سياسة الخصوصية

Privacy Policy — English version

Last updated: October 18, 2026. The Arabic text above is the full policy; this English version covers every section of it, in the same order and with the same numbers.

1Who we are

The Dukan platform is operated by BASI ALMUTAQADIMAH COMPANY, the data controller for personal data processed through it. Dukan is a Saudi platform connecting shoppers with nearby grocery stores and providing stores with a point-of-sale and online-ordering system. Privacy contact: WhatsApp +966 53 553 3874 or support@dukan-ksa.com (all channels in section 13).

2Scope and roles

This policy covers the new Dukan shopper app (iPhone and Android, from its store release — 3.1), the Dukan Cashier point-of-sale app used inside the store (3.2), and our web pages: the web console, supplier portal and admin panel (3.3) and this website (5), including its "Register your store" form (3.4). It is written from what the system actually does, not from a template.

• BASI ALMUTAQADIMAH COMPANY is the controller for the data the Dukan platform processes.
• The grocery store that receives your order, credit-ledger or B2B-invoice data is itself a controller (section 6).
• Credit-customer and B2B-buyer details are entered by the merchant about its own customers; the merchant is responsible for informing them and obtaining their consent (except where the law requires the data, such as buyer details on a tax invoice), and they may ask us directly to delete their data (section 10).

3Data we collect and where it comes from

3.1 Dukan shopper app (applies from its store release)

• Phone number — you enter it; to create the account and sign in. It is the only way to sign in.
• Password — you enter it; to protect your account. Stored one-way hashed on our server, cannot be recovered, and never stored on your device.
• Verification code — generated by our server and sent to your phone; to confirm you own the number. Valid 5 minutes, single use (its record's retention is in section 8).
• The name you choose — you enter it; shown to the store with your order.
• Delivery address (description, building, floor, apartment, notes and coordinates) — you enter it; the coordinates come from the map or the location permission; to deliver your order.
• Your current location when searching for a store — from your device's location permission, if you allow it; to show the nearest store. Not stored: used at that moment, then discarded.
• Your cart, orders and order notes — you enter them and order status is recorded automatically; to fulfil and track orders and keep your purchase history.
• Order ratings and support tickets — you write them; to improve the service and reply to you.
• Your "Dukan offers" (عروض دكان) choice — you choose it in the app; to show Dukan offers in app notifications. On when the account is created; turn it off any time in notification settings.
• A credit account with a store — if a store registers you as a credit customer by phone, you get an invitation in the app; after you accept, you see your debt and its entries with that store. Entered by the merchant, and linked to your account only if you accept.

We do not collect: national ID, date of birth, gender, email address, card data, photos, contacts, camera or microphone.

Location: on iPhone and iPad we ask for location only while you use the app, and its precision follows the "Precise Location" setting for our app — if you turn it off we receive an approximate location, enough to show nearby stores. On Android the location may be precise when GPS is available. Your live location is not stored on our servers; it is used at the moment of the search to find nearby stores, then discarded. The coordinates of an address you save are stored with that address to deliver your orders. Searching for an address by name, turning coordinates into a written address, and showing the map on iPhone all go through your device's system services — Apple Maps on iPhone and the Android address service (usually Google) — which receive the search text or the coordinates for that purpose only. You can refuse or withdraw the location permission and set your location by hand on the map.

On your device: your session identifier (in the system's secure storage), your phone number, your cart, and operations not yet sent to the server (which may contain your address or the text of a support ticket until sent). On Android, credentials are stored encrypted. Deleting the app removes this data from your device.

Deleting your account: in the app — Account (حسابي) → Edit (تعديل) → in the Edit profile sheet (تعديل الملف الشخصي): Delete my account (حذف حسابي) → Send request (أرسل الطلب) — or by contacting us. Details in section 10.

3.2 Dukan Cashier (point-of-sale app for grocery stores and their cashiers)

• No account is created in the app: the store owner adds cashiers from the web console, and the app only signs in. Sign-in is the store membership number (6 digits, one for the whole store) plus the personal cashier code (5 digits). There is no phone number or password in the cashier app; the phone number and password belong to the store owner alone, who uses them to sign in to the web console, not the cashier app.
• Sent to our servers, and why (entered by the cashier unless noted):
  • membership number and cashier code, then session and membership identifiers generated by our server with every operation — to sign in and attribute each sale, close and return to the cashier who did it;
  • a device key generated by the app on the device (only its public half is sent; the private half never leaves the device) and the device name — to activate the device for the branch and prove every request comes from it;
  • sales and returns: items, quantities, prices, discount and its reason, payment method and return reason — to record sales, stock and reports;
  • shift: opening drawer float and cash counted at close — to reconcile cash at the end of the shift;
  • credit customers: name, phone number, credit purchases, debt and repayments — entered by the cashier or store owner about the store's customer, for the credit ledger between the store and its customer;
  • business (B2B) invoices: the buying business's name, VAT number or another identifier (commercial registration or ID) and address — entered by the cashier, to issue a legal tax invoice in the buyer's name;
  • card payments: the amount only — to record the sale. The card is charged on a separate bank terminal not connected to the app; no card number or any part of one;
  • a product added by the store: name, barcode, price and stock — entered by whoever has permission in the store, to sell an item not in the catalogue;
  • shopper orders (Orders tab): the app shows the cashier the shopper's name, phone, address, coordinates and notes (from the order), and sends accept or reject decisions with their reason, failed-delivery or declined-cancellation reasons, and the payment method collected at handover (entered by the cashier) — to prepare, deliver and settle the order.
• The app does not collect location, contacts, camera, microphone or the advertising identifier. The merchant's responsibility for customer data it enters is in section 2.
• Permissions: local network — to find and reach the receipt printer inside the store on the local network; this connection does not pass through our servers. Add to Photos — only when you choose "Save image" for a receipt; the app does not read your photos. Withdrawing a permission: section 10.
• On the device: session and device identifiers and the device key in the system's secure storage (Keychain); operations not yet sent (which may include a credit customer's name and phone or B2B-buyer details until sent); a local history of this device's sales (which may include credit-customer names and B2B-buyer details) that stays on the device until the app is deleted — signing out does not erase it; cached product images; and receipt and printer settings. Signing out ends the session and clears its identifiers. Deleting the app removes its data from the device, though the system may keep secure-storage items.
• Stopping a cashier and deleting their data: "Remove" in the console (Management → Users → Remove) disables the cashier's code and session immediately but does not delete their name or history; deletion is by request (section 10). Merchant accounts and credit-customer or B2B-buyer data: by deletion request (section 10).

3.3 Web console, supplier portal and admin panel (web pages)

• Sign-in: store owners and staff with phone number and password; Dukan administrators in the admin panel with a login ID, password and two-step verification code.
• The owner's name when the merchant account is opened, and the cashier names (and phone, for anyone added by phone) entered by the store owner — shown to the owner in reports with every operation each cashier performed.
• The console shows the store owner the order customers' name, phone and address to fulfil the order, and can export them to a file.
• Cookies and browser storage: section 5.

3.4 The "Register your store" form on this website

• What we collect: business type, store name, owner name, phone number and city — and, optionally, email, commercial registration number and VAT number.
• Why: to review the registration request and contact you about it, then to create the merchant account if it is accepted.
• We do not share it with anyone outside Dukan (other than our hosting provider, as in section 6) and do not use it for marketing.
• Your IP address is used to protect the form from repeated requests — not to track you.

4Why we use it

We use data for the following purposes; the detail for each item is in the lists of section 3:

• Sign-in and account protection: phone and password for shoppers and store owners, and a verification code for shoppers; membership number, cashier code and device key in the cashier app; login ID and two-step code for Dukan administrators.
• Fulfilling and delivering your order: your name, address, coordinates and order details — which reach the store you order from.
• Showing the nearest store: your live location if you allow it — not stored.
• Running the store: recording sales, returns, stock, shifts and reports, and attributing each operation to the cashier who did it.
• The credit ledger: the debt between the store and its customer and its repayment.
• Tax invoices: buyer details on business invoices; invoices are sent to the Zakat, Tax and Customs Authority (ZATCA) when a merchant links its branch to the "Fatoora" e-invoicing platform, as the law requires.
• "Dukan offers" in app notifications: on when the account is created; turn it off any time.
• Printing to a network receipt printer and saving receipt images in the cashier app: the Local Network and Photos permissions.
• Replying to you and improving the service: order ratings and support tickets.
• Protecting the service: IP addresses, to protect sign-in and verification-code requests from repeated attempts — never to track you.

What is optional: the location permission (without it you set your location by hand on the map), "Dukan offers" (turn it off in notification settings), and the Local Network and Photos permissions in the cashier app (without them only printing to a network receipt printer or saving receipt images stops; selling keeps working). The phone number is the only way to sign in to the shopper app.

5Cookies and browser storage

• Web console, supplier portal and admin panel: one essential HttpOnly session cookie for sign-in, plus browser local storage to remember the session and to resume an interrupted operation (which may hold its data until it completes). No tracking or advertising cookies.
• Google Fonts on our web pages (this website, dokan-ksa.com, and the console, supplier portal and admin panel): your browser requests the font from Google's servers, so Google receives your IP address and browser type. (The mobile apps do not do this — the font is built in.)

6Who we share with

We do not sell your data or share it for advertising. Sharing is limited to:

• The store you order from: your name, phone, delivery address and its coordinates, and your order details — because the store prepares and delivers the order.
• The Zakat, Tax and Customs Authority (ZATCA): when a merchant links its branch to the "Fatoora" platform, its invoices are sent there as the law requires — including B2B buyer details on business invoices.
• Google Cloud: our hosting provider, which processes data on our behalf under its data processing terms and does not use it for its own purposes.
• Your device's map and address services (Apple / Google) when you search for an address or turn coordinates into an address (section 3.1). The "Map" (الخريطة) button on a shopper order in the cashier app opens Apple Maps at the delivery coordinates.
• Google Maps: the "Map" (الخريطة) link in an order's details in the web console opens Google Maps at the shopper's delivery coordinates, so the coordinates reach Google when the store owner clicks it.
• Google Fonts on our web pages: Google receives your IP address and browser type (section 5).
• WhatsApp or your phone app when you tap a contact button: WhatsApp opens with a pre-filled message you see before sending (in the cashier app it includes the store name), and nothing is sent until you tap send.
• Competent authorities where the law requires.

7Where it is stored, outside Saudi Arabia

On Google Cloud servers in Doha, Qatar — the server and the managed database are there, and backups are on Google Cloud too. This means the data is processed outside Saudi Arabia. Connections to it are always encrypted (HTTPS), and it is encrypted at rest. Google Cloud processes it on our behalf as described in section 6.

8Retention

We keep nothing longer than we need:

• Account data (name, phone, addresses): while the account exists; deleted within 30 days of a deletion request (section 10).
• Data a store enters (cashier names and phones, credit customers and their accounts, B2B invoice buyers): while the store's account exists; deleted within 30 days of a deletion request, except what the law requires to be kept with tax invoices.
• Tax invoices and accounting records: as long as Saudi VAT rules require — at least six years — de-identified where possible.
• Encrypted backups: deleted automatically within 90 days.
• Cashier session: ends at sign-out.
• Verification code: valid 5 minutes, single use. Its record (phone number, the code and a one-way hash of your IP address) stays on our server after expiry to enforce request limits, until the same phone requests a new code more than 24 hours after the record, which deletes it, or until you request deletion (section 10).
• Live location: never stored.
• Data on your device: until you delete the app (sections 3.1 and 3.2).

9Security

• All connections to our servers are encrypted with HTTPS, and data is encrypted at rest on Google Cloud (database and backups).
• Passwords are stored one-way hashed and cannot be reversed; cashier codes are stored sealed.
• Sign-in credentials on your device are kept in the system's secure storage (Keychain on iPhone and iPad, an encrypted store on Android, and the credential vault on Windows).
• Each cashier device signs its requests with a key that never leaves it, so a device cannot be impersonated by copying its data.
• We use IP addresses to protect sign-in and verification-code requests from repeated attempts, and they may appear in technical server logs — we never use them to track you.
• Store staff access is permission-based, and every sensitive operation is recorded in an audit log.

Even so, no system is 100% secure, and we do not claim otherwise.

10Your rights and how to use them

• Access to your data held by us.
• Correction — shoppers edit their name and add or delete addresses directly in the app; anything else by contacting us.
• Deletion — shoppers in the app: Account (حسابي) → Edit (تعديل) → Edit profile (تعديل الملف الشخصي) → Delete my account (حذف حسابي). Anyone — merchant, cashier, credit customer or B2B buyer — by contacting us on WhatsApp +966 53 553 3874 or at support@dukan-ksa.com with the subject "Data deletion request" (طلب حذف بيانات), and the registered phone number (and membership number for merchants).
• Objecting to marketing messages — turn off "Dukan offers" in the shopper app's notification settings.
• Withdrawing consent at any time:
  • Dukan Cashier: iPad Settings → Dukan Cashier (دكان كاشير) → turn off Local Network or Photos. Only printing to a network receipt printer or saving receipt images stops; selling keeps working. Signing out ends the session.
  • Shopper app: turn off location in your device settings (and set your location by hand on the map), and turn off "Dukan offers".
  • Entirely: request deletion of your account or data as above.

After a deletion request: our team reviews and completes it within 30 days, and confirms on the channel you used — shoppers who asked in the app get a WhatsApp message to their registered number. We delete the name, phone number, addresses and the link between orders and their owner. A copy remains in encrypted backups until they are deleted automatically within 90 days, used only to recover from a failure. Transaction records and invoices we must keep by law or for accounting may remain, de-identified where possible. If a credit customer owes a store, that debt remains between them.

11Children

Our services are not directed to anyone under 18, and we do not knowingly collect their data. If you learn that a minor has created an account, tell us and we will delete it.

12Changes to this policy

We may update this page and will change the "Last updated" date at its top. We note material changes at the top of this page and inform merchants directly on their registered phone.

13Contact us

Operator of the Dukan platform and data controller: BASI ALMUTAQADIMAH COMPANY. For help with anything else: the Support page.