Privacy Policy
We respect your privacy and are committed to protecting your personal data
Privacy Policy for Qout Spot
Last Updated: February 26, 2026
This Privacy Policy describes how Qout Spot ("we," "us," or "our") collects, uses, and shares your personal data when you use the Qout Spot mobile application and website (the "Platform"). This policy is available online at https://qoutspot.com/privacy.
This policy is designed to comply with the Saudi Arabian Personal Data Protection Law (PDPL) and other relevant regulations.
1. Data Controller
For the purposes of the PDPL, the data controller is:
Qout Spot Jeddah, Saudi Arabia [email protected] +966 55 068 2062
2. Personal Data We Collect
We collect the following types of personal data:
| Data Category | Examples | Purpose of Collection |
|---|---|---|
| Identity Data | Name (optional), username | Account creation, personalization |
| Contact Data | Phone number | Account verification (OTP), communication |
| Location Data | GPS coordinates (latitude/longitude) | To show nearby food trucks, provide directions |
| Technical Data | IP address, device type, operating system, device ID, push notification tokens | Platform security, analytics, push notifications |
| Usage Data | Features used, pages visited, time spent on app | To improve the user experience |
| User-Generated Content | Reviews, ratings, review photos, profile picture | To display on the Platform |
| Favorites Data | List of saved or favorited food trucks | To personalize your experience |
3. How We Use Your Personal Data
We use your personal data for the following purposes, with a clear legal basis under the PDPL:
| Purpose | Legal Basis |
|---|---|
| To Provide and Manage Your Account | Contractual Necessity |
| To Personalize Your Experience | Legitimate Interest |
| To Show You Nearby Vendors | Consent (for location data) |
| To Communicate With You | Contractual Necessity / Legitimate Interest |
| To Send Push Notifications | Consent |
| To Improve Our Platform | Legitimate Interest |
| To Ensure Security and Prevent Fraud | Legal Obligation / Legitimate Interest |
| To Comply with Legal Obligations | Legal Obligation |
4. Data Sharing and Disclosure
We do not sell your personal data. We may share your data with the following parties:
- Vendors: We may share your username or first name with Vendors when you leave a review.
- Service Providers: We use third-party service providers for services like cloud hosting, OTP verification (Authentica.sa), and push notifications (Expo). These providers are contractually obligated to protect your data.
- Legal Authorities: We may disclose your data if required by law or in response to a valid legal request from Saudi Arabian authorities.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity.
5. Your Rights Under the PDPL
As a data subject in Saudi Arabia, you have the following rights:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request to correct any inaccurate or incomplete data.
- Right to Erasure: You can request that we delete your personal data, subject to certain legal exceptions.
- Right to Withdraw Consent: You can withdraw your consent for data processing at any time (e.g., by turning off location services).
- Right to Data Portability: You can request to receive your data in a structured, machine-readable format.
To exercise any of these rights, please contact us at [email protected].
6. Data Security
We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, use, or disclosure. This includes:
- Data encryption in transit and at rest
- Access controls and authentication
- Regular security audits
- Data breach response plan
In the event of a data breach that poses a high risk to your rights, we will notify you and the Saudi Data & AI Authority (SDAIA) in accordance with the PDPL.
7. Data Retention
We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law. Account data is retained as long as your account is active. If you delete your account, we will securely delete or anonymize your personal data within 30 days, unless we are required by law to retain it for a longer period.
8. International Data Transfers
Your personal data may be processed and stored in servers located outside of Saudi Arabia. We will ensure that any such transfers are conducted in compliance with the PDPL, with appropriate safeguards in place to protect your data.
9. Children’s Privacy
Our Platform is not intended for children under the age of 13. For users between the ages of 13 and 18, use of the Platform must be with the consent and supervision of a parent or legal guardian. We do not knowingly collect personal data from children under 13 without parental consent.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by email or through the Platform.
11. Contact Us
If you have any questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer at:
Qout Spot Attn: Data Protection Officer Jeddah, Saudi Arabia [email protected]
Disclaimer: This is a template and not legal advice. You should consult with a qualified legal professional in Saudi Arabia to ensure this policy is appropriate for your specific business and complies with all applicable laws.
Have questions about our Privacy Policy?
Contact Us