1. Data Controller

The legally responsible entity controlling and processing your personal data is ALHAJZ ALMUTATAWIR OFFICE FOR INFORMATION TECHNOLOGY (Unified Business ID: 7051210222), Riyadh, Kingdom of Saudi Arabia. Email: support@restin.co.

2. Information We Collect

• Identity & Account Data: Full name, verified mobile number, email address, and official national identification number or residence permit (required by Saudi regulatory guidelines for hosts and guest check-in verification).
• Reservation & Financial Records: Check-in/check-out dates, booked property identifiers, total rates, and transactional invoice histories.
• Host Listing Details: Title deed documentation, Ministry of Tourism hospitality permits, precise GPS coordinates, property photographs, and amenity disclosures.
• Technical & Diagnostics Data: Device model, OS version (iOS / Android), crash analytics via Firebase Crashlytics, and network performance telemetry to ensure application stability.

3. App Permissions & Intended Purposes

• Location Services (GPS): To showcase nearby accommodation properties, calculate travel proximity, and direct guests to their confirmed vacation unit.
• Camera & Photo Library: To enable hosts to capture and upload accommodation photographs and permits, and to facilitate identity verification.
• Push Notifications: To deliver immediate booking confirmations, access door codes, check-in instructions, and security alerts via APNs and FCM.

4. Secure Payment Gateways & BNPL Integrations

All financial transactions are processed through encrypted, PCI-DSS certified payment processors licensed by the Saudi Central Bank (SAMA), including Mada, Apple Pay, Visa, and Mastercard, alongside authorized BNPL installment providers Tamara and Tabby. RestIn never stores confidential card numbers or CVV codes on its servers.

5. Zero Data Sale & Third-Party Sharing

We never sell, rent, or monetize your personal data with third parties for advertising or commercial purposes. Personal data is shared strictly as necessary to fulfill confirmed reservations between guest and host, with certified cloud infrastructure providers, or in response to legally binding judicial orders under Saudi law.

6. Account & Data Deletion Rights (Apple Guideline 5.1.1(v))

Users have the right to request the complete deletion of their account and associated data at any time directly within the mobile applications via: Profile > Settings > Delete Account, by visiting our dedicated Account Deletion Request Page, or by contacting support@restin.co. All personal identifiers are permanently scrubbed within a maximum of 30 days.

7. Children's Privacy

RestIn applications and services are exclusively designed and intended for adults aged 18 and older. We do not knowingly solicit or collect personal data from minors.

8. Contact Our Data Protection Officer

• Email: support@restin.co
• Operating Entity: ALHAJZ ALMUTATAWIR OFFICE FOR INFORMATION TECHNOLOGY
• Headquarters: Riyadh, 2nd Industrial City, Bir Az Zubarah St, Building 4082, Kingdom of Saudi Arabia