Privacy Policy

1. Data we collect

The data we collect depends on how you use Taamer and whether you are a customer, provider, admin, or support user.

• Account data such as name, phone number, email, user role, preferred language, avatar, and login activity.
• Customer request data such as service type, description, schedule, location, photos, budget or estimate context, and completion confirmation.
• Provider data such as service categories, coverage area, online status, estimates, portfolio, certifications, availability, reliability signals, and job history.
• Provider identity verification through Didit uses identity-document images, selfies or video, and facial biometric data for document checks, liveness, and face matching. Device and IP signals help detect fraud; Taamer receives verification results.
• Messages, reports, support chats, follow-up requests, evidence photos, ratings, reviews, warnings, and admin notes.
• Technical data such as device information, app version, logs, IP-related security signals, diagnostics, and notification tokens.

2. Location data

Taamer uses location data to match requests with nearby eligible providers, show service areas, support dispatch decisions, and help resolve safety or service issues.

• Customers may provide request location details, map pins, city, district, and location notes.
• Providers may provide service coverage areas and may use location-dependent features while managing jobs.
• Location data should be accurate enough to complete the job, but users should avoid sharing unnecessary sensitive details in free-text fields.

3. Photos, files, and media

Photos and files help providers understand work, help customers document issues, and help support review disputes, reports, follow-ups, and certification claims.

• Request photos, before/after photos, completion evidence, portfolio images, and certification files may be stored and displayed inside relevant app flows.
• Only upload media you have the right to share and avoid unnecessary personal, sensitive, or unrelated information.
• Taamer may restrict, remove, or review media where needed for safety, legality, moderation, or support.

4. How we use data

We use personal data to operate and improve Taamer, not to sell personal information.

• Create and secure accounts, authenticate sessions, and separate customer, provider, and admin views.
• Match requests, dispatch providers, manage scheduling, show estimates, support completion, and handle follow-ups.
• Enable messaging, notifications, ratings, reporting, support chats, admin review, and account safety actions.
• Analyze demand, supply, service coverage, reliability, performance, app stability, and feature quality.
• If you allow optional product analytics on the production website, Microsoft Clarity provides masked session replays and Google Analytics 4 measures page usage. Advertising storage remains disabled.
• Authenticated app content is masked from Clarity. Clarity may receive the page URL and a client-side-hashed account identifier; GA4 receives a minimized page path and no Taamer account identifier. We do not send messages, form entries, addresses, photos, prices, request descriptions, or payment details as analytics event properties.
• Comply with applicable law, protect users, prevent abuse, investigate fraud, and enforce platform terms.

5. Payment-related information

Taamer does not currently process in-app payments, hold funds, or store card or bank payment credentials for customer-provider payments.

• The app may record provider estimates, final amounts, and customer confirmations to support transparency and dispute context.
• Direct payment arrangements are handled between the customer and provider outside Taamer unless a future payment feature is introduced under updated terms.

6. Sharing and disclosure

We share data only where needed to operate Taamer, protect users, support service completion, or comply with obligations.

• Customers and providers see the request, contact, location, scheduling, message, estimate, and completion details needed for their shared job.
• Authorized Taamer support and admin users may review relevant records to resolve reports, support chats, account issues, follow-ups, and safety concerns.
• Technology providers may process limited data for hosting, authentication, storage, notifications, analytics, diagnostics, and security.
• Mapbox and HERE receive the address queries and coordinates needed for maps and address search. Mapbox maps also send usage and performance events, device/browser details, and a persistent random identifier; direct map requests expose the device IP address.
• Didit processes provider identity-verification data. Taamer has opted out of Didit using our verification data for future model training and related model improvement. This does not undo earlier model training.
• We may disclose information to authorities or other parties when required by law, valid process, user safety, fraud prevention, or rights protection.

7. Security

We use technical and organizational safeguards designed to protect data against unauthorized access, loss, misuse, or alteration. No online service can be guaranteed completely secure, so users should also protect their own accounts and devices.

• Access controls, role checks, database policies, secure storage paths, session management, and audit-oriented admin tools support account separation and data protection.
• If you believe your account or data has been exposed, contact support as soon as possible.

8. Retention

We keep personal data only as long as reasonably needed for the platform purposes described in this Policy, including service history, safety, support, accounting context, dispute review, legal compliance, and abuse prevention.

• Our current Didit setting has no automatic expiry for verification sessions. Face templates are not kept separately after their session is deleted. You can request deletion through privacy@taamer.app; applicable retention obligations and privacy rights still apply.
• Some records may remain after account deletion where needed for legal, safety, dispute, fraud prevention, or platform integrity reasons.
• We may anonymize or aggregate data so it no longer identifies a user and use it for analytics and product improvement.

9. Notifications and device permissions

Taamer may ask for permission to send notifications, access the camera, pick photos, or use location features. You can control many permissions through your device settings.

• Turning off notifications may affect your ability to receive job, chat, schedule, warning, or support updates in time.
• Turning off camera or photo access may limit request photos, portfolio uploads, completion evidence, or support evidence.

10. International processing

Taamer may use technology infrastructure or service providers that process data in more than one country. Where applicable, we use safeguards intended to align with Saudi personal data protection requirements and other applicable obligations.

11. Your privacy rights

Subject to applicable law and identity verification, you may request access, correction, update, deletion or destruction, withdrawal of consent where processing is based on consent, or information about how your data is used.

• Requests can be sent to privacy@taamer.app.
• We may need to retain limited information where required for legal obligations, dispute resolution, safety, fraud prevention, or legitimate platform administration.
• You may also have the right to complain to the competent Saudi data protection authority where applicable.

12. Updates and contact

We may update this Policy as Taamer changes or as legal and operational requirements evolve. Material changes will be communicated through the app or website where practical.

• Privacy questions and rights requests can be sent to privacy@taamer.app.