Privacy Policy

Last updated: September 2, 2026

Sanadna Platform - Al-Takhi Wal-Wafa Fund

1. Introduction

The "Sanadna" platform (Al-Takhi Wal-Wafa Fund) respects the privacy of its users and is committed to protecting their personal data. This policy explains the types of data we collect, how we use and protect it, in compliance with the Personal Data Protection Law of the Kingdom of Saudi Arabia. This policy also describes how we access, use, store, and share Google user data when you sign in via your Google account.

2. Data We Collect

We collect the following categories of personal data when you use or interact with our platform:

• Basic data: full name, email, mobile number, national ID.
• Family data: family tree, kinship, social and financial status.
• Financial data: IBAN, subscription and contribution records, and transactions via the "Moyasar" gateway.
• Operational data: IP address, browser type, and usage logs for security and audit purposes.

3. Google Data and Sign-In Access

Sanadna allows sign-in via Google account (Google Sign-In). When you choose this option, our application accesses and uses your Google account data as follows:

Google data we access:

• Name: The name associated with your Google account, used as the initial name in your profile.
• Email: The Gmail address associated with your account, used as your user identifier and for communication.
• Profile picture: Your Google profile picture, displayed in your profile (if available).

Note: We do not request sensitive Google scopes such as contacts, documents, or email content. We limit access to the basic scopes (profile and email) necessary for account creation and sign-in.

How we use your Google data:

• Creating your platform account and enabling your login session.
• Identifying you and linking you to the family tree after administrative verification.
• Sending administrative notifications and correspondence to your email.

Storage of your Google data:

• We store your name, email, and profile picture in our secure database throughout your relationship with us.
• We do not store your Google password — authentication is handled entirely by Google, and we never access your credentials.

Limited Use:

In compliance with the Google API Services User Data Policy, we adhere to the "Limited Use" principle: we do not use the Google data we access (name, email, and profile picture) except to provide the platform services you have explicitly consented to (account creation, sign-in, and administrative communication). We do not sell, rent, or share your Google data with third parties for advertising or marketing purposes, nor do we use it for our own purposes beyond the scope for which we obtained your consent. If you stop using the platform, you may withdraw your consent at any time, which will result in the deletion of the Google data associated with your account.

4. How We Use Your Data

We use your data (including Google data) for the following purposes:

• Managing subscriptions, invoices, and account activation.
• Processing claims, applications, and social support programs.
• Communicating notifications, updates, and approvals.
• Issuing accounting entries, bank reconciliations, and payment matching.
• Improving services and ensuring platform security and fraud prevention.

5. Data Sharing and Disclosure

We do not sell your data or share it with third parties for marketing purposes. We may share your data (including Google data) only in the following cases:

• Trusted service providers (such as the "Moyasar" payment gateway and SMS providers) to deliver the service, under confidentiality agreements.
• Relevant government or judicial authorities when legally required or by court order.
• In the event of a fund restructuring or transfer of ownership, while maintaining data confidentiality.

We do not transfer your data outside the Kingdom of Saudi Arabia except where necessary to provide the service (e.g., cloud hosting providers) and within the controls of the Personal Data Protection Law.

6. Data Retention

We retain your data throughout your relationship with the platform. Upon account termination, personal data is deleted in accordance with statutory retention periods, while accounting and audit records are retained for the period required by law. You may request deletion of your data at any time by contacting us.

7. Data Protection

We apply technical and organizational security measures to protect your data, including encryption in transit and at rest, restricted access controls, audit logs, and periodic reviews. However, no system can be guaranteed 100% secure, and we continuously work to improve our safeguards.

8. Your Rights

Under the Personal Data Protection Law, you have the right to:

• Access and review your data.
• Correct inaccurate data or request its modification.
• Object to the processing of your data.
• Request deletion of your data within regulatory controls.
• Withdraw your consent to the use of Google data at any time (this will result in account termination).

To exercise any of these rights, contact us using the details below.

9. Children's Data

The platform is not directed at children under the age of 16, and we do not knowingly collect their data. Fund membership is restricted to adults, and minors may be included in the family tree only under the supervision of a guardian.

10. Cookies

The platform uses essential cookies to function properly and remember your session; they are not used to track you outside the platform.

11. Changes to This Policy

The platform may update this policy as needed, and any material change will be announced through the platform. Continued use of the service after changes constitutes acceptance of the updated policy.

12. Contact Us

For any inquiry regarding your data privacy or Google data:
Email: info@aww.org.sa
Phone: 920031160
Official Website: https://aww.org.sa