.

For analytics unlinked to identity, a coarse area code (~5 km precision) tied to a temporary device identifier is recorded and deleted within 12 months.

3 · Data collected and retention

• Mobile number (encrypted) — account and one-time-code verification — kept until account deletion.
• Redemption history (offer, venue, time) — receipts and dispute handling — unlinked from the account after 24 months.
• Code-delivery log (never the code, never the plain number) — 90 days.
• Device identifier — abuse prevention — 90 days from last use.
• Consent log — proof of opt-in for optional messages — life of the account.

4 · What we do not do

• No selling of data, no data brokers, no advertising, no cross-app tracking.
• No consumer identity is ever shared with merchants — a merchant sees confirmation and the offer name only.
• No marketing messages without logged, revocable, explicit consent; essential service messages (verification codes) are independent of it.
• No third-party analytics or crash-reporting SDKs in the app.

5 · Residency and processors

Data resides in the Kingdom of Saudi Arabia. Processors: an in-Kingdom hosting provider, a verification-message provider (WhatsApp/SMS), and the Wathq commercial-registry service for merchant verification. User data is not transferred outside the Kingdom.

6 · Your rights

Directly in the Account screen, with no correspondence: export a full copy of your data, and delete the account permanently (effective immediately; identity fully erased within 30 days). Statutory rights of access, correction, and objection remain available via the contact below.

7 · Merchant data

The merchant console collects a contact mobile number, commercial-registration number, the legal name as returned by Wathq, and the venue's public listing data. Verification evidence is retained 10 years per regulatory requirements. Payment data is processed by a licensed Saudi payment provider and never touches our infrastructure.

8 · Contact

Privacy contact: [email protected] · Data controller: [legal entity — completed upon commercial registration].