الشروط والأحكام وسياسة الخصوصية

Part One: Privacy Policy

This Policy governs how the "Wain Nrooh" app (the "App", "we", "us") collects, uses, protects, and shares your personal data. We are committed to protecting your privacy in accordance with the Personal Data Protection Law of the Kingdom of Saudi Arabia (PDPL) and its Implementing Regulations issued by the Saudi Data and Artificial Intelligence Authority (SDAIA), as well as the requirements of the Apple App Store and Google Play. By using the App, you agree to this Policy.

1. Data Controller

The party responsible for processing your data is Abdulghani, Saudi Arabia. To contact us or exercise your rights: Info@wainnrooh.com.

2. Data We Collect

• Account data: username, email address, and account identifier. This is managed through a specialized authentication service provider and may include signing in with your Google or Apple account or by email.
• Location data: your approximate or precise location (with your consent, and depending on the permission you grant) to enable the "Near Me Now" feature and show nearby places. You can turn off location access at any time from your device settings.
• Content you voluntarily submit: links to clips (reels) you share from Instagram, TikTok, and similar platforms, whether by sending them to the bot or through the direct sharing feature of the platform's app (Share Extension), as well as the places you save and the collections you create.
• Social account linking data: when you link an Instagram or TikTok account using a one-time verification code, we store a technical identifier for your conversation and your account name on that platform, in order to connect what you send to your account in the App.
• Usage and analytics data: your interactions within the App (saving places, tapping on them, opening directions) to improve the service and build features such as "Trending Places".
• Subscription data: your subscription status (Free/Plus). Payments are processed through Apple's or Google's in-app payment system, and we do not see your bank card details.
• Technical data: device type, operating system, and technical identifiers necessary for operation and for sending notifications.

3. Legal Bases and Purposes of Processing

We process your data based on your consent, the performance of the service, and our legitimate interests in improving the service. The purposes are: operating the App, extracting place information from the links you send and organizing it on your map; linking your social accounts using the verification code; enabling "Near Me Now" alerts and notifications (with your consent); managing subscriptions and support; improving the experience; and complying with applicable laws.

4. How We Process the Links You Send

When you share a link to a clip, it is sent through a messaging and automation service to our systems, and place information is then extracted from it using specialized technical tools and artificial intelligence models. We process only the link and the publicly available information accessible from it. We do not access your account on the original platform and we do not see your private messages. Results may not always be accurate because they rely on external sources and automated analysis; we recommend verifying before you visit.

5. Sharing Data with Third Parties

We do not sell your personal data. We share it only with trusted service providers to operate the App, and only to the minimum extent necessary:

• An authentication service provider to manage sign-in and accounts.
• A database and cloud hosting service provider to store your data securely.
• A messaging and automation service provider to receive links and linking codes.
• Technical tools and AI model providers to extract place information from links.
• Mapping service providers to display locations and directions.
• The app stores (Apple App Store and Google Play) to process payments and notifications.

These providers are bound by appropriate protection standards. We do not share your data with third parties for marketing purposes without your explicit consent. (We may provide Apple, Google, or regulatory authorities with the names of our specific providers upon official request.)

6. Transfer of Data Outside the Kingdom

Some of your data may be stored or processed on servers outside the Kingdom by our service providers. In that case, we take measures to ensure a level of protection comparable to that provided by the PDPL, and in accordance with the regulations on the transfer of data outside the Kingdom issued by SDAIA.

7. Your Rights (Under the PDPL)

• The right to be informed about how your data is processed.
• The right to access and obtain a copy of your data.
• The right to correct and update your data.
• The right to deletion when the data is no longer needed or when you withdraw your consent.
• The right to withdraw your consent at any time.

To exercise your rights, contact Info@wainnrooh.com. We respond within thirty (30) days. You also have the right to file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).

8. Linking and Unlinking Social Accounts

You may link one account per platform (Instagram/TikTok) using a one-time verification code, and unlink it at any time from your profile settings. An account that is already linked cannot be linked to another account until it is unlinked, and reasonable limits on the number of changes per year may apply for security purposes.

9. Data Retention and Deletion

We retain your data for as long as you use the App. When you delete your account or the data is no longer needed, we delete or anonymize your personal data within no more than six (6) months, unless the law requires us to retain it for legal, accounting, or fraud-prevention purposes. Indicative retention periods:

• Account data and saved places: for the life of the account, and deleted or anonymized within six (6) months of account deletion.
• Usage and analytics data: up to six (6) months in identifiable form, then anonymized.
• Crash and diagnostic logs: up to six (6) months.
• Transaction records: for the period required by tax and accounting regulations.

You may request deletion of your account from within the App or by contacting us, and we will confirm once deletion is complete.

10. Data Security

We apply appropriate technical and organizational measures: encryption in transit, access control through keys and limited permissions, verification of the source of incoming requests, and storage with providers that meet high security standards. No system can be guaranteed 100% secure; in the event of a breach affecting your data, we take the necessary steps and notify SDAIA and the affected data subjects within the legally required timeframes.

11. Children's Privacy

The App is not directed to children under [18] years of age, and we do not knowingly collect their data. If we become aware that we have done so, we will delete it. A parent or guardian who believes their child has provided us with data should contact us.

12. Notifications

We may send operational notifications (such as a "Near Me Now" alert or confirmation of an account link) with your consent, and you can turn them off from the App settings or your device settings. We do not use your data for direct marketing without your prior explicit consent.

13. Changes to This Policy

We may update this Policy. We will publish the updated version within the App with a revised "Last updated" date, and we will notify you of material changes. Your continued use means you accept the revised version.