Version 1.15 · Effective date: 26 October 2026
TWAZ Privacy Policy
Archived version. This is version 1.15 of the Privacy Policy, replaced by version 1.16 on 27 October 2026. Read the current policy · Archive
1. About this policy
This policy explains how TWAZ (تواز | TWAZ) processes personal data when you use the app, its services and its websites. TWAZ is responsible for this processing, and you can contact us at a@twaz.org.
2. Data we process
Many TWAZ features work without an account. Your private data is processed on your device, and we do not receive it unless you use a feature that requires sharing it with us or with others. Bank messages and TWAZ AI questions are processed on your device, and their text is not sent to us.
When you use connected services, we process, depending on the feature:
- Account data and preferences: sign-in, profile and account-linked preference data, and the necessary records of changes.
- Shared content and relationships: what you choose to share, the people taking part, and friendships and invitations.
- Support, security and operational data: your messages to us, reports, account, installation and notification identifiers, and the app, network and technical records needed.
We collect this data from you, from your device and sign-in provider, or from your interactions with the services and other users. Some data is required for the feature you request; providing other data is optional.
3. Purposes of processing
We use data to operate the services, keep your account and preferences, carry out sharing and notifications, provide support, protect users and prevent misuse, and meet our legal obligations.
Processing is based on our agreement with you, your consent, our legitimate interests without prejudice to your rights, or our legal obligations, as applicable. You can withdraw your consent where it is the basis of processing.
We do not sell your data, do not use third-party advertising or analytics tools, and do not track you across other companies’ apps and websites.
4. Sharing and service providers
Other users see your profile and shared content according to their relationship with you, sharing permissions and visibility settings. Search by username is on for new profiles, and you can turn it off in the app.
We use providers for hosting, operations, security and support, and platform providers such as Apple. We may disclose data as needed to comply with the law or protect rights and safety, or if the services pass to another entity with their protection continuing.
Access by authorised staff is limited to what their duties require.
5. Storage and processing outside the Kingdom
Account and connected-service data is stored with our service providers and may be processed outside Saudi Arabia in accordance with legal requirements.
Sync and backup through iCloud are optional; their data is encrypted before it is uploaded to your own account, and we do not hold the keys to read it. Apple’s services, and providers you deal with directly, are subject to their own policies.
6. Retention and deletion
We keep data as long as its purposes require or for the periods the law sets, then delete it or remove what identifies you.
You can delete your account in the app. This may first require handing over the management of shared spaces. Your profile, preferences and relationships are deleted, as are the tasks and countdowns you own and shared. Contributions to shared records may remain without being attributed to you, as may limited records kept for security and legal compliance.
Deleting your account does not automatically delete data on your device or in iCloud; you can manage it from the app. To learn our retention periods, contact us.
7. Security and your rights
We use technical and organisational measures to protect data, including encryption and access control. No method is completely secure, and we report data incidents as legal requirements provide.
Subject to the law, you have the right to know how your data is processed, to access it and obtain a copy, to correct it, to request its destruction, to withdraw consent, and to lodge a complaint with the Saudi Data and Artificial Intelligence Authority.
Exercise your rights in the app or at a@twaz.org. We may verify your identity before carrying out a request, and we respond within the legal period.
8. Children and updates
Features that require an account or sharing with others are intended for people aged 18 or older. Contact us if you believe a child has given us personal data.
We publish updates to this policy with their effective date, notify you of material changes as the law requires, and keep earlier versions. The policy is available in Arabic and English; the Arabic text controls if they differ.