Privacy Notice

[LEGAL COMPANY NAME] (commercial registration [CR NUMBER], [ADDRESS]) is responsible for the personal data described in this notice (the "controller").

Privacy contact: [PRIVACY EMAIL]

This notice is written to meet our obligations under the Personal Data Protection Law of the Sultanate of Oman (Royal Decree 6/2022) and its Executive Regulations.

• Vehicle owners who create an account ("owners").
• People who scan a Sayaara Tag to contact an owner ("scanners"). Scanners do not need an account.
• Visitors to our website.

• Mobile number — to sign you in with one-time codes and to deliver alerts to you. It is never shown to scanners. We store it encrypted (AES-256-GCM) and look it up using a keyed one-way hash. Our authentication provider also stores it, with your email, to operate sign-in.
• Full name and email address — to run your account and contact you about it.
• Date of birth — to confirm you are 18 or over.
• Delivery address and city, or your chosen pickup point — to get your tag to you.
• Vehicle details: plate number, Mulkia (registration card) number and expiry, make, model, year and colour — to link your tag to your vehicle. The plate, make, model, colour and year are shown to anyone who scans your tag.
• Scan and alert history — the issue reported, any message, photo and location, and whether the alert was delivered.
• Optional features you choose to use: emergency contacts (name, phone number, relationship), saved parking spots (location and notes), parking bookings, and the name of the person you hand your car to in Guard Mode.
• Subscription and payment records — plan, amount, dates, payment reference and status. Card details are handled by Tap Payments and never reach us.
• Consent records, privacy requests, complaints and abuse reports you make.
• Security data — server logs, audit logs of account and admin actions, and your IP address, which we use for rate limiting and store only as a keyed hash.
• Analytics — only if you accept analytics: pages viewed and actions taken in the app, linked to your account ID once you sign in.

We do not ask for your Civil ID or Resident Card number, passport or driving licence.

• Mobile number — verified with a one-time code so alerts cannot be sent anonymously in bulk. It is held for up to 15 minutes to complete the verification, is not saved in our database, and is never shown to the owner. With each alert we keep a keyed one-way hash of the number, so that an owner or our team can block abusive senders.
• The issue type, your optional message, a photo of the situation (required) and, if you allow it, your location — these are sent to the vehicle owner by SMS and/or WhatsApp.
• Your IP address (stored only as a keyed hash) and a device identifier — to prevent abuse and enforce rate limits.

Photos are stored temporarily and deleted automatically, normally within 48 hours. Copies already delivered to the owner's phone, or held in our messaging providers' records, are outside that automatic deletion.

• Essential cookies and browser storage needed for the site to work (see our Cookie Policy).
• Analytics, only if you accept.
• If you use the Nearby map, your location is sent to our server and to the OpenStreetMap Overpass service to find places near you; map images are loaded from OpenStreetMap, which receives your IP address. We do not save your location for this feature.

We process personal data:

• with your consent, which you give when you create an account, when a scanner sends an alert, and separately for analytics and marketing;
• where necessary to provide the Service you have asked for and to perform our agreement with you;
• where necessary to comply with the law, or to protect people and the Service from fraud and abuse.

You can withdraw consent at any time (see "Your rights"). Withdrawing consent does not affect processing that took place before, and some consents (such as to the Terms and this notice) are needed to keep an account open.

• To deliver scan alerts, sign-in codes and service messages.
• To create and manage your account, plan and tag orders.
• To process payments and keep transaction records.
• To prevent spam, harassment and fraud, including rate limits and blocks. These are automated checks; they do not produce decisions with legal effects about you.
• To provide support and handle requests, complaints and reports.
• To improve the Service using analytics, if you agreed.
• To send marketing, only if you opted in.

We do not sell personal data.

• The vehicle owner — receives the scanner's message, photo, location and issue type (never the scanner's phone number).
• Service providers who process data for us, under contract, only for the purposes above:
• Supabase — database and sign-in
• Vercel — website and server hosting, server logs
• Upstash — temporary sign-in codes, verification tokens and rate limits
• Cloudflare (R2) — temporary storage of scan photos and uploaded documents
• Twilio — SMS and WhatsApp delivery
• Meta (WhatsApp Business Platform) and Omantel — alternative SMS/WhatsApp delivery routes, when enabled
• Tap Payments — card payments
• PostHog — product analytics, only with your consent
• Tally — the Founding Member sign-up form
• OpenStreetMap / Overpass — maps and nearby places
• Public authorities, courts or law-enforcement bodies — when the law requires it or to protect someone's safety.
• Professional advisers, and a buyer or successor if our business is sold or reorganised, subject to confidentiality.

Our service providers store and process data on servers that may be located outside the Sultanate of Oman. We do not currently claim that your data is stored in Oman. Where personal data is transferred outside Oman we do so in line with the conditions set by the Personal Data Protection Law and its Executive Regulations, and we choose providers that apply appropriate security.

• Account, vehicle, scan history, parking, subscription and consent records — while your account is open. They are deleted when you delete your account (see our Account & Data Deletion Policy).
• Scan photos — deleted automatically, normally within 48 hours.
• Sign-in codes — 5 minutes. Verification tokens — up to 15 minutes.
• Audit logs — kept for security; the link to your account is removed when you delete it.
• Records we are required by law to keep (for example for tax) — for the period the law requires.
• Backups held by our providers expire on their normal schedule.
• Messages delivered by SMS/WhatsApp are also kept by those providers under their own policies, and remain on the recipient's phone.

Subject to the Personal Data Protection Law, you can:

• withdraw your consent;
• get a copy of your personal data (Profile → Export my data);
• correct or update it (Profile);
• ask us to delete it (Profile → Delete account, or by request);
• ask us to transfer it to you or another controller in a readable format;
• object to or ask us to restrict certain processing;
• be told if a data breach affects you.

Make a request in the app (Profile → Privacy request) or email [PRIVACY EMAIL]. We may need to confirm your identity. We will respond within the period required by law. Scanners without an account can use the email address.

We only send marketing messages if you opted in, separately from accepting our Terms. You can withdraw at any time in Profile → Privacy & data. Service messages — alerts, sign-in codes, payment receipts and renewal reminders — are not marketing and are part of the Service.

We use encryption in transit, encryption of phone numbers at rest, keyed hashing, database row-level security, role-based admin access with audit logging, rate limits, and server-side handling of all secrets. No system is completely secure, so we cannot guarantee absolute security.

If a personal data breach occurs we will contain it, assess the risk and notify the competent authority and affected people where the law requires, within the required time, telling you what happened and what you can do.

Accounts are only for people aged 18 and over. If we learn that an account belongs to someone under 18 we will close it and delete the data. See our Age Eligibility Policy for scanners under 18.

We do not ask for sensitive personal data (such as health, religious or biometric data). Scan photos should show the vehicle situation, not people. If a photo incidentally shows a person, it is deleted with other scan photos.

If you are unhappy with how we handle your data, contact [PRIVACY EMAIL] first. You may also complain to the competent authority in the Sultanate of Oman responsible for personal data protection.

We will update this notice when our processing changes. Material changes will be shown in the app before they take effect and, where required, we will ask for your consent again. The version and effective date are shown at the top.