Privacy Policy
How Hadeya handles your information. Every line below describes what the app and its servers actually do.
1 · The short version
- You can browse, choose a gift and pay without creating an account.
- We ask the person receiving the gift for their address. We never show it to you.
- We never see your card number. Your bank details go straight to our payment provider.
- We have no analytics, no advertising, no tracking and no crash-reporting service. We do not build a profile of you and we do not sell anything about you to anyone.
- We never read your photos, your microphone or your camera. Contacts are read only when you tap to pick one, and only the people you pick are saved. Location is asked of a gift recipient only if they choose to show the driver their door.
- You can delete your account from inside the app, at Account → Delete account. One thing waits: if a gift you paid for has not arrived yet, we hold the deletion until it does — and the app says so, and says how many.
2 · The three promises this app is built around
- The sender never receives the recipient's address. This is not a policy choice we could quietly reverse — the database refuses it. The table holding the recipient's answers has no access rule for customer accounts at all, and permissions on it are revoked from every customer role. The sender's own view of the gift is a separate view that never touches that table.
- The recipient's private answers are never shown to the sender. Their address, delivery timing, sizes and preferences all live in that same sealed table. The sender's screen shows only whether the gift was opened, whether it was accepted, and any thank-you message the recipient chose to send.
- The price is always hidden. The recipient is never shown what a gift cost, on any screen, and there is no setting that changes that.
3 · Who we are
Hadeya is a gifting service operating in the Kingdom of Saudi Arabia. We decide how and why your personal data is handled, which makes us the data controller.
4 · What we collect, and why
When you first open the app, before you do anything, we create an anonymous account for you automatically so your basket, your saved people and your orders belong to you and follow you between screens. That account holds no email, no phone number and no name — only a randomly generated identifier. Nothing is sent to us until you save something or place an order.
Adding an email address is optional. It is offered after you pay, and from the Account screen. We use it to send you a sign-in code and to let you reach your orders from another device. We collect only the email address — no name, no phone number and no password.
When you save someone, we store the name you give them, the relationship you pick, and any private note you write about them. We also store the occasions you add, with the date in the Gregorian or Hijri calendar. Private notes are yours alone: they are never attached to an order, never sent to a delivery company, and never shown to the person they are about. We read your address book only when you tap to choose a contact, and only the people you tick are saved — the book itself is never uploaded.
When the person receiving the gift opens the private link, we ask them only for what is needed to deliver: their delivery address; their mobile number, so the driver can reach them at the door; where the gift is being handed over; a delivery day and a two-hour window, with a sensible one already selected; a size or shade if the gift requires one; and one light optional question about taste, which never affects whether the gift is delivered. All of it goes into a sealed record, and the sender is never shown any of it.
Payment is handled by Moyasar, a licensed Saudi payment provider. You enter your card details on Moyasar's own page, not in Hadeya. We do not store your card number, expiry date, security code or cardholder name in any field of our system — no such field exists. What we do store is the payment reference, the amount, the currency, whether it succeeded, and, for reconciliation, a copy of the confirmation message Moyasar sends us; that message may contain the masked last digits of the card and the card brand. We send Moyasar only the amount, the currency, an order reference and the return links — no name, no email, no phone number and no address.
To deliver the gift we pass the recipient's name, address, mobile number and delivery notes to a licensed delivery company. We split every delivery into two separate trips: one driver collects the gift from the shop, a different driver takes it to the recipient. No single driver is given both where the gift came from and who it is going to.
When someone opens a private claim link, we record the internet address the request came from, together with the link's code and the time. This is used only to stop a link being guessed at or attacked, and it is deleted automatically after one day. We collect no advertising identifier, no device identifier and no notification token.
5 · What we do not collect
Stated plainly, because it is unusual.
- No analytics. There is no analytics service in this app.
- No crash or performance reporting service.
- No advertising, no attribution and no advertising identifier. No tracking of any kind, in this app or any other.
- No background location. Location is asked once, only if a gift recipient taps to show where their door is, and only while that screen is open. Background and always-on location are switched off in the build.
- No photos, camera, microphone, calendar or biometrics. Contacts are read only at the moment you tap to pick one.
- No browsing or search history retained.
Hadeya asks for a permission only at the moment you use what it unlocks: notifications when you set your first occasion reminder, your contacts only when you tap to pick one, and location only when a gift recipient chooses to drop a pin for the driver. Reminders are generated and delivered by your own phone — nothing about them is sent to us, and we cannot send you a push message.
6 · Who your data is shared with
- Supabase, our hosting and database provider — everything described above, because it is where our database and servers run.
- Moyasar, our payment provider — the amount, the currency, an order reference and the return links. No personal details.
- The delivery company, licensed in Saudi Arabia — the recipient's name, address, district, city, mobile number and the gift's contents as delivery lines, split across two trips as described above.
- Image hosts — your device requests product photographs directly from where they are hosted, so those hosts can see your device's internet address.
We do not sell personal data. We do not share it for advertising. Nobody receives it for their own purposes.
7 · Where your data is held
Our database and servers are operated by Supabase. Hadeya's production database is created in the Kingdom of Saudi Arabia, so personal data about people in the Kingdom is stored inside the Kingdom.
8 · What is stored on your own phone
To make the app fast and usable with a poor connection, your phone keeps a local copy of what you have recently viewed — your saved people, including private notes, your occasions and your orders. This copy lives in the app's private storage, is refreshed constantly, and is discarded after a day of not being used. Your sign-in token is also stored there so you are not signed out every time you close the app.
All of it is erased immediately when you sign out, or if a different account signs in on the same phone. Deleting the app removes it entirely.
9 · How long we keep things
- The internet address recorded when a claim link is opened — deleted after one day, automatically.
- The local copy on your phone — discarded after a day; erased when you sign out; gone if you delete the app.
- A claim link — stops working fourteen days after it is created.
- Everything else — your account, your people, your private notes, your orders, and the recipient's delivery details — kept until you delete your account, or ask us to delete it.
10 · Deleting your account, and your other rights
Account → Delete account deletes your account from inside the app. There is no form to fill in and nothing to email us. It is one tap from the Account screen whether you signed up with an email or are still browsing as a guest — a guest account is still an account, and it holds your saved people, your private notes and your orders.
What is deleted: your account and your way of signing in; everyone you saved, your private notes about them and their occasions; your saved boxes, wishlists, reminders and unfinished gifts.
What is kept, and why:
- The record of a gift you paid for is kept as a sales record, because Saudi tax and commercial record-keeping rules require it. Your name is taken off it.
- The delivery details the person receiving a gift gave us stay, because they are not yours to delete. They may ask us themselves.
- A note you already sent with a gift stays with the person who received it, like a posted letter.
One condition, and it is a real one: you cannot delete while a gift is still on its way. If you have paid for a gift that has not been delivered yet — or money is on its way back to your card for one — the app tells you so, tells you how many gifts are holding it, and tells you that it clears as soon as they arrive. Nothing is required from you in the meantime.
That condition never cancels a gift and never refunds one: deleting your account has no effect on any order, any payment or any delivery. And it can never leave you permanently unable to delete — every reason we hold a deletion resolves on its own.
Deleting your account is permanent. You can create a new one at any time, but nothing from the old one comes back.
You may also ask us to tell you what personal data we hold about you, to correct it if it is wrong, to give you a copy of what you gave us, or to delete it if you would rather we did it than do it yourself in the app. Write to us using the contact below.
11 · Children
Hadeya is not intended for children. You must be old enough to enter into a contract and to hold the payment card you use.
12 · Security
Access to personal data is enforced by the database itself, not only by the app. The sealed table holding the recipient's answers has no access rule for any customer account, and permissions on it are revoked from every customer role, so no request from a customer's session can return those rows whatever shape it takes. Every change to that data goes through a controlled server routine rather than a direct write. There is an automated test that deliberately attempts to read a recipient's address as the sender, and it has to pass before any change to that part of the system is released.
13 · Changes and contact
We will post any change to this policy here and update the date at the top.
This policy is intended to meet the requirements of Saudi Arabia's Personal Data Protection Law.
Questions about this policy reach a person at support@hadeya.app.