Privacy Policy

CREVRE is a technology platform that helps property owners manage their properties and lets residents request home services from independent providers. It is operated by ABDULBARI AHMED SALMAN ALJUDAYA under Freelance Certificate No. FL-558987270 in the Kingdom of Saudi Arabia, referred to here as “CREVRE”, “we” or “us”.

This policy applies to the CREVRE mobile app and the website crevre.io (together, the “Platform”), and should be read together with our Terms & Conditions.

Your account:

• ·Your mobile number — used to sign in; we send your verification code to it
• ·Your name and your chosen app language

Residence and property data — entered by the property owner or manager:

• ·The property and unit linked to your account
• ·Lease details: term, amount and status, and related invoices

Your requests:

• ·The request description, your preferred time, and your notes
• ·Photos you choose to upload with a request
• ·Service-specific details: moving addresses, floor and elevator availability, car details and plate, gas cylinder size, and shopping cart contents
• ·Photos and information added by the provider about the job: inspection photo, number of items received, and the proposed price
• ·Your rating and comment on a service, if you add them

Payment data:

• ·Order amount, payment method (cash or online), and payment and refund status
• ·A transaction reference number from the payment gateway

We do not receive or store your card details — the card number, expiry date and security code are entered into secure fields provided directly by the payment gateway and never pass through our servers.

Device data:

• ·Your device’s notification token and operating system (iOS or Android) — to send you updates on your requests
• ·A browser push subscription, if you enable notifications on the website
• ·One strictly necessary browser cookie that keeps you signed in

Activity log:

A log recording who performed which action and when, for leases, payments, requests and permissions — to protect all parties and resolve disputes.

Property location — not your location:

The property’s location is set on a map when the property is registered, so providers can reach it. We do not request location permission from your device and do not track where you are.

• ·Camera and photo library — only when you choose to attach a photo to a request; we access nothing else
• ·Notifications — with your consent; you can turn them off in your device settings at any time

The app does not request location, microphone or contacts permissions.

• ·To create your account and verify your identity when you sign in
• ·To fulfil your request: route it to a suitable provider and enable them to reach and contact you
• ·To process payments and refunds, and calculate amounts due to providers
• ·To notify you when the status of your request changes
• ·To document completed work and handle complaints and disputes
• ·To protect the Platform and its users from fraud and misuse
• ·To meet our legal obligations, including keeping financial records
• ·To improve service quality and monitor provider performance, including through ratings

We process your data on the basis of performing the service you requested, a legal obligation, a legitimate interest that does not override your rights, or your consent where required. We do not send you marketing messages without your consent.

By its nature, your request passes through the parties who fulfil it, each seeing only what they need:

• ·The service provider your request is routed to — your name, mobile number, unit address, and the request description, photos and details
• ·Your property owner or manager — your lease, invoices, and maintenance requests and their status
• ·The district manager and CREVRE operations team — to route and follow up on requests and resolve issues
• ·The technical service providers listed in the next section — only as needed for their work
• ·Government and judicial authorities — when legally required
• ·Anyone to whom the business, or part of it, is transferred in a sale or merger — bound by this policy

We do not sell your data or share it for advertising. Providers are independent parties obliged to use your data solely to fulfil your request, and each is responsible for any use contrary to that.

• ·Vercel — website and app server hosting
• ·Neon — database
• ·Tap Payments — card and Apple Pay payment processing and refunds
• ·Authentica — sending your sign-in code by SMS
• ·Expo, Google Firebase and Apple Push Notification service — delivering notifications to your device
• ·OpenStreetMap — displaying the map when a property location is set, which shares your IP address with it
• ·Apple and Google — downloading and updating the app from their stores

Each has its own privacy policy. We may replace a provider with another serving the same purpose under similar safeguards, and will update this list accordingly. If you contact us via WhatsApp, WhatsApp’s policy also applies to that conversation.

• ·Encrypted connections (HTTPS) between your device and our servers
• ·Sign-in with a temporary code that expires within minutes — no passwords to steal
• ·Separation between each property’s data, and permissions that limit each party to what they need
• ·A tamper-resistant log recording sensitive operations

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your data, we will notify you and the competent authority as required by law.

• ·Account data — for as long as your account exists
• ·Verification codes — expire within minutes
• ·Device notification tokens — deleted when you sign out, delete your account, or the device stops receiving notifications
• ·Requests and their photos — kept with the request record, as proof of the work done
• ·Leases, invoices, payments and commissions — for the period required by accounting and tax regulations

Once the need or the legal retention period ends, we destroy the data or remove anything that identifies you.

Under the Personal Data Protection Law, you have the right to:

• ·Know how and why we collect your data — which is this page
• ·Request access to your data or a copy of it
• ·Request correction of inaccurate or incomplete data
• ·Request destruction of your data once it is no longer needed
• ·Withdraw consent for processing based on consent, such as notifications
• ·File a complaint with the competent authority if you believe we have breached the law

You can delete your account yourself from within the app or website — how to delete your account. Records we are legally required to keep — leases, invoices and completed requests — remain afterwards, without your name or number. For other rights, contact us and we will respond within the legally required period after verifying your identity.

The Platform is intended for people aged 18 and over, and we do not knowingly collect data from anyone younger. If we learn of an account belonging to a minor, we will delete it.

The Platform may take you to pages we do not operate — such as your bank’s verification page during payment, WhatsApp, or the app stores. Their owners’ policies apply to them, and we are not responsible for their practices.

We may update this policy to reflect changes to the Platform or the law, and will change the “Last updated” date above. If a change is material, we will notify you within the Platform. Continuing to use the Platform afterwards means you acknowledge the updated policy.

For any question or request about your data: WhatsApp or +966 55 941 4132.

This is a translation of the Arabic policy. In case of any discrepancy, the Arabic version prevails.