Snafi App Privacy Policy

1. Who is responsible for your data?

ESTABLISHMENT SANAFI AL AAMAL operates the Snafi app. Its unified national number is 7044265341, and it is based in Riyadh, Kingdom of Saudi Arabia. To ask about your data or exercise your rights, contact support within the app or email info@snafi.sa.

2. The data we handle

Account and contact data: your mobile number and country code, the name and email address required to complete a new account, and a profile photo if you choose to add one. Your email address may also be used for payment processing. We use verification codes and session data to verify your number and protect access to your account.

Service and vehicle data: the vehicle's license plate and any optional information you enter, the pickup and destination locations, the route, and the request's information, status, scheduled times, and assigned driver. With your permission, we use the device's location to make it easier to select locations and display the service.

Trip documentation photos: photos of the vehicle's condition before loading, after loading, and after unloading that the driver uploads, and any photos or attachments you send to support or add to your account.

Payment and wallet data: the request amount, the amounts paid using each payment method, payment and refund statuses and transaction references, and your wallet balance and top-up, transfer, cashback, and referral transactions when available. If you choose to save a card, we store a reference with the payment provider and display details such as the card type, last four digits, expiration date, and cardholder's name. The payment gateway processes card data through its secure interface.

Interaction and operational data: ratings, comments, support messages, referral data, the device token needed to send notifications, and connection and operational data needed to process requests and protect the service, such as the connection address and the time and outcome of a request.

Technical map data: search queries and coordinates sent to map services, technical app and session identifiers and the connection address, information about the device, operating system, connectivity, map usage and loading, and diagnostic data such as battery level and charging state. Mapbox may receive the device's location when location access is allowed.

3. How do we obtain data, and why do we use it?

We obtain the data you enter or allow your device to provide, service delivery data provided by the driver, and transaction results returned by payment and communication systems. The data is used to create and verify your account; price, deliver, and track the service; document the vehicle's condition; process payments, wallet transactions, refunds, transfers, and rewards; send operational notifications; provide support and handle complaints; protect accounts; and prevent misuse.

Processing the data needed for a request and payment is related to delivering the service you request. Optional features and device permissions depend on your choices and consent where required. Some records may continue to be processed to settle obligations, preserve rights, or meet legal requirements. Not providing your mobile number, request locations, vehicle license plate, or other data necessary for the service may prevent account creation or fulfillment of a request; optional information may be left blank.

4. Who can access the data?

The driver assigned to a request can access the customer, vehicle, location, and contact data necessary to provide the service. The customer can access information about the driver assigned to their request, the trip status, and documentation photos of their vehicle. Request documentation photos are not displayed as a public gallery, and access is limited to authorized parties.

For transfers between wallets, mobile number data and the account details displayed are used to verify the recipient and confirm the transaction, and the necessary transfer details are shown to both parties. A transfer does not provide access to the other party's wallet balance.

Drivers can see only the customer's average rating and number of ratings; drivers' comments about the customer are available to management. The customer's rating of and comment about the driver are not shown to the driver. Authorized management and support staff can access the data necessary for operations, verification, settlements, and complaints.

Necessary data may be disclosed to a competent authority when legally required, or to resolve a dispute or protect rights, depending on the circumstances and applicable requirements.

5. Service providers

We use technical services to perform app functions, including HyperPay for payment processing and Apple Pay when selected, Mapbox for maps, routes, and location searches, Firebase for device notifications, verification code delivery services such as Twilio through the available channel, and hosting, storage, and connectivity providers. These services receive the data necessary for the function being used, such as transaction data, search coordinates, a mobile number, or a notification token.

By default, the Mapbox Maps SDK sends map usage and operational measurements and technical identifiers, and may send location data when permission is granted. Mapbox uses this data to provide and secure its services, measure performance, and improve its mapping products, and applies de-identification and aggregation measures under its policy. You can choose not to participate in optional Mapbox telemetry using the Mapbox choices available with the maps, and control location permission in your device settings. Technical communications and identifiers needed to provide and secure maps and measure their use may continue.

External services may process data within their operational infrastructure; this policy does not mean that all data is stored within the Kingdom. You can request additional information about the processing and sharing of your data through the contact methods provided.

6. Device permissions and your choices

You can allow location access to set the pickup point or select locations manually. Camera permission is requested when you choose to scan card details or take a photo, photo access when you choose a profile photo or attach one to a support message, and notification permission to send account, request, payment, and support updates.

You can change permissions in your device settings. Turning off notifications does not cancel a request or stop payment; check your request's status within the app. Turning off a particular permission may disable the associated feature. Deleting the app alone does not delete your account or its obligations.

7. Data protection and retention

The app uses HTTPS connections and controls for account verification, permissions, and access to requests and attachments. Trip documentation photos are made available through temporary read-access links after access authorization is verified. Avoid sending card details, the security code, or a verification code to the support team or anyone else.

Retention varies according to the type and purpose of the data, the status of requests, settlements and complaints, and legal requirements. An account deletion request does not immediately delete all transaction records; payment, wallet, and request records and related correspondence may need to be retained to settle obligations or preserve rights. You can ask about the data associated with your account and request the destruction of data for which there is no longer a purpose or justification for retention.

8. Your rights and how to exercise them

Under the Personal Data Protection Law, its regulations, and applicable exceptions, you can request information about how your data is processed, access your data and obtain a copy, correct inaccurate data or complete and update it, request the destruction of data that may be destroyed, and withdraw consent when it is the basis for processing.

Contact support within the app or email info@snafi.sa, explaining your request and the data it concerns. We may ask for appropriate identity verification to protect your account, without asking for a verification code or card details. Some rights may be subject to an exception or restriction related to the rights of others, existing obligations, or a legal requirement, and we will explain any reason why we cannot fulfill a request. You can also submit a complaint to the competent personal data protection authority in the Kingdom.

9. Requesting account deletion

You can submit an account deletion request from the account settings within the app, or contact support if you cannot access your account. The request can be canceled before it is finally carried out, and logging in alone does not cancel it.

Management reviews the request and the settlement of the balance, active requests, and pending payments, refunds, and transfers before completing deletion. Once deletion is carried out, use of the account stops, and the profile photo and saved vehicles are removed in accordance with service procedures, while records that must be retained remain as explained above.

10. Updates to this policy

We may update the policy when app functions or data processing change. The date of the latest update appears at the top of the page, and the current version is available within the app. To ask about a change or your account data, use the contact methods below.

Contact us