Privacy Policy

Last updated: 13 May 2026

1. Who we are

Ni'mah KSA ("we", "us") operates the Ni'mah marketplace for surplus food in Saudi Arabia.

2. Data we collect

• Account: name, email, phone, password (hashed).
• Orders & reservations: boxes you reserve, pickup codes, totals.
• Device & usage: IP, device type, app interactions for security and analytics.
• Location (optional): to show nearby boxes.

3. Legal basis (GDPR)

For users in the EU/UK we process data on the basis of contract performance, legitimate interests (fraud prevention, service improvement), and consent (marketing, optional cookies).

4. Your rights

Access, rectification, erasure, restriction, portability, objection. Under Saudi PDPL you have similar rights. Contact privacy@nimah.app.

5. Sharing

We share order info with the partner restaurant for fulfillment, and with payment & infrastructure providers under data-processing agreements. We never sell your data.

6. Retention

We retain account data while your account is active and for up to 24 months after deletion for legal and accounting obligations.

7. Contact

privacy@nimah.app — Riyadh, Saudi Arabia.