← Home

Privacy Policy

Last updated: 15 November 2026

QAYD ALTNFYTH COMPANY (Q-TANFEETH), CR No. 7054946186, is committed to protecting your personal data under Saudi Arabia's Personal Data Protection Law (PDPL). This policy explains what data we collect, why, and how you can control it.

1. Data We Collect

• Contact details: name, email address, phone number.
• Project details: the type of service requested and the content of your message.
• Limited technical data: the IP address at the time a form is submitted, for security purposes only.
• Account data: if you have a client-portal account, invoice and support-ticket data tied to your project.

2. Why We Collect It

• To respond to your inquiry or service request.
• To perform the contract and issue tax invoices, a legal obligation to the Zakat, Tax and Customs Authority.
• To provide technical support through the ticketing system.
• To improve our services, we never use your data for marketing without your explicit, separate consent.

3. How Long We Keep It

Contact details you send us through the contact form or a service request are kept for 24 months from when you sent them, then deleted automatically. If you become a client, we keep your data for as long as we work together. If you unsubscribe from the newsletter, your email is deleted within 30 days. Accounting records (invoices and journal entries) must be retained for the period Saudi accounting and tax law requires, even if you request deletion. This is a statutory exception, not a disregard of your request.

4. Sharing Data With Third Parties

We never sell or rent your data. We share limited data only with the technical service providers necessary to run the system, such as our cloud hosting provider, under agreements that protect its confidentiality.

5. Your Rights

• Access: request a copy of the data we hold about you.
• Correction: request that inaccurate data be corrected.
• Deletion: request deletion of your data, subject to the statutory exceptions noted in Section 3 above.
• Withdrawing consent: you may withdraw your consent to processing at any time.

6. Contact Us

For any question about privacy or data protection, please reach us through the contact form on the homepage.

7. The QT-Loyalty App

This section covers the QT-Loyalty app for shop owners and their staff, in addition to the above. A shop's customers do not install the app: their card lives in Apple Wallet or Google Wallet.

Data the app handles

• Shop owner and staff: name, email address, role (owner or cashier), and a quick sign-in PIN stored in a hashed form that cannot be read.
• The shop: its name, country, type of business, logo, loyalty card settings, and branch locations the owner places on the map.
• The shop's customers: mobile number, name if the customer enters it, stamps and rewards, when they accepted the terms, and their consent to marketing messages if they chose it.
• Support: the content of messages you send to our support team.

• Camera: the app uses the camera only to scan the customer's card code. No photo or video is stored, and a stamp can be given by mobile number instead.
• Sign in with Apple: Apple gives us an identifier unique to you, your email address or Apple's private relay address if you chose to hide it, and your name if you share it. We never receive your Apple password, and a mobile number is optional. When the account is deleted, we revoke its link with Apple at once.
• Payment: in-app subscriptions are handled by Apple, and website subscriptions by a licensed payment gateway. We never see your card details either way; we only receive the plan and its end date.
• Hosting: our systems run on servers in the Riyadh region. We keep encrypted backups in Riyadh, plus an additional encrypted backup copy with a hosting provider outside Saudi Arabia to protect against data loss.
• Sharing: we do not sell data or use it for advertising, and the app contains no advertising trackers. We share it only as needed to run the service: Apple and Google for Wallet cards and their updates, and our email provider.
• Retention and deletion: data is kept while the account exists and deleted within 30 days of the account being deleted. The exception is tax invoices, kept for 6 years as required by the Zakat, Tax and Customs Authority, and used for no other purpose.
• Deleting the account: the owner can delete the shop's account from inside the app (Settings → Delete account), which signs every staff member out at once. A shop's customer can ask to delete their card from the card page itself.

Use of the app is governed by Apple's Standard End User License Agreement (Standard EULA).