Privacy Policy — Koabz app
Last updated: 14 October 2026
This policy covers the Koabz mobile app and platform: what we collect, why, who it reaches, how long we keep it, and how you delete your account.
Operator: Koabz Establishment Commercial, CR 7050804306, VAT 313136059100003, Building 7069, Yahya Al-Randi Street, Al-Sulimaniyah, Riyadh 12232, Saudi Arabia.
What we collect
- Account details: name, email, phone if you give one, business name, and your role (buyer or supplier).
- Supplier verification: commercial registration, VAT number, contact name and number, and the certificates you upload.
- Trading records: requests for quotation, quotes, orders, invoices, disputes and reviews.
- Messages: what you and the other party send each other in the app, and the files attached to them.
- Files you upload: artwork, transfer receipts, verification documents.
- A push token: an identifier issued by your device's operating system so notifications can reach it. It does not identify you to us or to anyone else.
- Your device language, so the app can be shown in it.
- Technical logs: IP address and request time, to protect the platform from abuse.
What we do not collect
- The app contains no third-party analytics, tracking or advertising software. We do not track you across other apps or websites.
- We never ask for or store card numbers. Card payment happens on the payment provider's own page; what reaches us is the outcome.
- We do not access your contacts, photos or location.
Why we collect it
- To run the service: match your request to suppliers, carry quotes between you, issue the invoices the law requires, and follow the order through.
- To meet legal obligations: e-invoicing and VAT regulations require us to issue and retain invoices.
- To protect the platform: fraud, spam, and attempts to take a deal off the platform. Messages sent before a quote is accepted pass through a filter that removes direct contact details — a commercial rule stated in the terms of use.
Who it reaches
- The other party to a deal: before a quote is accepted both identities are hidden. After acceptance, contact details are shown to both so the work can be done.
- The payment provider (Moyasar) when you pay by card: the amount and the order reference only.
- The email provider (Resend), to send confirmations and notifications.
- Government authorities where the law requires it.
- We do not sell or rent your data to anyone.
Where it is kept
- On a server in a data centre inside Saudi Arabia (Riyadh). The database and uploaded files are all there.
How long
- Invoices and accounting records: kept for as long as the e-invoicing and tax regulations require. We are not permitted to delete them sooner.
- Messages: kept for as long as the deal they belong to, because they may be the evidence in a dispute.
- Push tokens: deleted as soon as you delete your account or sign out.
Deleting your account
- You can delete your account from inside the app: Account → Delete account.
- Removed: your name, email, phone, and your ability to sign in. Your email address becomes free to register again.
- Kept: invoices and past orders, because the law requires it. They no longer carry your name — they point at a deleted account that names nobody.
- If you have an order with money paid or work under way, or an open dispute, the app names that order before you delete, because finishing it is the other party's right too.
Your rights
- Access and correct your data in the app, or by contacting us.
- Delete your account, as above.
- Object to processing, within what the law and our accounting obligations allow.
Children
- The platform is for business-to-business trade and is not directed at anyone under 18.
Contact us
- Questions about this policy, or a request about your data: support@koabz-sa.com