Privacy Policy

1. Data Controller

The legally responsible entity controlling and processing your personal data is ALHAJZ ALMUTATAWIR OFFICE FOR INFORMATION TECHNOLOGY (Unified Business ID: 7051210222), Riyadh, Kingdom of Saudi Arabia. Email: support@restin.co.

2. Information We Collect

• Identity & Account Data: Full name, verified mobile number, email address, and official national identification number or residence permit (required by Saudi regulatory guidelines for hosts and guest check-in verification).
• Reservation & Financial Records: Check-in/check-out dates, booked property identifiers, total rates, and transactional invoice histories.
• Host Listing Details: Title deed documentation, Ministry of Tourism hospitality permits, precise GPS coordinates, property photographs, and amenity disclosures.
• Technical & Diagnostics Data: Device model, OS version (iOS / Android), crash analytics via Firebase Crashlytics, and network performance telemetry to ensure application stability.

3. App Permissions & Intended Purposes

• Location Services (GPS): To showcase nearby accommodation properties, calculate travel proximity, and direct guests to their confirmed vacation unit.
• Camera & Photo Library: To enable hosts to capture and upload accommodation photographs and permits, and to facilitate identity verification.
• Push Notifications: To deliver immediate booking confirmations, access door codes, check-in instructions, and security alerts via APNs and FCM.

4. Secure Payment Gateways & BNPL Integrations

All financial transactions are processed through encrypted, PCI-DSS certified payment processors licensed by the Saudi Central Bank (SAMA), including Mada, Apple Pay, Visa, and Mastercard, alongside authorized BNPL installment providers Tamara and Tabby. RestIn never stores confidential card numbers or CVV codes on its servers.

5. Zero Data Sale & Third-Party Sharing

We never sell, rent, or monetize your personal data with third parties for advertising or commercial purposes. Personal data is shared strictly as necessary to fulfill confirmed reservations between guest and host, with certified cloud infrastructure providers, or in response to legally binding judicial orders under Saudi law.

6. Account & Data Deletion Rights (Apple Guideline 5.1.1(v))

Users have the right to request the complete deletion of their account and associated data at any time directly within the mobile applications via: Profile > Settings > Delete Account, by visiting our dedicated Account Deletion Request Page, or by contacting support@restin.co. All personal identifiers are permanently scrubbed within a maximum of 30 days.

7. Children's Privacy

RestIn applications and services are exclusively designed and intended for adults aged 18 and older. We do not knowingly solicit or collect personal data from minors.

8. Contact Our Data Protection Officer

• Email: support@restin.co
• Operating Entity: ALHAJZ ALMUTATAWIR OFFICE FOR INFORMATION TECHNOLOGY
• Headquarters: Riyadh, 2nd Industrial City, Bir Al Ziyarah Street, Building 4082, Kingdom of Saudi Arabia

9. Cookies and Website Analytics

• This section applies to the website restin.co only, not to the apps.
• Necessary storage: the website saves your cookie choice in your browser so it doesn't ask again. This does not identify you.
• Analytics (only with your consent): if you select "Accept", we use Google Analytics 4, provided by Google, to understand how visitors use the website, such as pages visited, approximate city-level location, device and browser type, and how you reached the site. We use this data only to improve the website; we do not use it for advertising and do not link it to your app account.
• Google may process this data on servers outside the Kingdom of Saudi Arabia. Google Analytics data is kept for 2 months and then deleted automatically.
• If you select "Reject", no analytics cookies are set. You can change your choice at any time from the "Cookie settings" link at the bottom of the website, and you can delete cookies in your browser settings.