Privacy Policy

HRP ("Home Resource Planning", the "Service") is operated by Althawra Altaqniya (Commercial Registration No. 7052259004), based in Jeddah, Saudi Arabia ("HRP", "we", "us", "our"). This Privacy Policy explains how we collect, use, disclose and protect personal data through the HRP mobile application and website, in line with the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.

If you have any question or wish to exercise your rights, contact us at homeresourceplanningsa@gmail.com.

HRP serves households that employ domestic workers. This creates two kinds of personal data with different responsibilities:

• Your account data (the household administrator and family members): we act as the data controller.

• Worker data that you enter (a domestic worker's name, nationality, identity/permit numbers and copies, photo, salary and related records): the employing household is the controller of that data, and HRP acts as a data processor that stores and processes it on the household's instructions.

If you enter another person's data into HRP, you confirm that you have the legal right and any consent required to do so (see our Terms & Conditions).

• Account & profile data: name, email address, phone number, password (stored encrypted), household name and country, and language/currency preferences.

• Worker & household records you enter: worker name, photo, nationality, contract details, identity and permit numbers (e.g., residence permit) and uploaded document copies, salary and advances, leave, tasks, and ticket entitlements.

• Payment data: subscription billing is processed by our payment provider (Tap Payments). We do not store your full card number; we keep limited billing records (e.g., plan, amount, status).

• Waitlist & contact data: if you join our waitlist or contact us, we collect your email address and any message you send.

• Technical data: basic device and log information, and preferences stored on your device (such as your chosen language and currency).

• To create and operate your account and provide the Service's features (worker records, payroll logs, leave, tasks and reminders).

• To send notifications and reminders you have configured (such as document-expiry or pay-day reminders).

• To process subscriptions and payments, and to provide customer support.

• To maintain security, prevent misuse, and comply with legal obligations.

• To improve the Service. We do not sell your personal data.

We process personal data on one or more of the following bases: performance of our contract with you; your consent (which you may withdraw); our legitimate interests (such as securing and improving the Service) where these do not override your rights; and compliance with a legal obligation.

For worker data, the employing household is responsible for establishing the appropriate legal basis (for example, its legitimate interest as an employer, or the worker's consent).

HRP's alerts and reminders (for example, document-expiry or ticket dates) are a convenience feature. They are not legal, immigration, HR or tax advice, and we do not guarantee their accuracy, timeliness or delivery. You remain responsible for meeting your own legal obligations.

We share personal data only as needed to run the Service, with service providers who process data on our behalf under appropriate contractual protections, including: Supabase (database, authentication and document storage), Vercel (website hosting), Tap Payments (payment processing) and Firebase Cloud Messaging (push notifications in the app).

We may also disclose data where required by law or by a competent authority, or to protect our rights and the safety of users.

We do not sell personal data or share it for third-party advertising.

The Service currently uses infrastructure hosted outside the Kingdom of Saudi Arabia (for example, our database and storage are hosted in Singapore, and certain providers operate globally). Where personal data is processed outside the Kingdom, we rely on appropriate safeguards, including contractual protections with our providers, encryption in transit and at rest, and access controls.

We intend to move to in-region (KSA/Gulf) hosting as the Service grows, and will update this Policy to reflect any change.

We keep personal data for as long as your account is active and as needed to provide the Service. After an account is closed, we delete or anonymise personal data within a reasonable period (typically up to 90 days), except where we must retain certain records to meet legal, tax or regulatory obligations, or to resolve disputes.

We use technical and organisational measures to protect personal data, including encryption in transit and at rest, private document storage with time-limited access links, and role-based access controls. No method of transmission or storage is completely secure, but we work to protect your data and to address any incident appropriately.

Subject to the PDPL, you have the right to: be informed about how we use your data; access your data and obtain a copy; request correction of inaccurate data; request deletion where applicable; and withdraw consent where processing is based on consent.

To exercise these rights, contact us at homeresourceplanningsa@gmail.com. If your request concerns a worker's data held on behalf of a household, we will direct it to, or act on the instructions of, the employing household.

You also have the right to lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA).

The Service is intended for adults (18 years or older) and is not directed to children. We do not knowingly collect personal data from children.

Our website uses essential storage only (for example, remembering your chosen language and currency). We do not use advertising cookies. If we add analytics in future, we will update this Policy.

We may update this Policy from time to time. We will change the "last updated" date above and, where appropriate, notify you. Continued use of the Service after an update means you accept the revised Policy.

Althawra Altaqniya — Commercial Registration No. 7052259004 — Jeddah, Saudi Arabia. Email: homeresourceplanningsa@gmail.com.