Privacy policy · Hayina

This policy applies to the Hayina customer app, the Hayina for Merchants app, and this website. It follows the Personal Data Protection Law of the Kingdom of Saudi Arabia.

What we collect

Account data: your name and email when you sign in with a Google account, or your mobile number when you sign in with a code.
Addresses and location: the delivery addresses you save, and your current location if you allow it, to calculate distances; we do not track your location in the background.
Orders and wallet: what you order and from which store, wallet movements, returns and reviews.
Chats: your messages with stores and with support, including photos and voice messages.
Reports: what you report and why; the merchant is never told your identity.
Technical data: device and browser type, language and appearance, and error logs to improve the app.

Why we use it

To process, deliver and track your order, and to contact you about it.
To show the stores and products near you.
To answer your questions and reports and review them.
To prevent fraud and misuse, and to meet legal obligations.
To improve the app and measure what is used.

Who we share it with

The store you order from: your name, delivery address and mobile number, only to prepare and deliver the order.
Service providers: data hosting and databases (Supabase), maps (Google Maps), and Google sign-in; they process data on our behalf and under our instructions.
Authorities: upon a lawful request from a competent authority.

We do not sell your data and do not share it with third parties for advertising.

Retention and protection

We keep order and wallet data for the period the law requires for commercial records, and chats for as long as your account exists. Data is encrypted in transit and at rest, access is restricted by role, and every access by the admin team is logged.

Your rights

You may view and correct your data and request deletion of your account from inside the app ("Account" then "Delete account") or by contacting us, withdraw location consent from your device settings, and lodge a complaint with the Saudi Data and Artificial Intelligence Authority.

Children

The app is intended for people aged 18 and over. If we learn of a minor's account, we remove it.

Contact

For any question about this policy: the contact page, or the data officer's email listed on the company details page.