Privacy Policy

ZAF (zafapps.com)

Effective date:: 31 July 2026
Last updated:: 31 July 2026

This Privacy Policy explains how ZAF (“ZAF”, “we”, “us”) collects, uses, discloses, and protects personal data in connection with our macOS and iOS applications and our website at zafapps.com (together, the “Services”).

ZAF is based in Riyadh, Kingdom of Saudi Arabia, and acts as the Data Controller for the personal data described below. We process personal data in accordance with the Personal Data Protection Law, issued by Royal Decree No. (M/19) dated 09/02/1443H, as amended by Royal Decree No. (M/148) dated 05/09/1444H (the “PDPL”), and its Implementing Regulation.

1.Our Privacy Commitment in One Line

We do not require accounts, we do not sell personal data, and we do not use advertising or cross-app tracking. The only data we handle is the minimum needed to keep our apps stable and to answer your support requests.

2.What We Collect

2.1Diagnostics & Crash Data

When an app crashes or encounters an error, we may receive a technical report containing:

device model and operating system version
app version and build number
the technical state of the app at the time of the failure (stack trace)
a non-identifying, randomly generated device or installation identifier

2.2Usage Analytics

We may receive aggregated, non-identifying measurements such as feature usage counts, session counts, and app launches. These are reported to us in aggregate and are not used to identify you.

2.3Support Correspondence

If you contact us for support, or send the contact form on zafapps.com, we receive your name, your email address, an optional phone number, and whatever information you choose to include in your message.

2.4Purchase Information

Purchases and subscriptions are processed by Apple, not by ZAF. Apple is the seller of record. We receive only aggregated sales and financial reports from Apple, which do not identify individual customers.

2.5Abuse Prevention

When you submit the contact form, we and our infrastructure providers process technical signals — your IP address, basic device and browser characteristics, and how long the form took to complete — solely to tell a person apart from an automated script. We do not use these signals to profile you or to build a record of your visits, and ZAF does not store them.

3.What We Do Not Collect

We do not require or offer user accounts, names, or passwords.
We do not collect precise or approximate location data.
We do not access your contacts, photos, messages, or files except as needed to perform a function you explicitly initiate on your device.
We do not use advertising identifiers, ad networks, or cross-app / cross-site tracking.
We do not sell, rent, or trade personal data to anyone, for any purpose.

4.Why We Process This Data

Purpose	Lawful basis under the PDPL
Diagnosing crashes and fixing defects	Legitimate interest of ZAF in maintaining a functioning product
Understanding aggregate feature usage to improve the apps	Legitimate interest / your consent where the platform requires it
Responding to your support requests	Performance of a prior agreement to which you are a party
Keeping the contact form available and free of automated abuse	Legitimate interest of ZAF in protecting the service and the confidentiality of correspondence
Meeting legal, regulatory, and tax obligations	Compliance with an applicable legal requirement

Where Apple asks you to opt in to sharing analytics with developers, that sharing takes place only if you consent, and you may withdraw that consent at any time in your device settings.

6.Transfer of Personal Data Outside the Kingdom

Some of the service providers listed above process data on infrastructure located outside the Kingdom of Saudi Arabia. Where this occurs, we carry out such transfers in accordance with Article 29 of the PDPL and the Regulation on Personal Data Transfer outside the Kingdom, limiting the transfer to the minimum data necessary, ensuring it does not prejudice national security or the vital interests of the Kingdom, and applying appropriate safeguards.

7.How Long We Keep Data

We keep personal data only for as long as the purpose of collection requires:

Crash and diagnostic reports: retained while the defect is being investigated and resolved, and deleted once no longer needed.
Support correspondence: retained while your request is open and for a reasonable period afterwards to handle follow-up.
Abuse-prevention signals: held briefly by our hosting provider for operational purposes and not retained by ZAF.
Records we are legally required to keep (such as financial records): retained for the period required by the applicable law.

When personal data is no longer needed, we destroy it, unless retention is required by law.

8.Your Rights

Under Article 4 of the PDPL, you have the right to:

Be informed — to know the lawful basis and the purpose for which your personal data is collected.
Access — to obtain access to your personal data held by us.
Obtain a copy — to receive your personal data in a readable and clear format.
Request correction — to have inaccurate, incomplete, or outdated data corrected or updated.
Request destruction — to have your personal data destroyed where it is no longer needed, subject to the exceptions set out in the PDPL.

Separately, under Article 5(2) of the PDPL, where processing is based on your consent you may withdraw that consent at any time.

To exercise any of these rights, use the contact form at https://zafapps.com/en/contact and choose Privacy Inquiry. We will verify your request and respond as promptly as possible, and in any event within the period prescribed by the PDPL and its Implementing Regulation. Exercising these rights is free of charge.

9.Security

We apply organisational and technical measures appropriate to the sensitivity of the data, including encrypted transport, restricted access on a need-to-know basis, and keeping data on our devices and systems under our control. No system can be guaranteed absolutely secure, but we work to keep the amount of personal data we hold as small as possible, which is the strongest protection available.

10.Personal Data Breaches

If leakage, damage, unlawful disclosure of, or unauthorised access to personal data occurs in a way that would cause harm to the data subject or conflict with their rights or interests, we will notify the Saudi Data and Artificial Intelligence Authority (SDAIA) through the National Data Governance Platform, and will notify affected individuals, in accordance with the PDPL and its Implementing Regulation.

11.Children

Our apps are not directed at children under the age at which parental consent is required under applicable law, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, contact us and we will delete it.

12.Complaints

If you believe we have handled your personal data improperly, please contact us first through https://zafapps.com/en/contact so we can resolve it. You also have the right to lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA) through the National Data Governance Platform at dgp.sdaia.gov.sa.

13.Changes to This Policy

We may update this Policy from time to time. The “Last updated” date at the top reflects the most recent version. Where a change materially affects how we handle your personal data, we will notify you within the app or on our website before it takes effect.

14.Contact Us

ZAF: Riyadh, Kingdom of Saudi Arabia
Contact: https://zafapps.com/en/contact
Web: https://zafapps.com
X: https://x.com/zafappsSA

This document is published in Arabic and English. In the event of any conflict or difference in interpretation, the Arabic version prevails.