Privacy Policy

1. Information you provide

Account & profile — your email address, full name, preferred name, date of birth, gender, title, phone number, nationality, Saudi citizenship status, and residency status (e.g. Premium Residency, Investor Visa, Iqama, or GCC ID).

Identity documents — national ID, passport, or residency proof you upload when booking a consultation or verifying your identity. These are stored in a private file store that only you, your assigned consultant, and staff with a legitimate need can access.

Consultation & journey details — the type of transaction you're pursuing (buying, selling, renting, investing, or land acquisition), appointment bookings, consultation-request form answers, and support tickets you raise (including a WhatsApp number if you choose to give one).

2. Sensitive information

Some of what you share with us — your national ID or passport number, and details tied to your residency or citizenship status — is treated as sensitive personal data under Saudi Arabia's Personal Data Protection Law (PDPL). We apply extra access controls to it (see "How we protect your data" below) and only use it for identity verification and the regulatory purposes described in this policy.

3. Information collected automatically

We do not use analytics, advertising, or tracking SDKs in this app, and we do not collect your device location.

Standard technical information needed to keep you signed in and the app working, such as your session token, is handled by our authentication provider.

4. How we use your information

To create your account, match you with a consultant, and manage your buying, selling, renting, investment, or land acquisition journey end to end.

To schedule and remind you about appointments, and to review documents you upload for a transaction.

To respond to support tickets and requests you send our team.

To meet legal and regulatory record-keeping obligations that apply to licensed real estate consultancies in Saudi Arabia.

We do not sell your personal data, and we do not use it for third-party advertising.

5. Who we share it with

Your consultant and authorized staff, to deliver the service you've requested.

A banker or developer partner, but only for a specific journey you're part of, and only after an administrator has explicitly granted that partner access to that journey — partners never get blanket access to all clients.

Our infrastructure providers (database, file storage, and authentication), who process data on our behalf under contract and cannot use it for their own purposes.

Regulators or authorities, where we're legally required to disclose information.

6. International data transfers

Your data is processed and stored using cloud infrastructure that may be located outside Saudi Arabia. Where that happens, we rely on providers who apply contractual and technical safeguards consistent with the PDPL's requirements for transferring personal data outside the Kingdom.

7. How we protect your data

Access to your profile, documents, and journey data is enforced at the database level, so it's restricted to you and the specific staff or partners described above — not just hidden in the app's interface.

Uploaded documents are stored in a private file store; nothing you upload is publicly accessible.

If you use Face ID or Touch ID to lock the app, that preference and the biometric check itself stay on your device — we never receive or store your biometric data.

If a data breach puts your personal data at risk, we'll notify the relevant authority and you, where required by law, without undue delay.

8. Your choices

Notifications — turn push and email notifications on or off from Profile > Notification Preferences.

Language — choose your app and communication language from Profile > Language Preferences.

Documents — remove documents you've uploaded at any time from the relevant journey or ticket.

Corrections & deletion — to correct fixed profile details (name, title, date of birth) or request deletion of your account and data, raise a support ticket and our team will assist you.

9. Data retention

We keep your data while your account is active and for as long as needed to provide the service. We may retain certain records for longer where Saudi law requires it for licensed real estate transactions.

10. Children's privacy

Our services are intended for adults entering into real estate transactions. The app is not directed at children, and we don't knowingly collect personal data from anyone under 18. If you believe a child has provided us data, contact us and we'll delete it.

11. Your rights

Subject to the Saudi Personal Data Protection Law (PDPL), you have the right to access, correct, or request deletion of your personal data, and to withdraw consent where processing relies on it. Contact us using the details below to exercise these rights.

If you're not satisfied with how we've handled your request, you can lodge a complaint with the Saudi Data & AI Authority (SDAIA), the regulator responsible for enforcing the PDPL.

12. Changes to this policy

We'll update this page if our practices change, and update the date at the top.

13. Contact us

Questions about this policy or your data? Email requests@armsrealestates.com, call +966 55 621 2629, or raise a ticket from Profile > Support.