This is an English translation of the Arabic privacy policy. If the two versions differ, the Arabic version prevails.
Welcome to Al-Jallab (الجلّاب). We respect your privacy and are committed to protecting your personal data in accordance with the Personal Data Protection Law (PDPL) of the Kingdom of Saudi Arabia and its regulations. This policy explains what data we collect, why, how we protect it, and what your rights are.
By using the Al-Jallab app or the website aljallab.app, you acknowledge that you have read this policy.
1. Who we are
Al-Jallab is an online platform for listing camels, sheep and related services, and for connecting sellers with buyers. Al-Jallab is the party responsible for processing the personal data described in this policy.
For any matter related to your data, contact: support@aljallab.app
2. Data we collect
a) Data you provide
| Data | When |
|---|---|
| Mobile number | At sign-up (required) |
| Display name | At sign-up |
| Email address | Optional, if you add it for account recovery and alerts |
| Profile photo | Optional |
| Social media links | Optional |
| Your farm (mirah) name | Optional |
| Listing content: photos, videos, description, price, city and category | When you post a listing |
| Approximate location of a post | Optional, only if you tap "Use my location" when adding a listing, camel, event or service. It is stored rounded (to roughly 2 km), not your precise location |
| Saved searches ("Notify me"): search words, category, region, price, and the distance and its approximate center if you set one | When you save a search to receive alerts |
| Camel profiles (Hajn section): name, age, color, breed, pedigree, achievements, owner and trainer names, and photos | When you add a camel; you control whether the owner, trainer and pedigree are shown |
| Camel microchip number | Optional; never shown to others (you may choose to show only its last 4 digits) |
| Camel verification documents (such as a microchip photo or pedigree certificate) | When you request the "Verified data" badge |
| Events, services and comments | When you post them |
| Clips and stories: videos and photos you post in the clips section or as a story, the text on them, and their sound | When you post them. A story disappears from others after 24 hours, and you can delete it earlier |
| Private messages between you and other users | When you use in-app messaging |
| Sale price and commission transfer records | Optional, when you record a sale or a commission transfer |
| Reports and what you write in them | When you report a listing, account or service |
| Messages to us | When you contact support |
b) Data collected automatically
- Usage data: such as listings you save to favorites, clips you like, and accounts you follow or block.
- Story views: if you open a user's story while signed in, your account name and the time you viewed it are saved and shown only to the story's owner in the list of who viewed it. These views are deleted if the owner deletes the story.
- Search text: the text you search for is sent to be understood (smart search) without being linked to your account or identity. A search that finds no results is stored as text only, so we can learn what the platform is missing.
- Featured listing impression counts: aggregate numbers that are not linked to you.
- Device data: such as device type and operating system, and a push notification token to send you alerts.
- Technical and security logs: such as sign-in times and attempts, and a hashed fingerprint of your network (IP) address kept for two days to prevent abuse of smart search, to protect your account and the platform.
c) Data from third parties
We do not offer sign-in through third-party accounts (such as Apple or Google), and we do not receive your data from them. You sign in with your mobile number only.
What we do not collect
- We do not track your location. We only ask for location when you tap a location button yourself, and we never collect it in the background.
- Your location as a browser or buyer stays on your device: when you use "Nearest to me" or "Livestock near you", distances are calculated on your phone and your location is not sent to our servers.
- We do not ask for your national ID number.
- We do not store bank card details. Featuring purchases are made through the Apple App Store or Google Play, and we only receive the purchase confirmation from them.
- We do not use advertising trackers or ad networks, and we do not track you across other apps or websites.
Permissions the app asks for
| Permission | When and why |
|---|---|
| Photos | When you choose photos or videos from your library for your listing, profile photo, a clip or a story, or save a listing photo to your phone |
| Camera and microphone | Only when you record a clip or a story inside the app |
| Location (while using the app only) | When you tap "Use my location" or "Nearest to me" |
| Notifications | To tell you about messages and alerts; you can turn them off in settings |
All permissions are optional, and the app works without them.
3. How we use your data
- Creating and verifying your account using a code sent to your mobile number, and recovering your account through your email address if you add one.
- Displaying your listings and allowing buyers to contact you.
- Automated review: what you post (listing text, images and a frame from its video, camel profiles, events, services, comments, and your display name, profile photo and bio) is checked automatically using artificial intelligence to detect violations. The final decision is always made by a human moderator; no listing is removed and no account is permanently banned by an automated decision alone. (Details in section 5.)
- Smart search: understanding search phrases and showing relevant results.
- Alerts: telling you about a new listing that matches your saved search, or an event near the city in your profile.
- Distance and "near you": showing roughly how far a post is from you.
- Camel data verification: the administration manually reviews documents to grant the "Verified data" badge.
- Private messages: delivering them between the parties. They are never sent to artificial intelligence. Moderators do not access them unless one of the parties reports a message; in that case an authorized moderator can see the reported message and the messages close to it only, and that access is logged.
- Commission: recording sales and commission transfers so Al-Jallab can confirm receipt.
- Notifications: informing you of any interaction with your account and listings.
- Safety: preventing fraud and fake accounts, and handling reports.
- Support: answering your questions.
- Legal compliance and lawful requests from competent authorities.
We do not sell your personal data, and we do not use it for third-party targeted advertising.
4. What others can see
- Everyone (including guests): your listings with their photos and details, your display name, profile photo, social media links, your farm (mirah) name if you add it, and the approximate distance and a "Location confirmed" badge if you used the location button on your post.
- Registered users only: your mobile number, for calling you or contacting you on WhatsApp about your listings.
- Your email address is never shown to other users.
- Clips are visible to everyone, and stories are visible to everyone for 24 hours; only you can see who viewed your story.
- Original sound: if someone uses the sound of your clip in their clip, your account name is shown on their clip. You can turn off the use of your sound in the clip's options.
- Camel profiles are visible to everyone with the details you chose to show. Microchip numbers and verification documents are never shown to any user.
Race results and official content
Al-Jallab shows news, schedules and results published to the public by official bodies (such as camel racing organizers and official news agencies), with the source name and link. Results may include the names of camels, owners and trainers as published by the organizer. We never show microchip numbers, even if they appear in the source data, and we do not store them. Anyone named may ask us to hide or correct their name at support@aljallab.app. The sources are listed on the "Information sources" page in the app.
5. Who we share your data with
We share data only with service providers that help us run the platform, and only as much as needed:
| Provider | Purpose |
|---|---|
| Supabase | Database, accounts and image storage |
| Cloudflare | Website hosting, security and receiving support email |
| Resend | Sending emails from Aljallab (such as account recovery and alerts) |
| Authentica (verification code provider) | Sending the verification code to your mobile number by SMS |
| OpenAI (AI provider) | Automated review, smart search and summarizing official news |
| Apple, Google and Expo | Notifications, app distribution, and completing featuring purchases through the store |
We require these providers to protect your data to a level no lower than the one described in this policy, and we do not allow them to use it for any other purpose.
We may also disclose data in response to a lawful request from a competent authority in the Kingdom.
Third-party artificial intelligence (OpenAI)
- What is sent: the text of your post (title, description, price and city), its images and a frame from its video, the publicly shown details of a camel profile (including the owner and trainer names if you chose to show them), comments, the publicly shown details of your profile (name, photo, bio, farm name, region and social media handles), and search text.
- What is never sent: your mobile number, your email, your private messages, your location, and your account identifier.
- Purpose: detecting violations and understanding searches only. Under the provider's terms for its paid API service, this data is not used to train AI models.
- Your consent: we ask for your explicit consent to this inside the app before you post your first content. If you do not agree, you can still browse without posting.
6. Where your data is stored
Your data is stored on our service providers' servers, including servers outside the Kingdom of Saudi Arabia (such as Supabase servers in Germany). When this happens, we comply with the legal requirements for transferring personal data outside the Kingdom and choose providers that apply high protection standards.
7. How long we keep data
- We keep your data for as long as your account exists.
- We keep camel verification documents for as long as needed to review the request and keep a record of the verification. You can ask us to delete them at any time (the badge may be removed afterwards).
- When you delete your account, your listings stop appearing immediately, and your data is deleted or anonymized within a reasonable period, except for what we must keep for legal, security or financial reasons or to handle open reports, and only for as long as that requires.
- Permanently banned accounts: we keep the banned mobile number to prevent it from registering again.
- Saved searches are deleted when you delete them or delete your account. Smart search texts (not linked to you) are deleted automatically if they are not repeated within 60 days.
- The administrative action log (such as suspensions and removals and their reasons) is kept for accountability.
8. Your rights
Under the PDPL, you have the right to:
- Be informed about how your data is collected and processed (this policy).
- Access your data and obtain a copy of it (Settings → Privacy → "Request a copy of my data"; we send it within 30 days).
- Correct and update your data (most of it directly from your account settings).
- Request deletion of your data. You can delete your account inside the app, or from: aljallab.app/delete-account
- Withdraw your consent to the processing of optional data at any time: withdraw your AI review consent in Settings → Privacy (you will not be able to post until you agree again), turn off the location or notification permission in your phone settings, delete your saved searches, and remove the location from a post by editing it.
To exercise any right, email support@aljallab.app. You also have the right to file a complaint with the Saudi Data & AI Authority (SDAIA).
9. Data security
We apply technical and organizational measures to protect your data, including encryption in transit, server-side access controls, logging of sensitive operations, and backups. However, no method of electronic transmission or storage is 100% secure.
10. Age
The app is intended for users aged 18 and over. We do not knowingly collect data from anyone under 18; if we learn that we have, we delete the account.
11. Changes to this policy
We may update this policy from time to time. If there is a material change, we will notify you in the app before it takes effect, and the date of the last update appears at the top of this page.
12. Contact
Al-Jallab — Email: support@aljallab.app — Website: aljallab.app