Privacy Policy

Qawanen Platform Privacy Policy Last updated: July 20, 2026 1. Introduction Qawanen Platform (referred to in this Policy as “Qawanen,” “we,” or “us”) respects your privacy and is committed to handling your personal data responsibly and transparently in accordance with the laws applicable in the Kingdom of Saudi Arabia, including the Personal Data Protection Law and its Implementing Regulations. This Policy explains what data we collect, why we use it, with whom we may share it, how long we retain it, and your rights in relation to it. This Policy applies to your use of the Qawanen mobile application, website, and related services. By using our services or creating an account, you acknowledge that you have read this Policy. Where the law requires consent for a specific processing activity, we will request it separately and clearly. 2. Data We Collect Depending on your role and the services you use, we may collect the following categories: • Account and identity data: name, mobile number, encrypted password, user role (client or lawyer), gender when provided, profile photo, and a lawyer's professional profile and description. • Communications and service content: consultation requests, text and voice messages, images, attachments, and records of communications between users, lawyers, and support. Content you choose to submit may include legal or sensitive personal information; please do not submit information that is unnecessary for the service. • Location data: approximate or precise location when you grant permission, for location-based features such as displaying relevant lawyers or requests and updating a lawyer's location. • Transaction data: transaction amount, status, payment method, transaction references, invoices, and financial records. Card information is processed directly by the payment provider, and we generally do not retain full payment-card details. • Lawyer financial and professional data: such as IBAN, consultation prices, and verification or approval status, as necessary to provide services and settle amounts due. • Device and usage data: IP address, device type and operating system, device model, application or device identifier, notification token, browser, pages or features used, usage times, technical logs, and crash and security reports. • Optional permissions: camera, photo library, microphone, notifications, and location. We access these resources only with device permission and for the purpose explained when permission is requested. You may withdraw a permission through your device settings. We collect data directly from you when you register, use a service, or contact us; automatically from your device when you use the application or website; from the lawyer or other party to a transaction; and from payment, notification, and technical service providers as necessary to operate the service. 3. Purposes and Legal Bases We use personal data to: • Create, verify, manage, and secure accounts. • Connect clients with lawyers and manage consultation requests, conversations, attachments, calls, or user-initiated WhatsApp contact. • Process payments, manage balances, settlements and refunds, prevent fraud, and keep necessary financial records. • Send service notifications about accounts, requests, messages, payments, and platform operations. • Provide location-based results and services when this feature is enabled. • Provide support, respond to inquiries and complaints, and resolve disputes. • Monitor performance, diagnose faults, and improve security, quality, and user experience. • Comply with legal, judicial, and regulatory requirements and protect our rights and the rights and safety of users. • Send marketing communications only where there is an applicable legal basis or required consent, with a way to opt out. Depending on the context, processing is based on performing our service or contract with you, your consent, compliance with a legal obligation, a permitted legitimate interest such as protecting the platform and preventing misuse, or protecting vital interests where necessary. 4. Sharing Personal Data We do not sell your personal data. We may disclose it, to the extent necessary, to: • The user or lawyer who is the other party to a request or conversation, to deliver the service you requested. • Hosting, storage, communications, technical support, notification, crash analysis, and security service providers. • Payment providers, banks, and financial institutions to process transactions, settle amounts, and prevent fraud. • Professional advisers, service providers, and auditors who are subject to confidentiality obligations. • Government, regulatory, judicial, or law-enforcement authorities where disclosure is required or permitted by law. • A party involved in a merger, acquisition, or reorganization, subject to appropriate legal safeguards. We require service providers to process data for specified purposes and with appropriate protection. Some technical services may involve processing outside Saudi Arabia; where this occurs, we apply the procedures and safeguards required for transfers of personal data under applicable law. 5. Retention and Destruction We retain personal data while your account exists or while we provide the service, and afterward only for as long as necessary to meet legal and financial obligations, evidence transactions, resolve disputes, prevent fraud, and protect rights. Retention periods vary according to the type of data, its purpose, and applicable legal requirements. When there is no longer a lawful need to retain data, we delete, destroy, or anonymize it in a manner designed to prevent recovery or association with you, unless the law requires longer retention. Limited copies may remain temporarily in secure backups until the normal deletion cycle is completed, with access and use restricted. 6. Security We use reasonable administrative, technical, and organizational measures to protect personal data from loss, misuse, alteration, unauthorized disclosure, or access. These measures include access controls, protected communications, password hashing, monitoring, and backups. No electronic method is completely secure, so please protect your login credentials and notify us immediately if you suspect unauthorized account use. 7. Cookies and Local Storage The website may use cookies or local storage necessary for login, preferences, session security, feature operation, and performance measurement. You can manage cookies through your browser settings, but disabling essential cookies may prevent some features from working. The application also uses limited local storage for sessions, preferences, and the state of certain operations. 8. Your Rights Subject to applicable law and its exceptions, you may have the right to: • Be informed about how your data is collected and the legal basis and purpose of processing. • Access your personal data and request a clear, readable copy. • Request correction, completion, or updating of inaccurate data. • Request destruction of your data when it is no longer needed and there is no lawful basis to retain it. • Withdraw consent for processing based on consent, without affecting prior lawful processing or processing based on another legal basis. • Object or submit a complaint to the competent authority as provided by law. You can update some information through your account or submit a request using the contact methods below. We may request information to verify your identity before acting on a request and will respond within legally prescribed periods. We may be unable to fulfill all or part of a request where a legal obligation or exception applies and will explain this where appropriate. 9. Children's Privacy The services are not directed to persons under 18, and we do not knowingly collect their personal data without a lawful basis or guardian consent where required. If you believe a minor has provided data inappropriately, please contact us so that we can take appropriate action. 10. Third-Party Links and Services The platform may allow you to move to external services such as WhatsApp or a payment gateway. Those parties process information under their own privacy policies, which we encourage you to review before using their services. 11. Policy Updates We may update this Policy when our services, practices, or legal requirements change. We will publish the updated version with its effective date and may notify you in the application or by another appropriate method if a change is material. 12. Contact Us To exercise your rights, ask a question about this Policy, or submit a privacy complaint, contact Qawanen through the “Contact Us” section in the application or website, or by phone/WhatsApp at +966 55 531 5534. Website: https://qwanneen.com