In short
- You can browse as a guest. To save offers, get directions or contact support, you sign in with your mobile number.
- We use your precise location only if you allow it, and only while the app is open. You can choose a city instead.
- We do not sell your data or use advertising IDs, advertising SDKs or third-party behavioral analytics. We use Firebase Crashlytics to detect faults and measure app stability.
- You can delete your account in the app (Profile, Delete my account), and you can stop sharing your details with merchants at any time (Profile, Share my details with merchants).
- Our servers and providers are outside the Kingdom: the database is in Frankfurt, Germany, and other providers process data in the EU and the United States.
- To access, correct, copy or destroy your data, use in-app support or write to support@mail.vowoffers.com.
Who we are and what this policy covers
VowOffers is operated by LUMYN AI TECHNOLOGIES (Commercial Registration No. 7055031574), Riyadh, Saudi Arabia. It operates the VowOffers mobile app for iOS and Android and the vowoffers.com website, and is the controller of the personal data described here. You can contact us through in-app support (Profile, Support / Contact Us), at support@mail.vowoffers.com or on +966 58 386 4036.
This policy covers shoppers who use the app, with or without an account, and visitors to the website. Vendors and their staff who use the VowOffers portal are covered by the terms that they agree with VowOffers.
The data we collect
| Category | What we collect | When |
|---|---|---|
| Sign-in | Your Saudi mobile number (+966), the user ID that Google Firebase gives your sign-in, and our internal customer ID. | When you sign in with a one-time code. |
| Profile | Your full name, your email address if you add one, your city, the app language and your notification setting. | When you complete or edit your profile, change the language or change your city. |
| Location | If you allow precise location: the latitude and longitude of your phone. If you do not: only the city that you choose. | When the app is open. See "How we use your location". |
| Activity in the app | Offers in your wishlist; offers and stores that you asked directions to, with the date; which notifications you read; and app events: a banner or Flash Sale shown to you, a tap on a placement or offer, an offer page that you open, a search in the app (not the words that you search for), a wishlist add or remove, a directions request and a share. Each event has the city, the offer, placement and store involved, and the time. Each event also has an installation ID, the platform (iOS or Android) and the app version. The installation ID is a random code that the app makes on your phone when it first opens. It is not a hardware ID or an advertising ID. It is removed when you uninstall the app or clear its data (Android can restore it from your phone backup). If precise location is on, the event also has your coordinates and whether you were within 5 km of the store. While you are signed in, we also record when you last used the app (at most once per hour). | When you use these features. |
| Crash and diagnostic data | Crash traces, exception details, app version, device and operating-system information, app state, Firebase installation ID, Crashlytics installation UUID and session ID. We add the staging or production environment, screen name, language and standard or demo mode. | Automatically during app use and when faults are recorded, including guest use. Reports can be sent after the app restarts. |
| Support | The category, subject and text of your requests and replies, the linked offer and store, your city and language, the status and times of the request, and your rating and comment. | When you use in-app support. |
| Notifications | The push token of your phone, the platform (iOS or Android) and your city. | When you are signed in and notifications are on. |
| Email to us | Your email address and name, the subject and text of your email, and details of any attachments. We store these in our support inbox. | When you email support@mail.vowoffers.com. |
| Business sign-up | For businesses only: the business and brand name, the business model, the contact name, email and phone number, the main city, the categories and placements of interest, the Commercial Registration number if you give it, your message and your consent to be contacted. We also keep a coded form (a salted hash) of your IP address. We use it only to limit misuse, and we clear it after 30 days. | When you send the sign-up form on the For business page of the website. |
Guests do not have an account. When a guest uses the app, the app sends the city (and the coordinates, if precise location is allowed) to show local offers, and records app events without any name, phone number or account. Guest events have the installation ID. Because events from the same phone have the same installation ID, guest events and the events that you send later while signed in can be connected.
Our custom diagnostic context does not include your name, phone number, email, account ID, one-time codes, access tokens, search text, precise location or support messages. Native exception details can contain message text. Access to reports is limited to staff investigating faults. Automatic diagnostic collection also applies to guests and is separate from merchant sharing and notification preferences.
We do not collect your gender, date of birth, national ID or Iqama number, payment card details, contacts, photos, camera or microphone input, or location in the background. Our database does not store the IP address of shoppers, or a hardware ID or advertising ID of your phone. It stores only the random installation ID described above. The app uses Firebase Crashlytics for crash reporting and stability analytics. It does not use advertising IDs, advertising SDKs or third-party behavioral analytics. You cannot upload files or photos to support.
How we use your location
- The app asks for location permission only when you tap "Allow precise location". You can tap "Choose a city" instead and use the app normally.
- The app uses location only while it is open (foreground). It never reads your location in the background.
- The app uses your position only if your phone gives precise location and the accuracy is better than 1 km.
- Your coordinates are sent with requests for offers and search results, to find the nearest city and the distance to stores. We do not store the coordinates from these requests.
- Your coordinates are also stored with app events (see the table above), at the precision your phone gives. We use them to count how many events happened within 5 km of the offer’s store. If you are signed in, these events are linked to your account.
- When you ask for directions, the app opens Apple Maps or Google Maps with the store location. The app does not send your own location to the maps app; the maps app can use it under its own permission.
To stop precise location, turn off location for VowOffers in your phone settings (the app’s Profile, Location screen has a link to them). New events will then have no coordinates. You can still choose a city.
Why we use your data and the legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Create and secure your account, and keep a number from being used by its old and new owners at the same time | Sign-in and profile data | Necessary to provide the service you asked for under the Terms |
| Show offers, stores and search results for your city and nearby | City, language, location if allowed | Necessary to provide the service; your consent for precise location |
| Keep your wishlist and directions history | Activity in the app | Necessary to provide the service |
| Send offer notifications, including Sponsored Notifications, and support replies | Push token, city, language, notification setting | Your consent, which you can withdraw at any time |
| Answer support requests, suggest the offer that your request is about, and alert our support team | Support data, wishlist, directions history and recent app events | Necessary to provide the service; our legitimate interest in giving good support |
| Measure placements for vendors, set fair placement prices and see how the app is used (active users, platforms and app versions) | App events with the installation ID, platform and app version, with location if allowed; when you last used the app | Our legitimate interest and that of vendors in measuring paid placements; your consent for location |
| Let merchants with the Analytics add-on follow up on offers you tapped | Name, mobile number, number of taps on their offers | Your consent, given when you accept this Privacy Policy at sign-in. You can withdraw it at any time in Profile, Share my details with merchants |
| Diagnose crashes and improve app stability | Crash and diagnostic data | Our legitimate interest in operating a reliable service |
| Prevent misuse, keep audit records and meet legal duties | All categories as needed | Legal obligation and our legitimate interest in a safe service |
We do not use your data for automated decisions that have legal or similar effects on you, and we do not build interest profiles for advertising. Sponsored Notifications go to everyone in the booked city who has notifications on.
Transfers outside the Kingdom
Our database is in Frankfurt, Germany, and our providers process data in the European Union, the United States and other countries. Your personal data is therefore transferred and processed outside the Kingdom of Saudi Arabia. We transfer only the data that each provider needs for its task, and we do so as the PDPL and the Regulation on Personal Data Transfer outside the Kingdom permit, with the safeguards that they require.
How long we keep your data
We keep personal data only as long as we need it for the purposes in this policy or as the law requires. When we no longer need it, or when you ask us to destroy it and no law requires us to keep it, we destroy it or make it anonymous so that it no longer identifies you.
| Data | How long |
|---|---|
| Account, profile, wishlist and directions history | While your account is active. You can remove wishlist items at any time. |
| Archived accounts (closed, released or number recycled) | Kept as an archived record for audit and to deal with legal claims, until you ask us to destroy it or we no longer need it. |
| App events | Kept with your account. When you delete your account, we remove your identity, your coordinates and the installation ID from your events. Guest events have no name or phone number. |
| Support requests and ratings | Kept with your account, to follow up on complaints and improve support. |
| Emails that you send us | Kept in our support inbox until we no longer need them to answer you or deal with a claim, or until you ask us to destroy them. |
| Business sign-up requests | New and reviewed requests: until we decide. Approved requests: kept with the vendor record. Rejected and spam requests: deleted 12 months after the decision. The IP hash: cleared after 30 days. |
| Crash traces and associated diagnostic identifiers | Firebase keeps them for 90 days, then starts removing them from live and backup systems. This does not mean all copies disappear on day 90. |
| Push tokens | Turned off when you turn notifications off or the account is archived. |
| Data stored on your phone | Until you uninstall the app or clear its data. |
Destroyed data can stay in our database provider’s backups for a short time until the backups are replaced.
Push notifications
The app asks for permission to send notifications only after you sign in and complete your profile. Notifications include offers in your city, Sponsored Notifications that vendors pay for, and replies to your support requests.
To stop them, turn off Profile, Notifications, Receive notifications in the app, or turn off notifications for VowOffers in your phone settings. When you turn them off in the app, we stop sending notifications to your account. Signing out alone does not turn them off, so turn them off first if you share the phone.
Your rights
Under the PDPL you have the right to:
- be told how we collect and use your personal data (this policy);
- access your personal data;
- get a copy of your personal data in a clear and readable format;
- ask us to correct, complete or update your personal data. You can change your name, email, city, language and notification setting yourself in the app;
- ask us to destroy your personal data when we no longer need it;
- withdraw your consent at any time, for example to precise location or notifications. This does not affect processing done before you withdrew it.
To use a right, open a support request in the app or write to support@mail.vowoffers.com. Tell us which right you want to use. We can ask you to confirm that you own the mobile number on the account. We reply within 30 days, as the law requires, and we do not charge a fee. If the law allows us to refuse or delay a request, we will tell you why.
If you are not satisfied with our answer, you can file a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).
Closing your account
You can delete your account in the app: Profile, Delete my account. You can also open a support request or write to support@mail.vowoffers.com. When you delete your account, we delete your sign-in from Google Firebase, your devices, wishlist, directions history and notification settings; we remove your name, email, mobile number and city and the text of your support messages; and we remove your identity, coordinates and installation ID from offer activity. We keep support request numbers and anonymous counts for our records. You cannot undo this. You can sign in again later with your number, but you start with a new, empty account.
When an account is closed or released, we delete your sign-in from Google Firebase, archive the account so that nobody can sign in to it, and turn off its push tokens. Mobile operators can give an old number to a new person. If a new person signs in with a number that belongs to an existing account, we archive the old account and create a new, empty account for the new person. The new person cannot see the old account’s data.
Signing out only ends the session on your phone. It does not close your account.
Children
VowOffers is for persons who are 18 or older and is not directed at children. We do not knowingly collect personal data from children. If you think that a child has given us personal data, contact us and we will close the account and destroy the data.
How we protect your data
- All connections between the app, the website and our servers use HTTPS encryption.
- Our servers check every signed-in request with a Google Firebase token. We do not store one-time codes; Google Firebase handles them.
- Access to customer data is limited by role. Support agents see a masked mobile number. Important administrative actions are written to an audit log that cannot be changed.
- Secret keys for our providers are kept encrypted and are never placed in the app.
- Our database provider encrypts stored data.
No system is fully secure. If a breach affects your personal data, we will notify the competent authority and, where the law requires, you.
Data on your phone and the website
The app stores on your phone: your city, the app language, whether you browse as a guest, whether it asked for location, the installation ID, app events waiting to be sent (these can include coordinates), and support ratings that you chose not to give. Google Firebase keeps your sign-in session in secure storage on the phone. Android can include app data in your phone backup, under your Google backup settings.
Firebase also stores diagnostic installation and session identifiers and pending crash reports on your phone. Deleting your VowOffers account does not immediately delete previously collected diagnostic reports; the retention period above applies.
The website does not use cookies, analytics or advertising tools. It stores only your light or dark theme choice in your browser. Cloudflare processes your IP address to deliver the pages. The business sign-up form sends the details that you enter to our servers, and we store them to review your request and contact you.
Changes to this policy
We will update this policy when the way we process personal data changes. We will publish the new version on this page and change the "Last updated" date. If a change is important, we will also tell you in the app before it applies.
This policy is published in Arabic and English. If the two versions are different, the Arabic version applies.
Contact us
For any question about your personal data or this policy, use in-app support (Profile, Support / Contact Us) or write to support@mail.vowoffers.com.