Privacy Policy for Qitae Application and Platform

1. Privacy & Information Confidentiality

Mumken Technology processes personal data on the following legal bases in accordance with the Personal Data Protection Law:

•     Consent — where the user has provided explicit consent at the point of data collection

•     Contractual necessity — where processing is necessary to provide the services requested by the user

•     Legal obligation — where processing is required to comply with an applicable law in the Kingdom or to implement a regulatory or judicial order

•     Legitimate interest — where processing is necessary to achieve a legitimate interest of the platform, provided it does not conflict with applicable regulations, does not negatively affect the rights or interests of the user, falls within the user's reasonable expectations, does not involve sensitive data, and an impact assessment has been conducted prior to processing

Mumken Technology is committed to respecting the privacy of its customers and protecting their personal data. The company confirms it does not share customer information with any third party except in cases permitted by law.

2. Data Collection Principle

The Qitae platform collects only the data necessary to operate the application, provide its services, and comply with applicable regulations. The categories of data we collect, the purposes of collection, and the legal basis for processing each category are detailed in the sections below. We do not collect any personal data beyond what is disclosed in this Privacy Policy.

3. IP Address & Technical Data

When using the Qitae application or website, hosting servers may automatically collect certain technical data for security and operational purposes, including: your device's IP address, operating system type (iOS or Android), browser type, date and time of visit, and the source link through which the application was accessed. This information is not used to directly identify the user.

4. Guest User Data & Session Tracking

When accessing Qitae without a registered account, the platform processes limited technical and usage data necessary to operate the application, improve platform performance, understand content engagement, and support platform features including content recommendations and sponsored placements. Where required under applicable regulations, your continued use of the platform constitutes consent to the processing described below.

Essential (always active): A temporary anonymous session identifier is automatically generated on your device solely to preserve your browsing context during your active session, including your last viewed page, content interactions, and navigation state. This data is essential for the application to function and cannot be disabled.

Analytics: The following technical data is collected to understand how users interact with the platform and to improve its performance. This data is processed with the assistance of third-party analytics service providers who are contractually bound to protect your data in accordance with applicable regulations and who do not use it for any other purpose:

•     Device type and operating system (Android or iOS)

•     Operating system version

•     Aggregate usage statistics (such as content views and feature interaction rates)

Reports: Crash and error data is collected to help us identify and fix technical issues. This data is used solely to improve the stability and performance of the application.

None of the above data can be used to identify you personally. It is never linked to any registered account and is permanently and automatically deleted upon uninstallation of the application or expiry of your session, whichever occurs first. This processing is conducted in accordance with Article 10(6) of the Personal Data Protection Law, as the data is not stored in any form that enables direct or indirect identification of the user.

5. Surveys & External Links

The Qitae application or website may include links to other websites managed by third parties not under our supervision. We are not responsible for the content of those websites or their data collection practices.

6. Your Rights & How to Exercise Them

In accordance with Article 4 of the Personal Data Protection Law, you have the following rights:

•     The right to know how your personal data is collected, the legal basis, and the purpose of processing

•     The right to access your personal data

•     The right to request a copy of your personal data in a clear and readable format

•     The right to request correction, completion, or updating of your personal data

•     The right to request deletion of your personal data upon occurrence of one of the legally stipulated cases

To exercise any of these rights, please contact our support team through either of the following:

•     Email: support@mumken.sa

•     In-app: Through the support chat available within the Qitae platform

Requests will be handled within a period not exceeding thirty (30) days, which may be extended for an equal period where necessary, with notification to that effect. This timeframe is required by applicable regulations.

7. Indemnity

The user acknowledges that they use the Qitae platform and application on their own responsibility, and that Mumken Technology and any of its employees, agents, or affiliates bear no responsibility for any damages or losses resulting from use of the platform, to the extent permitted by applicable law in the Kingdom of Saudi Arabia.

8. Disclosure of Information

Mumken Technology is committed to maintaining the privacy and confidentiality of all personal data collected from users, and processing it in accordance with the provisions of the Personal Data Protection Law and its Implementing Regulations.

Personal data will not be disclosed to any third party except in the following cases:

•     If disclosure is required by a regulation or judicial order issued by a competent authority within the Kingdom

•     If disclosure is necessary to protect the company's rights or property before judicial or regulatory authorities

•     If disclosure is required or permitted by law to achieve a legitimate interest, provided this does not result in any harm to the rights or interests of the user

In the event of any data breach or unauthorized access to personal data, Mumken Technology will notify the Competent Authority without undue delay, and will notify affected users where required, in accordance with the provisions of the Personal Data Protection Law and its Implementing Regulations.

9. Data Submission

The Qitae platform allows users to submit their personal information to Mumken Technology in various ways. Personal information is collected and processed only to achieve the purposes for which it was collected.

Personal data is retained only for as long as necessary to fulfill the purpose for which it was collected. Upon account deletion, users may choose between two options:

•     Standard Deactivation: The account is deactivated and personal data is retained for a period of three (3) months to allow reactivation. If the account is not reactivated within this period, all personal data is permanently and automatically destroyed.

•     Full Deletion: The user has the right to request deletion of their personal data at any time. The request will be fulfilled without undue delay, subject to any applicable legal, regulatory, or technical retention requirements — including the completion of routine backup rotation cycles, the retention of records required for fraud prevention or security audit purposes for a limited period, and any retention required by financial, tax, or judicial obligations. Any data retained under these exceptions will be securely destroyed upon expiry of the applicable retention period.

In both cases, data will be retained beyond the above periods only where required by applicable law or a judicial order, in which case it will be destroyed upon expiry of that legally required period.

Personal data of registered users collected through the Qitae platform is stored and processed primarily within the Kingdom of Saudi Arabia on infrastructure compliant with applicable regulations. Where cross-border processing or transfer of personal data is required for specific operational purposes — including the use of internationally recognized analytics, crash reporting, or cloud infrastructure providers — such transfers will be conducted in accordance with Article 29 of the Personal Data Protection Law and its Implementing Regulations, will be limited to the minimum data necessary for the stated purpose, and shall not prejudice national security or the vital interests of the Kingdom. Aggregated, non-identifying technical data processed under the public access model (Section 4) is not subject to this restriction, as it does not constitute personal data within the meaning of the Law.

10. Contact Us

All data submitted by you will be treated as confidential and used only to respond to your inquiries, observations, or requests.

11. Disclosure to Third Parties

Mumken Technology does not sell, rent, share, or disclose any personal data to any third party outside the Qitae application and platform, unless this is with the express consent of the user or pursuant to a legal obligation or judicial order issued by a competent authority within the Kingdom of Saudi Arabia.

The engagement of service providers acting on behalf of Mumken Technology under data processing agreements (such as cloud infrastructure, analytics, and crash reporting providers) does not constitute disclosure within the meaning of this section, as such providers are bound to protect the data in accordance with the company's instructions and applicable regulations.

12. Amendments to Privacy Policy

Mumken Technology reserves the right to amend this Privacy Policy at any time in accordance with applicable regulations in the Kingdom of Saudi Arabia. Any updates will be published on this page. For minor or administrative changes, continued use of the platform following publication constitutes acceptance. For material changes — including any change to the type of data collected, the purpose of processing, or data sharing practices — users will be notified of the change through appropriate means. Where required by the Personal Data Protection Law, explicit consent will be sought before processing continues under the new terms.

13. Intellectual Property

All content on the Qitae platform, including files, texts, videos, images, logos, and other materials, is the exclusive property of Mumken Technology and is protected by law. No content may be reproduced, distributed, or used commercially without prior written permission from the company.

14. Governing Law

This policy is subject to the regulations and laws applicable in the Kingdom of Saudi Arabia. In the event of any dispute, the laws applicable in the Kingdom of Saudi Arabia shall apply, and jurisdictional competence shall be with the competent courts in Riyadh.