Who is the data controller
Safrati Almathaliyah Establishment (مؤسسة سفره المثاليه), registered at Al Rehab District, Al Tadamun Al Arabi, Jeddah, Kingdom of Saudi Arabia. Contact: admin@support.safrah.app.
What we collect
Account info (name, email, phone, password hash). Booking info (travel dates, driver chosen, pickup/drop-off, special notes). Payment info (handled by PayMob; we never see full card numbers). Communications (messages exchanged in-app or via support email). Technical (IP address hashed for spam mitigation, browser, device info).
Why we use it
Pending reviewTo run the booking marketplace. To prevent fraud, comply with anti-money-laundering rules, and respond to lawful requests. To improve the product. To send marketing emails (consent — opt out anytime).
Who sees your data
Drivers see your name, contact details, and booking notes only after a match is confirmed. Sub-processors include our payment processor, hosting provider (Vercel + Supabase), and email sender (Resend). All bound by data-processing agreements. We do not sell personal data.
International transfers
Pending reviewSome sub-processors are based outside Georgia and the GCC. Transfers rely on Standard Contractual Clauses or equivalent safeguards.
How long we keep it
Account: until you delete it. Bookings: 7 years for tax/accounting compliance. Marketing consent: until you opt out. Server logs: 30 days.
Your rights
Pending reviewYou can request access, correction, or deletion of your personal data at admin@support.safrah.app.
Cookies
Strictly-necessary cookies for login and session. Optional analytics cookies (consent-gated).
Children
Safrah is not for children under 13.
Updates
Material changes will be emailed to all account holders 14 days before they take effect.
Questions about this privacy policy?
We're happy to walk you through anything that isn't clear. Reach out and a real human will reply.
Document slug: privacy