Privacy Policy — FazRoad Customer (App & Website)

Covers the FazRoad customer app and the FazRoad website in Saudi Arabia

Last updated: September 7, 2026

This Privacy Policy explains how FazRoad ("we") collects, uses, shares, and protects your data when you use the FazRoad customer app or our website https://fazroad.org to request towing and roadside assistance services. By using the app or website, you agree to the practices described below.

1. Who We Are

The FazRoad platform is owned and operated by Bravco, based in Makkah, Saudi Arabia. For any questions, contact us at bravco.sa@gmail.com.

2. Data We Collect and Why

Data Type	Purpose
Account data: full name, phone number, email	Account creation, verification, and communication
Precise geolocation (pickup and destination)	Pinpointing your breakdown location, address search, and live trip tracking
Vehicle and breakdown data: type, model, year, issue type, notes	Helping the service provider understand your request before arrival
Order and trip data: locations, price, status, timestamps, payment method	Operating the service and maintaining order history (currently cash only; no card data is collected in-app)
Optional profile photo	Personalizing your profile — selected from your device's photos or camera
Ratings you give the service provider	Measuring and improving service quality

3. Legal Basis for Processing

We process your data based on: (a) performance of the contract to provide the requested service, (b) your explicit consent where required (e.g., location or photo access), and (c) compliance with applicable legal obligations.

4. Location Data

Your precise location is only collected while the app is running in the foreground — when creating a request and during an active trip. The app does not track your location in the background or while closed. This includes your pickup location (breakdown location) and the destination you select.

5. Google Sign-In

If you choose to sign in with your Google account (app only), we receive your name, email address, and Google profile photo from Google to create or log you into your account. We do not access any other data from your Google account.

6. Photos

The profile photo is entirely optional, selected from your device's photo library or camera via the system picker — the app does not access your entire photo library, only the photo you choose.

7. Sharing and Third Parties

We do not sell your data and do not use it for advertising. Your data is shared only in the following cases:

• Your name and phone number are shared with the service provider assigned to your request so they can contact you.
• Your location is shared with the service provider during an active trip only.
• Your data is processed by the following infrastructure providers, acting as our data processors:

Provider	Purpose
Supabase	Database hosting, authentication, and storage
Mapbox	Maps display and address search (may collect location/usage analytics data)
Google	Google Sign-In (app only)

The app and website do not use push notifications, Firebase, or any third-party analytics, advertising, or crash-reporting SDKs beyond those listed above.

8. Using the FazRoad Website Without an Account

Our website allows you to submit a towing request without creating an account (as an anonymous guest session). In this case we only collect: your name, phone number, pickup and destination location, and vehicle/breakdown data — the minimum data required to fulfill your request.

9. Cookies — Website Only

Our website uses cookies and browser local storage for the sole purpose of maintaining your request session while you browse. We do not use any cookies for third-party advertising or analytics purposes.

10. Data Retention

We retain your data for as long as your account remains active, and for as long as necessary to comply with legal, accounting, or dispute-resolution obligations, after which it is deleted or anonymized.

12. Data Security

• All data is encrypted in transit via HTTPS/TLS.
• Row-Level Security (RLS) policies are applied to prevent unauthorized database access.

13. Your Rights

Under Saudi Arabia's Personal Data Protection Law (PDPL), you have the right to:

• Access the personal data we hold about you.
• Correct any inaccurate or incomplete data.
• Delete your data (via the in-app deletion feature, or by contacting us for anonymous website requests).
• Withdraw your consent to specific processing (such as location or photo access) via your device settings, noting this may limit certain app features.

To exercise any of these rights, contact us at bravco.sa@gmail.com.

14. Children's Privacy

This app and website are not directed at children, and we do not knowingly collect data from individuals below the legal age of contractual capacity. If we become aware that we have collected data from a minor without appropriate legal consent, we will delete it promptly.

15. International Data Transfer

Your data may be processed or stored on servers operated by the providers listed above (such as Supabase, Mapbox, and Google), which may be located outside Saudi Arabia. Where this occurs, we ensure such transfers comply with the international data transfer requirements of the Saudi Personal Data Protection Law.

16. Changes to This Policy

We may update this policy periodically to reflect legal or operational changes. The "Last updated" date at the top of this page will be revised accordingly, and we will notify you via the app or your registered email in the event of material changes.

17. Contact Us