سياسة الخصوصية

Privacy Policy (English)

Khawla Supermarket ("we", "us") respects the privacy of its customers and staff. This policy explains what data the Khawla SmartCard app collects for the loyalty card program, how it is used, stored, and protected. By using the app, you agree to the practices described below.

Currently, Khawla SmartCard is used mainly as an internal tool by authorized Khawla Supermarket staff to manage loyalty cards, customer accounts, associations/groups, gifts, and transactions related to the loyalty program, with staff entering and managing customer data on their behalf. We plan to make the app available for customers to use directly in the future (e.g. logging in and viewing their own card and points). When that feature launches, we will update this policy to describe any additional data collected directly from customers using the app.

Information We Collect

• Staff account data: name, email address, and an encrypted password used to log in to the app.
• Customer & loyalty card data: name, phone number (with country code), loyalty card number, the association/group the customer belongs to, and a history of purchase points, transactions, and redeemed gifts.
• Staff attribution: we record which staff member created or edited a given record (e.g. a failed upload or transaction) for internal auditing and accountability — not for marketing purposes.
• Camera: used to scan a loyalty card's barcode — no photo is captured or stored in that case.
• Gift photos: staff can optionally take or choose a photo of a gift item offered through the loyalty program (not a photo of the customer), which is stored on our servers to display it in the app.
• Automatic diagnostic data: when the app crashes or errors, a technical report (device model, OS version, app version, error message) is sent to our crash monitoring service to help us improve app stability. We also send data on how staff navigate between app screens (no personal content) and a device/installation identifier, used only to group crash reports and analyze app performance.

The app does not collect precise location data, does not access contacts, does not use advertising identifiers, and does not display third-party ads.

How We Use It

• Operating the loyalty card program, customer accounts, and associations.
• Recording and calculating purchase points, transactions, and gift redemptions.
• Providing authorized staff with secure access to the app.
• Internal auditing and misuse prevention via staff attribution.
• Diagnosing crashes and improving app performance and stability.

Storage & Sync

Customer and staff data is stored on secure cloud servers (Supabase) and is also synced locally to a staff member's device (via PowerSync) to allow offline use. All data is transmitted between the app and our servers over an encrypted connection (HTTPS/TLS).

Data Sharing

We do not sell customer or staff data to anyone. Data is only shared with service providers required to run the app:

• Supabase — database hosting and authentication.
• Sentry — crash monitoring and technical error reports.
• Expo / EAS — infrastructure to build, run, and update the app.

We may also disclose data if required by law, or to protect the rights of Khawla Supermarket or the safety of app users.

Data Retention

We retain a customer's data for as long as their loyalty account remains active, or as needed for legitimate operational, accounting, or legal purposes. Customers may request deletion of their data as described below, unless the law requires us to retain it longer.

Data Security

We take reasonable technical and organizational measures to protect data from unauthorized access, use, or disclosure, including encryption in transit and restricting app access to authorized staff via a personal login account.

Your Rights

Any customer enrolled in the loyalty program may request access to, correction of, or deletion of their data. To do so, please contact us at any Khawla Supermarket branch or via the contact details on our Contact page.

Children's Privacy

The app is not directed at children. In its current stage, it is used only by authorized, adult Khawla Supermarket staff. If the app becomes directly available to customers in the future, it will not be directed at children under the legal age of majority, and we will apply appropriate safeguards as needed. We do not knowingly collect data from children through this app.

Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page along with a revised "last updated" date above.

Contact Us

For any question about this policy or your data, please visit our Contact page.