Privacy Policy – MAND VCARD
Effective Date: September 1, 2025 (Riyadh Time)
1) Introduction and Scope
This Privacy Policy applies to all MAND VCARD services available through:
- The website: mandvcard.com
- The mobile application (iOS & Android)
2) Infrastructure in Saudi Arabia
- All user data is processed and stored on servers located within the Kingdom of Saudi Arabia, using local cloud solutions in compliance with SDAIA and the National Cybersecurity Authority (NCA).
- Data is not transferred outside Saudi Arabia except when technically necessary, in limited cases, and with appropriate safeguards.
3) Information We Collect
- Account Information: name, email, mobile number, profile photo, social links, vCard content.
- Transaction Data: orders, invoices, payment status, shipping details.
- Usage Data: IP address, device/browser type, visited pages or features, duration of use.
- Cookies & Analytics Tools: to personalize and improve your experience on the website and app.
4) Mobile Application Privacy
When using the MAND VCARD mobile application (iOS or Android), certain permissions may be requested to enable specific features and improve your overall experience. These permissions are used strictly for functional purposes and are never collected, tracked, or shared for any unrelated or background activity.
Permissions and Their Purpose
- Camera / Gallery:
- The app uses the camera only for the following functions:
- Scanning QR or NFC codes to add or share your digital card (vCard).
- Taking a personal photo or uploading a business logo to personalize your digital card.
- Capturing images for profile customization or verification (if applicable).
- Photos or video content accessed through the camera are not stored or transmitted to our servers unless you explicitly upload them to your account.
- The app does not record, monitor, or analyze camera activity in the background.
- The camera permission is user-controlled — you may disable it anytime from your device settings, although certain visual features (like QR scanning) will become unavailable.
- NFC (Near Field Communication):
- Used only to read or share your MAND VCARD by tapping your device near an NFC-enabled card or sticker.
- No personal data is collected or stored through NFC interactions.
- Contacts (Optional):
- Used only to help you share your digital card easily with others via messaging or email applications.
- Your contact list is never copied, stored, or uploaded to our servers.
- Location (Optional):
- Used to improve experience in features like delivery options, nearby offers, or local insights.
- Location access is requested only when needed and may be denied without affecting the main functions of the app.
- Notifications:
- We may send push notifications for account activity, product updates, offers, or important service alerts.
- You can manage or disable these notifications anytime in your device settings.
Permission Control
- You can manage, modify, or revoke any permission through your device’s settings at any time.
- Disabling certain permissions may limit some app functionalities but will not prevent access to your MAND VCARD account or essential services.
The MAND VCARD app is fully compliant with the Saudi Personal Data Protection Law (PDPL). All permission-based data usage is limited to operating and enhancing the service, ensuring your information remains private and secure.
5) Payments and Billing
- Payments are processed through licensed payment providers (Mada, Visa, MasterCard, Apple Pay, etc.).
- We do not store full card details on our servers.
- Transaction and invoice data is retained for at least 5 years in compliance with Saudi tax regulations.
6) How We Use Your Data
- Operating and maintaining the website and app.
- Managing accounts, subscriptions, orders, payments, and deliveries.
- Providing technical support and customer service.
- Sending notifications and alerts.
- Improving performance through analytics (Analytics SDKs).
- Marketing (only with your explicit consent).
- Compliance with legal obligations.
7) Data Sharing
- We do not sell personal data.
- Data may be shared with:
- Local service providers (payment, shipping, hosting, analytics).
- Regulatory authorities when legally required.
8) Data Security
- We use reasonable technical and organizational safeguards to protect your data.
- Keeping data within Saudi Arabia enhances security and reliability.
- Users are encouraged to keep their passwords confidential and secure their devices.
9) Data Retention
- Data is kept only as long as necessary to provide services or comply with legal requirements.
- Once no longer needed, data is deleted or anonymized securely.
10) Your Rights
Under Saudi Arabia’s Personal Data Protection Law (PDPL), you have the right to:
- Request access to your data.
- Correct or update information.
- Request deletion of your data (subject to legal limits).
- Withdraw consent for processing.
11) Complaints
You may first contact us at:
📧 supportvcard@mand.sa
If unresolved, you may escalate your complaint to the competent authority in Saudi Arabia (SDAIA).
12) Children’s Data
Our services are not directed to individuals under 18. If we learn of such data collection, it will be deleted promptly.
13) Changes to this Policy
We may update this Privacy Policy periodically. Updates will be posted here with a revised Effective Date.
