Privacy Policy

Jarrabt.

Last updated: 2026-04-27

Introduction

Welcome to Jarrabt — a personal journal for tracking your experiences with services and products and sharing them with your friends. We are committed to protecting your privacy and personal data in compliance with the Saudi Personal Data Protection Law (PDPL).

Data We Collect

A. Data You Provide

  • Email address (for login and communication)
  • Display name (optional)
  • Preferred language (Arabic or English)
  • Experiences you create: name, rating, location, price level, category, notes, photos (if any)
  • Tags associated with your experiences
  • Experiences you save from other users
  • Reports you submit on content

B. Data Collected Automatically During Use

  • When viewing a public experience: IP address, estimated country, browser type, referrer
  • Login and usage timestamps for security purposes
  • Technical error logs to improve the service

C. Data We Do NOT Collect

  • We do not request your national ID number
  • We do not request credit card details (payments are handled through external service providers)
  • We do not track your precise geolocation

How We Use Your Data

We use your data for the following purposes only:

  • Authentication and account management
  • Displaying your experiences to you within the platform
  • Displaying public experiences to other users (for public shares only)
  • Displaying view analytics to entry owners (on paid plans)
  • Operating the reporting and content review system
  • Service improvement and user experience enhancement
  • Sending essential security notifications (such as email confirmation)

We do not use your data for advertising or marketing purposes for third parties.

Data Sharing

We never sell your personal data. We share your data only in the following cases:

  • Supabase — for database hosting and authentication services (servers in the Mumbai, India region)
  • Vercel — for hosting and serving the website
  • Resend — for sending transactional emails (account confirmation, password recovery)
  • When legally required by a competent government authority in the Kingdom of Saudi Arabia
  • Experiences you choose to make public are visible to other users

Your Rights Under the Personal Data Protection Law (PDPL)

Under the Saudi Personal Data Protection Law, you have the following rights:

  • Right of access — to know what data we hold about you
  • Right to rectification — to correct your data (name, language, experiences)
  • Right to erasure — to permanently delete your account and all your data
  • Right to data portability — to receive a copy of your data in JSON format
  • Right to object — to object to processing of your data for specific purposes
  • Right to withdraw consent — at any time, without affecting the lawfulness of prior processing
  • Right to lodge a complaint — with the Saudi Data and AI Authority (SDAIA)

You can exercise all these rights from the Profile page within the app, or by contacting us at the email address listed below.

Data Retention

  • Active accounts: we retain your data as long as your account is active and in use
  • Deleted accounts: when you delete your account, all your data is permanently deleted within 30 days
  • View analytics: automatically deleted after 90 days
  • Reports and hidden content: we retain report records for 12 months for legal and security purposes

Data Security

We take strict security measures to protect your data:

  • Encryption in transit (HTTPS/TLS)
  • Encryption at rest
  • Row-Level Security policies
  • Rate limiting to prevent abuse
  • Automatic content filtering to limit harmful content
  • Regular security audits

Note: despite all precautions, absolute security on the internet cannot be guaranteed. If we become aware of any security breach affecting your data, we will notify you within 72 hours, in accordance with PDPL requirements.

Cookies

We use the following cookies:

  • Essential cookies: for login and saving your preferences (cannot be disabled)
  • Language cookies: to remember your preferred language

We do not use advertising cookies or third-party tracking.

Geographic Data

We handle geographic data with strict care:

  • Experience coordinates (latitude and longitude): fully optional. Stored only if you pin a location on the map yourself when adding the experience
  • Your current location (for the "nearest to me" feature): used locally in your browser only. Never sent to our servers and never stored in our database
  • The city (Riyadh, Jeddah, etc.): stored as plain text for organization and filtering. Anyone viewing a public experience can read it

You can disable "nearest to me" at any time, and we will never request your location without your explicit click on the toggle.

Minors

The Jarrabt platform is intended for individuals 13 years of age or older. For minors under 18, we recommend using the platform under the supervision of a parent or legal guardian. If we become aware of any account belonging to a minor under 13, we will delete it immediately.

Updates

We may update this privacy policy from time to time. We will notify you of any material changes:

  • Via the email address linked to your account
  • Through an in-app notification
  • By updating the "Last updated" date at the top of this page

Contact and Complaints

For any inquiries regarding your privacy or personal data:

[To be determined before public launch]

Responsible party: Jarrabt Team

If you are not satisfied with our response, you have the right to lodge a complaint with the Saudi Data and AI Authority (SDAIA) through their official website.