Privacy Policy

Introduction

Safaa (safaa.sa) is a Saudi mental-wellness platform operated by the "Safaa Yabqa" company, registered in the Kingdom of Saudi Arabia. This policy explains what data we collect when you use the Safaa app or our website, how we use and protect it, and your rights — in line with the Saudi Personal Data Protection Law (PDPL).

This document is the company's "approved privacy policy" referenced in the Terms and Conditions, and should be read as complementary to them.

Data We Collect

• Account and contact data: name, email, phone number, date of birth, and gender — when you create an account, book care sessions, or contact support.
• Wellness data (sensitive): mood entries, calming and breathing sessions, self-assessment results, and care-booking context — collected only when you use these features, to provide them to you.
• Content you provide: your text conversations with Rafeeq (our AI companion), audio during voice conversations, mood notes, ratings, and bug reports with any screenshots you attach.
• Identity data where legally required: date of birth, and national ID when care-booking services require it.
• Usage data: your interactions with content (views, likes, bookmarks, reading/listening progress) to personalize your experience.
• Diagnostics: crash and performance reports, device model, OS and app version, and a push-notification identifier — to run notifications and fix issues.

What We Do NOT Collect

• No advertising or tracking SDKs, no ads, and we never sell your data.
• No device location and no contacts. Subscription payments are processed by the available payment methods (such as Apple Pay or credit card) through payment providers and app stores — we do not store your card numbers.
• Some features stay on your device only and are never sent to us — such as focus sessions and content you download for offline use.

How We Use Your Data

• Provide app features and operate your account and bookings.
• Personalize content and recommendations.
• Improve quality, fix crashes, and provide support.
• Process your Rafeeq conversations through AI model providers acting as data processors, solely to generate responses for you.

Data Sharing

We do not sell your data or share it for advertising. We use technical service providers who process data on our behalf and under our instructions only — such as hosting, account management, analytics, notifications, payment services, crash diagnostics, AI processing, and booking systems — strictly within the scope of providing the service and under agreements that require them to protect it. We may disclose data where required by law or a competent authority.

Retention and Deletion

We keep your data while your account is active or as required by law. You can delete your account inside the app (Profile → Delete Account), which deletes your data from our systems under our retention rules, or contact us to request deletion.

Your Rights

• Access your personal data and request a copy.
• Correct inaccurate data.
• Request deletion or withdraw consent to processing.
• Contact us about any of these rights at info@safaa.sa.

Security

Data is encrypted in transit (HTTPS). We apply technical and organizational controls to limit access, and we scrub diagnostics of unnecessary personal information.

Children

Our services are not directed at children under the legal age of consent, and we do not knowingly collect their data without guardian consent. If you believe a child has provided us data, contact us to delete it.

Changes to This Policy

We may update this policy from time to time. The updated version will be posted on this page with its last-updated date, and we will notify you of material changes.

Contact Us

For any privacy question or to exercise your rights: info@safaa.sa — Safaa, Kingdom of Saudi Arabia.