Your privacy matters to us. This policy explains what data we collect, why, and how we protect it. LAYL complies with the Saudi Personal Data Protection Law (PDPL).

1. Data We Collect

• Account data: phone number, name, email (optional), date of birth.
• Usage data: venues you view, events you book, reviews.
• Location data: with permission — to suggest nearby venues.
• Payment data: handled by licensed providers (Moyasar, Apple Pay); we never store card numbers.
• Social media data: when you connect accounts (e.g., TikTok, Instagram) for publishing, we store an encrypted token scoped to the permissions you granted.

2. How We Use Your Data

• Provide and improve LAYL services.
• Personalize venue and event recommendations.
• Send booking notifications, offers, and loyalty program updates (you can opt out anytime).
• Prevent fraud and protect the platform.
• Comply with Saudi regulations (PDPL, SAMA, ZATCA).

3. Who We Share With

• Partners (venues, events): minimum data required to fulfill your booking (name, phone).
• Service providers: payment processors, cloud infrastructure, email/SMS — all bound by data confidentiality agreements.
• Government authorities: only on lawful request.
• We never sell your data to any third party for marketing purposes.

4. Your Rights (PDPL)

• Right to access your data.
• Right to correction or deletion.
• Right to withdraw consent at any time.
• Right to data portability.
• Right to object to processing.

To exercise any right, email privacy@layl-app.com. We respond within 30 days maximum.

5. Retention

We retain your data while your account is active, plus 2 years after closure (to comply with accounting and tax regulations). After that, it is securely deleted or anonymized.

6. Security

We use TLS encryption for all communications, encryption of tokens and sensitive data at rest, and periodic security audits. No platform is 100% secure; please safeguard your credentials.

7. Cookies

We use technical cookies essential to operation, and analytics cookies to understand app usage. You can disable them in browser settings, but some features may be affected.

8. Children

LAYL is intended for adults 18+. We do not knowingly collect data from minors. If you discover a minor has registered, contact us immediately to delete the data.

9. Updates

We may update this policy. Material changes will be communicated via the app or email at least 30 days before they take effect.

10. Contact

For privacy questions: privacy@layl-app.com

Company: Takafu Technologies, Riyadh, Kingdom of Saudi Arabia.