Privacy policy
1. Who we are
Safratna is a family trip app: planning the trip, following its days, and keeping it as an album and a story afterwards. It is provided by Sultan Hakeem, Saudi freelance document FL-649919089 (mobile app development), who is the controller of your personal data under the Saudi Personal Data Protection Law (PDPL).
2. Contact and updates
Email support@getsafratna.app · Website getsafratna.app · Address: Saudi Arabia. When this policy changes we update the date above. For any significant change we tell you in the app at least 30 days before it takes effect, unless the law requires a shorter time.
3. What we collect
- Account: Sign in with Apple on iPhone or Google on Android. We keep the name your family sees, your language and a one-way encrypted sign-in identifier. We don't keep your email, and we never ask for a phone number or ID.
- Trip content: the trip's name, destination and dates; the plan and places; bookings (such as a confirmation number and ticket photo); packing, travel-papers and shopping lists; the moments and notes you write; and the trip story. Please don't type passport or ID numbers into notes.
- Travellers: each traveller's name, type (adult, child, household worker), age in whole years only so suggestions suit them, and an optional note. We never ask for a date of birth. Children don't have accounts; the trip owner or a traveller on the trip adds them, and whoever adds a child confirms they are the child's parent or guardian or have the guardian's permission. A first name or nickname is enough.
- Spending: amount, currency, category and note, and who paid if you choose to record it.
- Photos: only the photos you choose to keep in the trip. The time and place a photo was taken are read on the phone to sort photos onto trip days; the uploaded copy is redrawn without photo metadata (including location). A moment keeps an approximate area (about 100 m).
- Location (optional): only while you use the app and only when you tap something that needs it (prayer times, qibla, a moment's place). There is no live tracking, and we don't share your location with anyone.
- Trip route (optional, when available): off by default, switched on by each person for themselves, recorded only around the trip's dates, visible to the trip's travellers, and you can delete it at any time.
- Notifications: your phone's push token, phone type and app version.
- Subscription: the status of your subscription or trip pass as the store reports it. We never see card details.
- Reports: if someone reports content, we keep the report and its reason to review it.
We don't ask for contacts, health data or advertising data, and we use no analytics or tracking tools. The travel-papers list has a vaccinations item so you remember it, and some fields take free notes; please don't type medical details (such as conditions or medicines). If you do, they are kept by your choice, and you can delete them at any time.
4. Why, and the legal basis
We use data only to run the service: sharing the trip within the family, sorting photos, showing spending to the people allowed to see it, notifications and managing the subscription.
| Who | Legal basis |
|---|---|
| Account holders (adults, 18 or over) | Performing the terms you accepted, and your consent for optional features (location, photos, route). |
| Children and travellers without an account | For children: their guardian's consent, confirmed by whoever adds them. For adults without an account (a grandparent or the household worker, for example): their permission, and whoever adds them tells them and points them to this policy. For them we keep a name, age in whole years and any note, and the age is hidden from viewers. When a child comes of age, they can use the rights below themselves. |
5. Who sees what
- Trip owner: sees the whole trip and decides who joins and who sees spending.
- Travellers: see the plan, bookings, lists and moments, and spending only if the owner allows it.
- Viewers (a grandparent or nanny, for example): see the plan, places, moments and their photos, the story, and the names of the travellers and trip members. They don't see spending, bookings or ticket photos, the packing, travel-papers or shopping lists or their photos, ages, or the hotel chosen in the trip setup (unless you add it yourselves as a place or plan item).
- Story share link: made by the trip owner, who can turn it off at any time. It shows the trip title, dates, story, photos and places, never travellers' names, bookings or hotels. The route and spending are off by default.
We don't sell your data, use it for advertising, or show it to anyone you didn't choose.
6. Who we share it with
- Our cloud hosting provider inside the Kingdom: servers, database, photos and backups.
- Apple: sign-in and subscriptions on iPhone, notification delivery, maps, turning a location into a place name, and weather (using the city's or hotel's coordinates, not your phone's location).
- Google: on Android, Sign in with Google and notification delivery.
- MET Norway: on Android, weather comes from the Norwegian Meteorological Institute. Your phone sends it approximate city or hotel coordinates (to about 1 km) and, like any internet request, your phone's IP address. It receives nothing else about you or the trip.
- The maps app you choose: tapping Directions opens the app you picked (such as Google Maps, Waze or Apple Maps) with the destination's coordinates.
- Notification text is short, such as who added a moment, and never contains the moment's text, photos or place.
- This website is hosted separately. No app data passes through it.
- Authorities: only when legally required.
- Each of these parties gets only the minimum it needs to provide the service, and any party we share user data with must protect it to the same or a higher standard than this policy.
7. Where we keep it, and for how long
App data and its backups are stored inside the Kingdom, encrypted in transit and at rest. We don't transfer it abroad except the minimum needed to provide the service through Apple, Google and the weather service as listed in section 6, under the controls set by the PDPL and its regulations. If you email us, our email provider may process your message outside the Kingdom. Your phone keeps a copy of the trip so the app works offline; deleting the app removes it. We delete data automatically as below, including from backups:
| Data | Kept for |
|---|---|
| Trip content (plan, bookings, moments, photos, spending) | Until you delete it, the trip or the account |
| A deleted item | Its content is erased at once; a content-free marker stays 90 days so phones stay in sync |
| Trip join codes | 7 days, or until used |
| Join requests nobody answered | 7 days |
| Codes to add a new phone | 15 minutes |
| A signed-in phone that hasn't opened the app | 180 days, then it signs in again |
| Story share links you turned off | 30 days after turning off |
| Route batch receipts (no locations) | 30 days |
| Reports about content | 1 year |
| Refund-request records | 1 year |
| Purchase records (no longer linked to you once your account is deleted) | The period required by law |
| "First trip free" fingerprint (one-way) | 3 years at most |
| An account not opened for 3 years (and no active subscription) | Deleted like a deletion request |
| Backups | 35 days |
| Server logs, including visits to a story link (IP address and time, no content) | 30 days |
8. Your rights
- To be informed of how your data is collected and used (this policy).
- To access your data and get a readable copy: email us and we'll send it.
- To correct, update or complete it; you can edit most of it in the app.
- To have it destroyed by deleting your account (see below).
- To withdraw consent for optional features at any time: location in your phone's settings, the route by switching it off in the trip, photos and moments by deleting them, a story link by turning it off. Withdrawing doesn't affect what happened before.
- To complain to the competent authority.
For any request, email support@getsafratna.app. We reply within 30 days at most. In limited cases we may extend this once by up to 30 days, telling you beforehand and why.
Deleting your account: in the app on iPhone, Profile → Delete account, and on Android in the same place (coming in the next Android version). You choose what happens to your moments and photos in other people's trips: "Keep them for the family, without my name" or "Delete them all". Trips you own are deleted completely with their photos, and your route is deleted from every trip. Everything is removed from the server at once and from backups within 35 days, except: purchase records, no longer linked to you (for the period required by law); refund-request records (1 year); content reports you made (1 year at most); and the "first trip free" fingerprint (3 years at most). Deleting your account doesn't cancel a subscription; cancel it in the store.
Without the app: email support@getsafratna.app with the subject "Delete my Safratna account". Because we keep no email or phone number, we confirm it's you by asking you to sign in with the same Apple or Google account at getsafratna.app/delete (Apple is available now, Google is coming soon), and then delete the account within 30 days at most.
9. Complaints
Email support@getsafratna.app. If you're not satisfied with our reply, you can complain to SDAIA through the National Data Governance Platform.