Privacy policy

This policy explains how the Mahfouz app and website (together, the “Service”) collect, use and protect your data. Mahfouz helps you keep your purchase invoices and track warranty periods. By using the Service you agree to this policy.

1. Who we are and how to reach us

The operator of Mahfouz is responsible for your data. For any privacy question, email support@mahfouz.sa.

2. Data we collect

Account data: name, email address, mobile number, and your password as a one-way hash (we never store the password itself). When you sign in with Google or Apple we receive your name, email and the provider’s account identifier.
Profile photo: if you choose to add one.
Invoices: the invoice photos you upload and the data extracted from them or entered by you (store name, invoice number, purchase date, items, amounts, warranty period).
Device and notification data: your device’s push token and language, so we can notify you, for example when an invoice has been read or a warranty is about to end.
Usage and crash data: through Google Firebase Analytics we collect general usage events (such as screens opened and sign-ins), and through Firebase Crashlytics we collect crash reports (device model, OS and app version, error details), together with an app-instance identifier and your numeric account id so a crash can be linked to the account.
Guest mode: the first time you open the app you enter as a guest, without an account. We create a temporary account with no name, email or phone number, and it holds the invoices you upload.
Device identifier for abuse prevention: to grant the free use once per device, on iPhone we use a random token kept in your device's Keychain and a flag from Apple's DeviceCheck service, and on Android our app's ANDROID_ID on your device. We use Apple App Attest and Google Play Integrity to confirm a request comes from our genuine app. We store these identifiers one-way hashed, so the original cannot be recovered, and never use them for advertising or to track you across other apps or websites.
IP address: we store a hashed fingerprint of it when a guest account is created, to limit automated account creation.

We do not collect your device’s advertising identifier, we do not track you across other companies’ apps or websites, and we do not sell your data.

3. Why we use it

To create your account, sign you in and keep it secure (including verification codes sent to your email).
To store and show your invoices and to extract their details automatically from photos.
To send notifications about your account, such as reminders before a warranty ends.
To answer support requests, improve the Service and fix crashes.
To comply with applicable law.
Extracting your invoice data from its photos with artificial intelligence. For a guest, the second invoice is analysed and its result stays hidden until the guest creates an account or signs in.
Preventing abuse of the free use and automated account creation.

4. Service providers we share data with

We rely on trusted providers to run the Service; each receives only what it needs for its role:

Cloudflare: hosting, database, photo storage and sending email.
Google Gemini and Anthropic: invoice photos are sent to them for AI extraction of the invoice details. Photos are sent for processing only and are not used to train their models, per the providers’ terms for paid services.
Google Firebase: usage analytics and crash reports.
Expo: delivery of push notifications to your device through the Apple and Google push services.
Google and Apple: when you choose to sign in with your account there.
Apple (DeviceCheck, App Attest) and Google (Play Integrity): to confirm a request comes from our genuine app, and to keep the free-use flag on iPhones.
RevenueCat: subscription management; we send it a random subscription identifier, it receives your subscription record from the app store, and neither we nor it receive your payment details.
Where data is processed: your data and invoice photos are stored with Cloudflare in data centres that may be outside Saudi Arabia, and invoice photos are processed by Google and Anthropic outside Saudi Arabia, as permitted by the Personal Data Protection Law.

Google Firebase, Expo and RevenueCat may also process data outside Saudi Arabia. We may also disclose data when required by law or a competent authority.

5. Retention and deletion

We keep your data for as long as your account exists. You can delete your account at any time in the app: Account → Delete account. Deletion is scheduled after a 3-day grace period during which you can cancel it; after that your data is permanently deleted, including stored invoice photos, your profile photo and push tokens. You can also request deletion by emailing support@mahfouz.sa. See the delete account page for details. Backups or technical logs may persist for a limited time before they are overwritten automatically.

Guest data: if you do not create an account or sign in within 30 days of starting as a guest, we permanently delete your invoices, their photos and the guest account. We remind you in the app during the last 7 days, and by notification 7 days, 3 days and 1 day before deletion if you allowed notifications.
Deleting guest data yourself: at any time from Account → Delete my data; it is deleted immediately, with no grace period.
Signing in to an existing account: we move the guest's invoices and photos to your account, then delete the guest account.
Device flag: after guest data is deleted we keep only the hashed device fingerprint and the date the free use was taken, so the free use is not repeated, and delete it 12 months after the app was last used on that device. The DeviceCheck flag stays with Apple, tied to the iPhone.

6. Your rights

View and edit your data in the app.
Request a copy, correction or deletion of your data.
Turn notifications off in your device settings.
Withdraw consent by deleting your account.

To exercise any of these rights, email support@mahfouz.sa.

7. Security

We use encrypted connections (HTTPS), store passwords hashed, and restrict every user’s data to their own account. No method of transmission or storage is completely secure, however.

8. Children

The Service is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us their data, contact us and we will delete it.

9. Changes to this policy

We may update this policy from time to time. We will post the updated version on this page with its date and email you about material changes.