Legal

Privacy policy

1. What we collect

• Account: your name, email, UAE mobile number, date of birth, gender, language and whether you want marketing messages. Your password is stored only as a secure hash by our sign-in provider.
• Membership and payments: your plan, its status and dates, and records of payments and refunds. Card details are entered into Stripe; we never see or store your full card number.
• Vouchers and visits: deals you claim, the provider and branch, voucher codes, when a voucher was redeemed and what you saved. These records can show the type of treatment you chose.
• Things you add: reviews, reports about reviews, members you block, saved deals and support messages.
• Provider accounts: business and trade licence details, licence and identity documents, branch details, photos, deals and staff invitations.
• Technical and security data: sign-in session tokens, security logs such as failed voucher scans and rate limits, and the server logs our hosting providers keep (including IP address).

Voucher camera frames are decoded on your device and are not uploaded by ZaynApp. You can browse deals without an account; we then collect only technical logs. We do not use advertising, analytics or tracking SDKs and we do not track you across other apps or websites.

2. Why we use it

• To create and run your account, membership and vouchers (our contract with you).
• To take payments and keep financial records (contract and legal obligations).
• To let a provider accept your voucher and handle disputes (contract).
• To keep the service safe: prevent fraud and abuse, moderate reviews and enforce our terms (our legitimate interests).
• To answer support requests and send service messages about your account.
• To send offers and updates by email only if you opt in. You can opt out at any time in Profile → Privacy & data, or by emailing us.

3. Who can see it

• Providers see what they need to accept your voucher: the voucher, the deal and your first name with your last initial.
• Other members see your reviews with your first name and last initial (for example “Sara K.”), never your full name or contact details.
• Service providers who process data for us under contract: Supabase (database, sign-in and file storage, hosted in Frankfurt, Germany), Stripe (payments), Vercel (web app hosting, Frankfurt), Google (Firebase Hosting for this website and Google Fonts) and, when security checks are switched on, Cloudflare Turnstile. We require them to protect your data to the same standard as this policy and to use it only to provide their service to us.
• Authorities when the law requires it.

We do not sell personal data.

4. Where it is stored

Our main database and files are stored in the European Union (Frankfurt, Germany), so your data is transferred outside the UAE. We make these transfers under contracts with appropriate safeguards, as UAE data protection law permits. Data is encrypted in transit, and access is limited to staff who need it, protected by stronger sign-in for administrators.

5. How long we keep it

• Account and profile data: while your account exists.
• Security logs of voucher scans: 30 days.
• Notifications: up to 1 year.
• Payment event records: up to 1 year in our database; Stripe keeps its own records.
• Administrator audit logs: 1 year.
• After you delete your account, vouchers, redemptions and payment records are kept without your name or sign-in where accounting, disputes, fraud prevention or the law require it, then removed when no longer needed. A provider’s trade licence record is kept with the provider’s page.

6. Your rights and choices

• Access and copy: download your data in Profile → Privacy & data → Export my data.
• Correct: update your profile in the app.
• Delete: in the app, or as described on our account deletion page.
• Withdraw consent: turn off marketing messages in Profile → Privacy & data.
• Object or restrict: email us and we will reply within 30 days.
• Complain: contact us first; you can also complain to the UAE Data Office.

7. Age

ZaynApp is for adults aged 18 and over. We do not knowingly collect children’s data.

8. Changes

We will update this page when our practices change and tell you in the app about significant changes.

See also the Terms of use.