1. Introduction

Welcome to loyaup. We respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use, and safeguard your information when you use the loyaup app and any related services.

By using the app, you agree to the terms of this policy. If you do not agree, please stop using the app.

2. Information We Collect

We collect different types of information to provide and improve the service:

• Account information: Your full name and email address when you create an account.
• Usage data: Your favorite loyalty programs, stores you interact with, and in-app settings.
• Analytics data: Anonymized usage events such as login, adding programs, and viewing stores, used to improve the app experience.
• Language preferences: Your choice between Arabic and English.
• Images (admin only): When using the admin panel, logo images may be uploaded from your photo library.

3. How We Use Your Information

We use the data collected for the following purposes:

• To provide and operate loyaup's services.
• To save your wallet cards and manage your loyalty programs.
• To personalize your experience and show relevant stores and offers.
• To improve app performance and features through usage analytics.
• To communicate with you about service updates when necessary.

We do not sell your data to third parties, nor do we use it for third-party advertising.

4. Lawful Basis for Processing

We process your personal data on the following lawful bases under Saudi Arabia's Personal Data Protection Law (PDPL):

• Performance of a contract: Your account information and wallet data are necessary to deliver the service you have requested. The app cannot function without them.
• Legitimate interests: We process analytics data based on our legitimate interest in improving the app, fixing issues, and developing new features, in a way that does not override your rights and freedoms.
• Consent: Where we explicitly ask for your consent to process certain data, you have the right to withdraw it at any time without affecting the lawfulness of prior processing.

5. Data Sharing

We do not share your personal information with third parties except in these cases:

• Service providers: We may engage trusted technical partners to operate the app's infrastructure, who are bound to keep your data confidential.
• Legal obligations: We may disclose information if required by law or court order.
• Security: To detect or prevent fraud and protect the rights of loyaup and its users.

6. Third-Party Services

The app may use third-party services to function correctly, including:

• Replit: The hosting platform running the server.
• Expo (EAS): The framework used to build and distribute the app.
• Firebase / Google Analytics (Google LLC): We use Firebase Analytics to analyze in-app usage. This data is sent to Google servers outside Saudi Arabia and is subject to Google's privacy policy. The data transferred is anonymized and includes usage events (login, adding programs, viewing stores) and an anonymized user identifier. You can review Google's privacy policy at: policies.google.com/privacy.

Each of these services has their own privacy policies.

7. Data Security

We take the protection of your data seriously. We use encrypted connections (HTTPS) to protect data in transit and passwords are stored securely using SHA-256 hashing. However, no method of transmission over the internet is 100% secure, and we will always take reasonable measures to protect your information.

In the event of a data breach that affects your personal information, we will notify you within a reasonable timeframe in accordance with the procedures set out under Saudi Arabia's Personal Data Protection Law (PDPL).

8. Data Retention

We retain your data for as long as your account is active or as necessary to provide the service. When you delete your account, your personal data will be permanently removed from our systems within 30 days of the request.

You can delete your account directly inside the app via: Settings → Delete Account. You may also contact us by email to request deletion.

9. Your Rights

You have the following rights regarding your personal data under Saudi Arabia's PDPL:

• Access: Request a copy of the data we hold about you.
• Correction: Correct any inaccurate or incomplete data.
• Deletion: Request deletion of your personal data ("right to be forgotten"). You can exercise this right directly in the app via: Settings → Delete Account.
• Portability: Receive your data in a portable electronic format.
• Objection: Object to the processing of your data in certain cases, including processing based on legitimate interests.
• Withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise these rights, please contact us using the information below.

10. Children's Privacy

loyaup is not directed at children under 13 and we do not knowingly collect their personal data. If we become aware that a child under 13 has provided data, we will promptly delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. You will be notified of any material changes via an in-app notice or by email. We recommend reviewing this page periodically.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, or wish to exercise any of the rights described above, please reach out: