Privacy Policy

خزنتي is an app provided by SAPIERA Company, a limited liability company registered in the Kingdom of Saudi Arabia under unified national number 7055093327 (“SAPIERA”, “we” or “us”).

SAPIERA decides the purposes and means of processing the personal data described in this policy, which makes it the “controller” under the Personal Data Protection Law.

To contact us about anything concerning your data: support@sapiera.sa.

This policy applies to the خزنتي app on iPhone and Android, to your correspondence with us about it, and to the app's pages on the web, including this one.

It does not apply to other companies' services, such as the App Store and Google Play, which have their own policies.

We process the following data depending on how you use the app. You decide what you record in your vault.

A way to sign in and the name you choose are required to create your account and provide the service; the account can't be created without them. Everything else is optional — if you don't provide it, only the features that depend on it are unavailable.

• From you: when you create your account, use the app, record your assets, upload photos and documents, and write to us.
• From other users: when someone invites you to a family using your خزنتي ID, records your relationship in their family, or shares an asset with you.
• From Apple or Google: when you sign in with them, and about your subscription's status once purchases are available.
• Automatically: the technical and security data described above, when the app connects to our servers.
• From your device, with your permission: only the photos and files you take or choose yourself.

The app asks for a permission only when it needs it, and you can change permissions at any time in your device settings:

Camera

When you choose to take a photo, scan an invoice or a document, or scan a barcode. Barcodes are read on your device.

Photos

To pick specific photos for your assets or your profile. The app uses only the photos you choose.

Files

To pick the documents you upload, through your device's file picker.

Face ID or fingerprint

To unlock the app if you turn on the app lock, and to confirm it's you when you delete your account. The check happens on your device.

The app doesn't ask for access to your location, contacts or microphone, and doesn't currently ask to send notifications.

We process your data only for the following purposes, each with a legal basis:

Creating and managing your account, and verifying you at sign-in

Performing our agreement with you under the Terms of Use.

Providing the vault: storing, organizing and searching your assets, photos, documents, values and warranties, and reminding you of what's due

Performing our agreement with you.

Carrying out the sharing you ask for with your family or people you choose, sharing or transferring assets by QR code, and managing invitations

Performing our agreement with you, at your choice.

Smart reading, market search and usage statistics

Your explicit consent, which you can withdraw at any time.

Counting totals from the service's records to improve it, such as new accounts and subscriptions

Our legitimate interest in developing the service, without prejudice to your rights and interests.

Plans and purchases when available, and keeping their records

Performing our agreement with you, and the legal obligations that apply to us.

Protecting the service and accounts: preventing unauthorized access and abuse, enforcing usage limits, and investigating security incidents

Our legitimate interest in securing the service, without prejudice to your rights and interests.

Writing to you about your account: verification codes, password resets, and replies to your questions and requests

Performing our agreement with you.

Keeping the record of your acceptance of the terms, and handling privacy and account-deletion requests

The legal obligations that apply to us.

Where we rely on your consent, you may withdraw it at any time; this doesn't affect the lawfulness of processing before you withdrew it.

We don't sell or rent your personal data, and we don't use it for advertising or to build marketing profiles about you. We don't send you marketing messages; if we want to in the future, we'll ask for your consent where the law requires it, and you'll be able to stop them at any time.

Your vault is private by default: no one sees an asset unless you share it, and joining a family or holding a role in it gives no one access to anyone's assets.

• When you share an asset with a family, or with a person through their خزنتي ID, they see only the asset's details and photos, plus what the access you choose allows: values, documents, maintenance and warranties, and the assets inside it.
• Never shown to the people you share with: your private notes, health notes, where your assets are kept, incidents, return windows, how you acquired the asset, and value references such as appraisal report and insurance policy numbers.
• If you grant edit or maintenance access, they can change the asset's details or its maintenance records — but not its photos, its place, its sharing settings, or delete it.
• You can stop any sharing at any time, or set a date for it to end. Access also ends as soon as a member leaves or is removed from the family.
• Within a family, members see each other's names, خزنتي IDs, roles and recorded relationships. The person you invite sees the family's name and your name and ID before accepting.
• When someone enters your خزنتي ID to invite you or share with you, they see only your name. We never reveal your email address or phone number to another user.
• When you show an asset's QR code, whoever scans it sees your name and خزنتي ID and the asset's name and kind; if you transfer the asset to them, it becomes theirs with everything recorded about it, as Sharing or transferring an asset by QR code explains.

What you take out of the app yourself — a Proof Pack, a “Download my data” file, or a photo you share — is outside our control. The people you share with may keep or pass on what they've seen, for example with a screenshot, so share with people you trust.

We use service providers that process data on our behalf, on our instructions, and only as needed to provide their services:

Supabase

The app's cloud infrastructure: sign-in, the database, and storage for photos and documents. Your account and vault data are kept there, in its data center in Mumbai, India.

OpenAI

Runs smart reading and market search, only with your permission, and receives only what the smart features section describes. We ask it not to store the request for later retrieval, but it may retain some data for a limited time for safety and abuse monitoring, under its terms.

Resend

Sends your account emails, such as verification codes and password resets. It receives only your email address and the content of those emails.

SMS provider

Sends the verification code to your phone number, when the app offers phone sign-in.

Apple and Google

Sign-in with your account there when you choose it, and purchases in their stores once purchases are available. We send them nothing from your vault. On Android, barcodes are read on your device with Google's ML Kit, which may collect technical data about its use and performance, as Google describes.

Vercel

Hosts the app's pages on the web and the SAPIERA website.

Our domain's email provider

Hosts the sapiera.sa mailboxes where we receive and answer your messages.

We require our service providers to protect personal data to a standard no lower than this policy describes and the law requires.

When you download the app from, or buy in, the App Store or Google Play, Apple or Google processes some data as an independent company under its own policies.

We may disclose personal data where a law or a request from a competent authority requires it, or where needed to protect rights or safety, within the limits the law allows. Otherwise, we don't disclose your data to anyone.

Your account and vault data — including your photos and documents — are stored with Supabase in a data center in Mumbai, India, outside the Kingdom of Saudi Arabia. OpenAI processes what the smart features send outside the Kingdom as well, and our other service providers may host or process data in data centers outside it. When personal data is transferred or processed outside the Kingdom, we follow the Personal Data Protection Law and its regulations on such transfers — including limiting the data to the minimum the purpose needs and relying on the appropriate safeguards they recognize.

We apply reasonable technical and organizational measures, including:

• Access controls on our servers that make your assets, photos and documents available only to you, and to the people you share with at the access you grant.
• Private file storage, served only through short-lived temporary links.
• Encrypted connections (HTTPS) between the app and our servers.
• Your session kept in your device's secure storage, with an optional app lock using Face ID, fingerprint or a PIN.
• When you delete your account, we check that no record or file linked to it remains before the deletion counts as complete.
• Limiting our team's access to what's needed to run the service and answer your requests, without viewing your vault or documents in the normal course of our work.

No method of electronic transmission or storage is completely secure, and we can't guarantee absolute security. If a personal data breach occurs, we'll notify the competent authority, and notify you if it could cause serious harm to you or your data, as the law requires.

To protect your account: use a strong password you don't use elsewhere, turn on the app lock, and never share verification codes — we will never ask you for them.

• We keep your account and vault data while your account exists, or until you delete it.
• Smart reading results: a document's three latest readings, deleted with the document; product photo readings, 30 days.
• The log of reminder due dates: 180 days.
• Usage statistics: 90 days, all deleted at once when you turn them off; afterwards only daily totals that identify no one remain. The log of staff looks at them: 400 days.
• The record of each QR-code share or transfer: while the account that showed the code exists.
• The record of your acceptance of the terms: while your account exists; it's deleted with it.
• Smart-feature cost records and store purchase records: kept after your account is deleted without anything that identifies you, for as long as accounting and legal purposes require.
• Copies of deleted data may remain in our cloud infrastructure provider's backups until those backups expire in their normal cycle.
• We keep technical and security logs for a limited period as operations and protection require, and your correspondence with us for as long as we need it to follow up on your request and show it was handled.

You can delete your account and all data linked to it at any time in the app: Account › Delete account. If you can't use the app, ask for deletion through the Delete account & data page, which explains the steps, what is deleted, and what we may keep.

• Families you own pass to their longest-standing manager, or to the longest-standing member if there is no manager; a family closes only if no one else is in it.
• If you sign in with Apple, we revoke the app's access to your Apple Account.
• Assets you transferred to others by QR code are theirs, so they stay with them.
• Deleting your account doesn't cancel an App Store or Google Play subscription — cancel it in the store.

Without deleting your account, you can also delete specific assets, photos or documents, stop sharing, leave a family, or edit your profile, directly in the app.

Saudi Arabia's Personal Data Protection Law gives you rights over your data, including:

• The right to be informed about how and why your data is collected and processed, as this policy explains.
• The right of access to your data and to a copy of it. You can download it yourself in Account › Privacy & security › Download my data, as one file; photos and document files are saved from the app itself.
• The right to request correction, completion or updating of your data — most of which you can edit yourself in the app.
• The right to request destruction of your data when it's no longer needed, including by deleting your account, subject to what the law requires us to keep.
• The right to withdraw consent to any processing based on consent, such as the smart features.
• The right to complain to the competent authority, the Saudi Data & AI Authority (SDAIA).

خزنتي is not directed to children; it is designed for people with the legal capacity to manage their own affairs. Anyone without full legal capacity may use it only with their legal guardian's consent and under their supervision, and the guardian exercises the rights in this policy on their behalf.

If we learn that we have collected data from someone without full legal capacity without their guardian's consent, we'll take appropriate steps, including deleting it. Guardians can contact us at support@sapiera.sa.

When you visit the خزنتي pages on the SAPIERA website, including this one:

• Our hosting provider (Vercel) processes technical data needed to serve and protect the pages, such as your IP address, browser type and the time of the request.
• The site uses a single essential cookie, sapiera-locale, which remembers the language you chose for one year. It uses no advertising or analytics cookies and no tracking tools.
• If you write to one of the addresses published on the site, we process your message to reply.

We may update this policy when the app or the law changes. We'll publish the updated version on this page and change the “Last updated” date; for material changes, we'll tell you in the app or by email before they take effect, and the app may ask you to accept the new version. If we add features that involve new processing of your data, we'll update this policy before that processing begins.

This policy is published in Arabic and English. If the two differ, the Arabic text prevails.

For any question or request about your data or this policy, write to support@sapiera.sa.