Rahaal ("Rahaal", "we", "us") operates the Rahaal mobile application (package name: com.rahaal.app) and the service at https://rahaal-sa.com. Rahaal is a freight and delivery marketplace that connects customers who need goods transported with captains (drivers) who own or operate trucks and other vehicles.
This policy explains what personal data the app collects, why we collect it, who we share it with, and the choices you have. It applies to both customer accounts and captain accounts. By creating an account and using Rahaal, you agree to the practices described here.
Contact for privacy questions and requests: Email: support@rahaal-sa.com Website: https://rahaal-sa.com
All users (customers and captains):
Captains additionally provide, as part of onboarding and vehicle verification:
These documents are required so that we can verify that a captain is legally permitted to drive and to transport goods. They are visible only to Rahaal's administrative staff and are not shown to customers.
When you register, sign in on a new device, or reset your password, we send a one-time verification code (OTP) by SMS or WhatsApp to the phone number you provided. We store the code temporarily, together with the date your number was verified, in order to complete the verification.
When a delivery is requested or carried out, we collect and store:
address, and map coordinates you select
and any notes you add
confirmation
Customers: with your permission, the app reads your device's location so that the map can centre on where you are and so you can choose pickup and drop-off points more easily. You can also select points manually instead. Customer location is collected only while the app is open.
Captains: with your permission, the app collects your device's precise location, INCLUDING WHILE THE APP IS CLOSED OR NOT IN USE, but only while you are assigned to an active delivery. This is used to show the customer where their shipment is and to update the order's current position. While this is running, Android displays a persistent notification indicating that location is being used. Background location collection stops when the delivery is completed or cancelled. If you deny or revoke the location permission, live tracking will not work, and you may not be able to accept or complete deliveries.
We do not collect location in the background from customer accounts, and we do not track captains when they have no active delivery.
for your device, so we can deliver notifications about orders, offers, and delivery status
IP address, request time, and the type of request, used for security, abuse prevention, and troubleshooting
Where the app offers in-app payment, card payments are processed by Moyasar, a licensed payment service provider. Card numbers, expiry dates, and security codes are entered into Moyasar's payment interface and are sent directly to Moyasar. Rahaal does not receive or store full card details. We store only the outcome of a payment (such as amount, status, and reference) so that it can be linked to your order.
We do not collect your email address, contacts, calendar, call logs, SMS messages, browsing history, health data, or biometric data. We do not use advertising identifiers, and we do not run advertising or third-party analytics or tracking SDKs in the app.
We use the information described above to:
drop-off
enforce rate limits on sensitive operations such as login and password reset
competent authorities
When a captain accepts your order, the information necessary to carry out the delivery is shared between the two parties. The captain sees the pickup and drop-off locations, the order details, and the customer's name and contact number. The customer sees the captain's name, profile photo, vehicle details, contact number, rating, and live location during the active delivery. Captains' identity and vehicle documents are never shown to customers.
We share limited data with the providers we rely on to run the service:
converting coordinates into addresses. Location coordinates and search terms are sent to Google.
device token and the notification content are processed by Firebase.
WhatsApp verification codes. Your phone number and the code are processed by Authentica.
files on servers used to operate rahaal-sa.com.
These providers may process data only for the purposes described here. Their own privacy policies apply to the data they receive.
We may disclose information where we are required to do so by applicable law or a valid order from a court, regulator, or law enforcement body, or where disclosure is necessary to protect the rights, safety, or property of Rahaal, our users, or the public — for example, in the investigation of an accident, theft, or fraud.
If Rahaal is involved in a merger, acquisition, or transfer of assets, user information may be transferred as part of that transaction. We will notify users before their information becomes subject to a materially different privacy policy.
We do not sell your personal data. We do not share your personal data with advertisers or data brokers.
Your data is stored on servers operated for Rahaal and by the service providers listed above; some of these providers process data outside the Kingdom of Saudi Arabia. Where data is transferred abroad, we do so only as necessary to provide the service.
We protect your data using measures including encrypted (HTTPS) transport between the app and our servers, one-way hashing of passwords, token based authentication with tokens that can be revoked when you log out, rate limiting on login, registration, verification, and password reset, and access controls that restrict administrative access to authorised staff.
No method of transmission or storage is completely secure. You are responsible for keeping your password and your device secure, and for signing out on devices you no longer use.
We keep your account information for as long as your account is active. Order records, including pickup and drop-off details, delivery confirmations, ratings, and payment records, are retained after an order is completed so that we can resolve disputes, provide support, and comply with accounting, tax, and legal record-keeping obligations.
Live tracking positions are kept as part of the order record and are not retained as a continuous location history outside the deliveries you took part in. Verification codes are short-lived and are cleared once used or expired.
When you request deletion, we remove or anonymise your personal data except where we are required to retain certain records by law, or where they are needed to complete an open order, resolve a dispute, or prevent fraud.
You may:
photo from within the app
device settings
Permissions: you can grant or revoke location, camera, photo, and notification permissions at any time in Android Settings > Apps > Rahaal > Permissions. Revoking location access will prevent live tracking, and captains will not be able to complete deliveries without it.
Account deletion: to delete your account, send a request from your registered phone number or account to support@rahaal-sa.com with the subject "Account deletion". We will verify your identity and process the request within 30 days. Any open orders must be completed or cancelled first. Records we are legally required to keep, such as transaction records, will be retained for the applicable statutory period and then deleted.
Residents of Saudi Arabia have rights under the Personal Data Protection Law (PDPL), including the right to be informed, to access, to request correction, and to request destruction of their personal data. Requests can be sent to the contact address above.
Rahaal is not intended for children. The service is available only to individuals aged 18 or over, and captains must additionally hold a valid driving licence. We do not knowingly collect personal data from children. If we learn that we have collected data from a child, we will delete it.
We may update this policy from time to time. The current version is always available in the app and at https://rahaal-sa.com. When changes are material, we will notify you in the app or by notification before they take effect. The date at the top of this policy shows when it was last revised. Continued use of Rahaal after a change takes effect means you accept the updated policy.
If you have questions about this policy or wish to exercise any of your rights, contact us at:
Rahaal (رِحال) Email: support@rahaal-sa.com Website: https://rahaal-sa.com