سياسة الخصوصية

Privacy Policy (English)

Khawla Supermarket ("we", "us") respects the privacy of its customers and staff. This policy explains what data the Khawla SmartCard app collects for the loyalty card program, how it is used, stored, and protected. By using the app, you agree to the practices described below.

Khawla SmartCard supports two kinds of use: authorized Khawla Supermarket staff use it to manage loyalty cards, customer accounts, associations/groups, gifts, and transactions related to the loyalty program, and loyalty program customers can also sign in directly with their card number and PIN to view their points balance and any linked fund balance, browse available gifts and offers, and show their card barcode at checkout.

Information We Collect

• Staff account data: name, email address, and an encrypted password used to log in to the app.
• Customer & loyalty card data: name, phone number (with country code), loyalty card number, the association/group the customer belongs to, the card's points and fund balance, and a history of purchase points, transactions, and redeemed gifts.
• Customer in-app account data: when a customer signs in directly, they use their card number and a 6-digit PIN (stored encrypted). The app also keeps a session token on the customer's device to keep them signed in.
• Staff attribution: we record which staff member created or edited a given record (e.g. a failed upload or transaction) for internal auditing and accountability — not for marketing purposes.
• Camera: used to scan a loyalty card's barcode — no photo is captured or stored in that case.
• Gift photos: staff can optionally take or choose a photo of a gift item offered through the loyalty program (not a photo of the customer), which is stored on our servers to display it in the app.
• Automatic diagnostic data: when the app crashes or errors, a technical report (device model, OS version, app version, error message) is sent to our crash monitoring service to help us improve app stability. We also send data on how staff navigate between app screens (no personal content) and a device/installation identifier, used only to group crash reports and analyze app performance.

The app does not collect precise location data, does not access contacts, does not use advertising identifiers, and does not display third-party ads.

How We Use It

• Operating the loyalty card program, customer accounts, and associations.
• Recording and calculating purchase points, transactions, and gift redemptions.
• Providing authorized staff with secure access to the app.
• Internal auditing and misuse prevention via staff attribution.
• Diagnosing crashes and improving app performance and stability.

Storage & Sync

Customer and staff data is stored on secure cloud servers (Supabase) and is also synced locally to a staff member's device (via PowerSync) to allow offline use. When a customer signs in directly, their card number and session token are stored locally and securely (using encrypted secure storage) on their own device to keep them signed in. All data is transmitted between the app and our servers over an encrypted connection (HTTPS/TLS).

Data Sharing

We do not sell customer or staff data to anyone. Data is only shared with service providers required to run the app:

• Supabase — database hosting and authentication.
• Sentry — crash monitoring and technical error reports.
• Expo / EAS — infrastructure to build, run, and update the app.

We may also disclose data if required by law, or to protect the rights of Khawla Supermarket or the safety of app users.

Data Retention

We retain a customer's data for as long as their loyalty account remains active, or as needed for legitimate operational, accounting, or legal purposes. Customers may request deletion of their data as described below, unless the law requires us to retain it longer.

Data Security

We take reasonable technical and organizational measures to protect data from unauthorized access, use, or disclosure, including encryption in transit and restricting app access to authorized staff via a personal login account.

Your Rights

Any customer enrolled in the loyalty program may request access to, correction of, or deletion of their data. To do so, please contact us at any Khawla Supermarket branch or via the contact details on our Contact page.

Children's Privacy

The app is not directed at children. Staff access is limited to authorized, adult Khawla Supermarket employees, and loyalty cards linked to a customer account are issued to their adult holders. We do not knowingly collect data from children through this app.

Changes to This Policy

We may update this policy from time to time. Any changes will be posted on this page along with a revised "last updated" date above.

Contact Us

For any question about this policy or your data, please visit our Contact page.