كنف – Kanaf

1. Introduction

Welcome to Kanaf ("the App"), provided by Taibah Tech ("we" or "the Company"). We are committed to protecting your privacy and processing your personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and applicable regulations.

By using the App, you agree to this policy. If you do not agree, please do not use the App.

2. Data We Collect

Account Data

• Mobile phone number
• Email address (optional)
• National ID / Iqama number (via identity verification)
• Full name and date of birth (from ID document)

Biometric Verification Data

• Facial embeddings (digital face signature) — raw images are not retained
• Liveness check results

Usage Data

• Geolocation — used only at the moment of handoff point verification; no continuous tracking
• Uploaded visitation deed documents
• Visit schedules and events
• Messages between parties
• Handoff and pickup records

Device Data

• Device identifier and push notification token (FCM)
• Device type and operating system

3. How We Use Your Data

• Create your account and verify your identity
• Manage custody cases and visit schedules
• Biometric verification during handoff and pickup
• AI-powered extraction of visitation deed data
• Send notifications related to visits and appointments
• Calculate reliability and compliance scores
• Issue certificates and reports
• Improve App performance and service quality

4. AI Document Processing

We use a multi-tier system to extract data from visitation deeds:

• Tier 1: Processing on a private Saudi cloud (OCI) — your data does not leave the Kingdom
• Tier 2 (fallback): Processing with complete PII masking before transmission

5. Data Sharing

We do not sell your personal data. We share data only with:

• Amazon Web Services (AWS): Secure storage and facial recognition (Rekognition)
• Google Firebase: Push notifications
• Google Maps: Handoff location verification
• Payment processors: Payment processing (Stripe / Moyasar)
• Judicial authorities: When required by a valid court order

6. Data Security

• All data encrypted in transit (HTTPS/TLS)
• JWT-based authentication with token expiry
• No raw face images stored — only digital embeddings
• No continuous location tracking
• Database secured on Google Cloud SQL

7. Your Rights

Under the Saudi PDPL, you have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account (via Settings in the App)
• Obtain a copy of your data

8. Account Deletion

You can delete your account at any time from the Settings page in the App. Upon deletion request:

• Your account is suspended for 30 days (grace period)
• You can log back in during this period to cancel the deletion
• After 30 days, all your personal data is permanently removed, including biometric data and uploaded documents

9. Children

The App is designed for parents to manage children's visitation schedules. We do not collect data directly from children.

10. Data Retention

We retain your data as long as your account is active. Upon account deletion, data is permanently removed after the 30-day grace period. We may retain anonymized data for statistical purposes.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via an in-app notification. Continued use of the App after an update constitutes acceptance of the revised policy.

12. Contact Us

For any questions about this policy or your personal data:

• Email: support@taibahtech.ai
• In-App: Support page > Contact Us
• Company: Taibah Tech, Madinah, Kingdom of Saudi Arabia

Effective date: March 6, 2026