Privacy policy

Tamem, commercial registration 0000, Kingdom of Saudi Arabia, is responsible for the personal data described in this policy. We can be reached at [email protected].

This policy covers three things: the customer app, the point-of-sale app your shop uses at its counter, and this website.

Tamem is a marketplace. The shops you book with are independent businesses, not us. They decide what service they offer, what they charge and how they handle your order, and they keep their own customer records inside Tamem. For the data a shop holds about you as its customer, that shop is responsible and we hold it on their behalf. For your Tamem account itself, we are responsible.

Everything below is either something you typed, something a shop recorded about an order you placed, or something your device had to send for a feature to work. We do not buy personal data, and we do not collect anything for advertising.

The merchant till app collects nothing about you beyond what the shop's staff enter about your order. Staff sign in to it with a PIN, which is stored the same way a password is.

You pay at the shop, not in the app. There is no card entry, no wallet top-up and no checkout anywhere in the customer app, so no card number, CVV, bank account or payment credential of yours ever reaches us or is stored by us. What we record is that an order was settled, by which method, and for how much — the same information that appears on the invoice.

The app asks for location for one reason: to put the shops closest to you at the top of the list. It asks only for while-in-use access and never for background or always-on access, so it cannot read your location when it is closed.

• ·You can refuse, and the app still works — you pick your area from a list instead.
• ·Turning an address pin into a street name is done by your phone's own operating system, not by us.
• ·We do not keep a history of where you have been. A coordinate is stored only when you save it yourself as part of a delivery address.

Two places in the app take a photo: your profile picture, and a complaint about an order. Both read from your photo library through your phone's own picker, which hands over only the images you choose. Neither app asks for camera access, and neither can browse your library on its own.

A photo attached to a complaint is visible to the shop that complaint is against, because that is its purpose.

We contact you two ways, and both are tied to something you did.

• ·WhatsApp, for your sign-in code and for updates about an order. Your number goes to WhatsApp to deliver the message, which means it is handled under WhatsApp's own terms as well as this policy.
• ·Push notifications, if you turn them on. Your device registers a token with Expo's notification service, which passes the message to Apple or Google to reach your phone.

A shop can only message you on a channel you have agreed to, and withdrawing that agreement stops future messages immediately. We keep the record that you gave or withdrew it, because that record is the evidence the rule was followed.

Neither app contains an advertising, analytics or attribution SDK of any kind. We do not build a profile of you, we do not follow you across other companies' apps or websites, and we do not sell or share personal data for advertising. Nothing in either app asks for permission to track you, because there is nothing that would use it.

If a crash or error report is ever enabled, it is scrubbed before it leaves your device by a rule that keeps only fields known to be safe and redacts everything else, including any field it has never seen before.

The shop you ordered from sees what it needs to serve you. Beyond that, we use the following providers to run the service. They act on our instructions and may not use your data for their own purposes.

We will also disclose data where a Saudi law, regulator or court order requires it, and we will tell you when we are permitted to.

The providers listed above operate internationally, and your data is processed on their infrastructure outside the Kingdom of Saudi Arabia. Where the Personal Data Protection Law requires a safeguard for a transfer outside the Kingdom, we put one in place before the transfer happens.

• ·Your account details: until you delete your account.
• ·Invoices, orders and the tax records attached to them: for as long as Saudi tax and e-invoicing rules require them to be kept — at least six years. This is why deleting your account removes your name from them rather than deleting them.
• ·Your record of agreeing to, or withdrawing from, a messaging channel: kept after withdrawal, as the evidence that we stopped.
• ·Sign-in codes and sessions: minutes to days. Deleting your account ends every session at once.

You can delete your account from inside the app — Account, then Delete my account. There is no form to fill in and nobody to ask. It takes effect when you confirm it.

We would rather tell you precisely what it does than describe it as a deletion and leave you to discover otherwise:

• ·Your name, mobile number, email address, profile photo, password and saved delivery addresses are erased.
• ·Your registered devices are removed, so notifications stop.
• ·Every shop's record of you is stripped of your name, your number and your notes.
• ·Every session is revoked. An app already open can keep reading for up to fifteen minutes until its token expires, and by then nothing it can reach identifies you. It cannot sign in again.
• ·Past invoices and orders remain, because they are tax records the shop is required to keep — but with nothing on them that names you.
• ·Signing up again later creates a genuinely new account. Nothing is restored.

Under the Saudi Personal Data Protection Law you have the right to be told what we hold about you, to get a copy of it, to have what is wrong corrected, to have it destroyed where the law allows, and to withdraw a consent you gave.

Write to [email protected] and we will answer within the period the law sets. Deleting your account and changing your message preferences you can do yourself, in the app, immediately. If you are not satisfied with our answer you may complain to the Saudi Data & Artificial Intelligence Authority (SDAIA).

• ·Traffic between the apps and our service is encrypted in transit.
• ·Passwords and staff PINs are stored as Argon2id hashes and cannot be read back.
• ·Repeated failed sign-in attempts lock the account for a period.
• ·Each shop's data is separated from every other shop's, and every request is checked against the shop it belongs to.
• ·Changes to accounts and orders are written to an audit record.

No service can promise it will never be breached. If a breach affects your personal data we will notify you and the regulator as the law requires.

The apps are for adults placing their own orders. We do not aim them at children and we do not knowingly collect a child's personal data. If you believe a child has given us data, write to us and we will remove it.

The date at the top of this page is the date of the current version. If we change something that affects you materially, we will say so in the app before the change takes effect rather than relying on you to re-read this page.