Legal
This policy explains what personal data Khan Al Moneh collects through khanalmoneh.com and the Khan Al Moneh app, why, how we protect it, and your rights under Saudi Arabia's Personal Data Protection Law (PDPL).
Last updated: 19 October 2026
Khan Al Moneh, a Levantine pantry shop in Al Sulaimaniyah, Riyadh, is responsible for your data. For anything about privacy: info@khanalmoneh.com or WhatsApp +966 54 500 8149.
When you create an app account: your name, mobile number, email address and password (stored hashed — we can't read it).
When you order: the products, quantities and sizes, the branch, your notes, the amounts, any coupon used, and the order status. For delivery orders only: the delivery address you type, your National Address code if you add it, and the delivery location on the map.
In your account: loyalty points, favourite products, and addresses if you add them.
If you allow notifications: your device's notification token, its language and platform (iOS or Android), and whether you want offer notifications.
On your device only: the app language, your cart, and favourites before you sign in — they reach us only when you order or sign in.
Technical logs kept by the server for security (IP address, browser type, time of request), for a limited period.
Location: if you switch on “Alert me near the store” in the app, your phone uses your location to notice when you're near the store and shows at most one alert a day. This happens on your phone only — your location is not sent to us or stored on our servers — and you can turn it off any time in Account or in your phone settings. For a delivery order, we read your current location once, only when you tap “Use my current location”, and send it with the order to work out the distance and delivery fee and to bring the order to you.
We don't use analytics or advertising trackers on the website or in the app.
To fulfil your order, prepare it for pickup or deliver it, and contact you about it; to run your account and loyalty points; to send order status notifications; for customer service; to protect the service from misuse; and to meet our legal obligations.
Offer and season notifications are sent only if you switch them on, and you can turn them off any time in Account.
We don't sell your data or share it for marketing. Service providers process it only on our behalf: server and database hosting (Hostinger, servers in Frankfurt, Germany) and notification delivery (Expo, and through it Apple's and Google's push services).
The website shows a Google map on the store page and Instagram posts on the home page; when they load, Google and Meta may collect data under their own policies.
We may disclose data if a competent authority requires it by law.
Data is stored on servers in Germany, and notifications pass through services in the United States. We choose providers with appropriate safeguards and transfer only what the service needs.
We keep your account data while your account exists. When you delete it, we erase your name, mobile, email, addresses, favourites and notification tokens at once, remove the delivery addresses, locations and notes from your orders, and keep order records without personal details for accounting and legal purposes.
You can see your data and ask for a copy, correct it, delete it, and withdraw consent to notifications. You can delete your account directly in the app (Account → Delete account) or by emailing us.
If we can't resolve a complaint, you may raise it with the Saudi Data & AI Authority (SDAIA).
All connections are encrypted (HTTPS), passwords are stored hashed, the app keeps your sign-in in the device's secure storage, and dashboard access is limited to Khan staff.
We may update this policy; the date of the latest version is shown above, and we'll tell you in the app if a change is significant.
