Privacy Policy

Last updated: 29 October 2026

This policy explains how the Foglal apps (the customer app and the provider app) collect, use and protect your personal data, in line with Qatar's Personal Data Privacy Protection Law No. (13) of 2016. Foglal is operated by K M X Labs for Software Publishing, a sole establishment registered in the State of Qatar under Commercial Registration No. 246584 (Doha, Qatar). It is the party responsible for processing your data.

We ask for your explicit consent to this policy when you create an account. You can withdraw it at any time by deleting your account or contacting us.

1. Data we collect from customers

• Account data: your name, phone number (verified via a one-time passcode sent by SMS), email and password if you choose email sign-in, and your preferred language.
• Booking data: providers, services, staff, appointment times, notes, and check-in and cancellation records.
• Home-service address: when you choose home service we store the address you enter and its map location (coordinates), and any addresses you save to your account.
• Approximate location: your current location (with your permission) to sort providers by nearest. This is computed on your device and not stored on our servers.
• Account status: a record of warnings from late cancellations or no-shows, and any suspension.
• Technical data: basic device information used to run and improve the service.
• Push token: a device notification identifier, used only to send booking alerts and deleted when you sign out.

2. Data we collect from providers

Owner and account details (name, phone, email), business details and commercial registration, staff names and schedules, services and prices, and location and home-service areas.

3. How we use data

• To provide the service, authenticate users and process bookings.
• To show providers nearest to you and deliver home service to your address.
• To apply the cancellation policy and protect the platform from abuse.
• To communicate, provide support and send booking notifications.
• To comply with legal obligations.

We do not use your data for marketing without your separate consent.

4. Data sharing and processors

• The provider: receives your booking details (name, phone, service, time) and, for home service, your address and its location. Your private check-in code is never shared with the provider.
• Supabase: database, authentication and storage, on servers in Germany (EU).
• Google Cloud: the server that sends verification codes, in the Doha region.
• Ooredoo: to deliver verification code SMS messages.
• Firebase Cloud Messaging (Google) and Apple Push Notification service: to deliver booking notifications to your device.
• Authorities: where required by a lawful request or legal obligation.

We do not sell your personal data.

5. Transfers outside Qatar

Some of your data is stored and processed outside the State of Qatar, mainly on Supabase servers in Germany and through Google's and Apple's notification services. We choose providers that apply appropriate safeguards and take the measures required by Qatari law to protect your data when it is transferred.

6. Retention and account deletion

We keep your data while your account is active. You can delete your account from within the app at any time; we then remove your profile, personal data and saved addresses, and anonymise booking records kept for provider accounting (your name is replaced and your phone number removed), except where the law requires us to keep data.

If you are a provider (a salon or home-based business), you can request account deletion from within the app under Settings. We then remove your business profile, services, team and booking records; requests are processed within 30 days, except where the law requires us to retain data for accounting or compliance.

7. Your rights

You have the right to access, correct and delete your data, to withdraw your consent, and to object to processing. Email support@foglal.app and we will respond within 30 days. You may also complain to the competent personal data protection authority in the State of Qatar.

8. Security

We use encryption in transit, strict row-level access controls, and encrypted storage for secret keys. If a breach affects your data, we will notify you and the competent authority as required by law.

9. Age

The service is intended for adults (18+) and we do not knowingly collect data from children.

10. Language and changes

If the Arabic and English versions differ, the Arabic text prevails. We may update this policy and will post changes on this page with the date above updated, and notify you in the app of any material change.

11. Contact

support@foglal.app