Privacy Policy
In short
- We collect what we need to deliver your orders and serve you: your name, mobile number, address and order details.
- We never sell your data. Card details are handled by our payment provider, PayTabs; we do not store your card number or security code.
- The app uses measurement and advertising tools from companies such as Meta, TikTok and Google. You can refuse tracking in your device settings.
- You can delete your account in the app, and you can access, correct or ask us to delete your data.
Last updated: 14 November 2026
1. Who is responsible for your data
Material sells and delivers water, drinks and household essentials in Riyadh through the Material app for iOS and Android and the website material.sa. The controller of your personal data is:
| Legal name | Qimmat Al-Mawad Trading Company (شركة قمة المواد التجارية) |
|---|---|
| Commercial Registration No. | 1010769402 |
| VAT No. | 311142415200003 |
| Address | 7168 Al Takhassusi Street, Al Maather Ash Shamali, Riyadh 12314, Saudi Arabia |
| info@material.sa | |
| Phone | 920033856 |
2. What we collect and why
| Data | Purpose |
|---|---|
| Account data: name, mobile number, email address and app language | To create your account, sign you in and contact you about your orders. |
| A verification code sent by SMS to your mobile, or to your email when you sign in on the website | To confirm that the number or email address belongs to you. |
| Delivery addresses: the address text, a label (home, work, mosque…) and its location on the map | To deliver your order to the right place. |
| Your device location, if you allow it | To place your delivery address on the map quickly. |
| Orders: products, quantities, amounts and VAT, payment method, delivery date and slot, your notes, discount codes and your order rating | To fulfil your order, issue the tax invoice and provide customer service. |
| Limited payment data: card type, a masked card description (such as the last digits) and a token from the payment provider if you save your card | To complete payment and make future payments easier. We never receive your full card number or security code. |
| Wallet and loyalty coins: balance and transaction history | To manage your balance and rewards. |
| Your messages to us through "Contact us", and complaints | To reply to you and resolve the issue. |
| Your device's push-notification token | To send order updates and offers. |
| Technical data: device type and operating system, app version, time zone, IP address and crash reports | To run and protect the service, prevent fraud and fix errors. |
| Usage data: how you installed the app (campaign or link), products you view or add to your cart, your searches and the value of your purchases | To measure our advertising campaigns and improve the app (see section 4). |
Device permissions in the app
- Location: to set your delivery address on the map. The iOS app asks for this permission when it opens; you can choose "While Using the App" or decline, and set your address manually on the map.
- Notifications: for order updates and offers. Turn them off at any time in your device settings.
- Microphone and speech recognition: only when you use voice search. Your device's speech service turns your voice into text, and we receive only the search text.
- Camera and photos: optional, on the payment screen, to read your card details. This is handled by the payment provider.
- Tracking (iOS): the app asks whether you allow tracking for advertising purposes. Saying no does not stop you from using the app.
We do not access your contacts or files, and we never sell or rent your data to anyone.
3. How we use your data
- To fulfil and deliver your orders and keep you updated on them.
- To issue tax invoices and keep accounting records.
- To provide customer service and handle complaints.
- To protect your account and prevent fake orders and fraud.
- To send offers by notification. You can turn these off in your device's notification settings.
- To improve the app and website and measure our advertising campaigns.
4. Measurement and advertising tools
The app uses tools from other companies to learn how the app was installed, measure our advertising campaigns and understand how the app is used:
| Tool | What it receives |
|---|---|
| Branch and AppsFlyer | The install source (ad or link), and events such as registration, search, add to cart, purchase and its value. |
| Meta (Facebook and Instagram) and TikTok | Events such as product views, add to cart, checkout, purchase and its value, and searches. |
| Google Firebase | Usage statistics, crash reports and push notifications. |
| Mixpanel | App usage statistics, such as completed orders. |
When you sign in or create an account, your mobile number is sent with the sign-up event to AppsFlyer and TikTok so that the sign-up can be matched to the ad campaign it came from.
On iOS, these tools cannot access your device's advertising identifier unless you allow tracking. On Android, you can reset or delete your advertising ID in your device settings.
The website material.sa uses the cookies needed for sign-in and your cart. It also uses Google Tag Manager, which may load measurement tools from Google and from advertising platforms to measure visits and campaigns. You can delete or block cookies in your browser settings.
These tools are also governed by the privacy policies of the companies that provide them.
5. Who we share your data with
- Our delivery drivers: your name, mobile number, address and order details, to deliver your order.
- Service providers acting for us, only as needed to provide the service:
| Service | Provider |
|---|---|
| Server and database hosting | Amazon Web Services, United Kingdom (London) |
| Online payments | PayTabs |
| Instalment payments, if you choose them in the app | Tabby |
| SMS verification codes | Msegat |
| Maps and address selection | Google Maps |
| Push notifications and crash reports | Google Firebase |
| Measurement and advertising | Branch, AppsFlyer, Meta, TikTok and Mixpanel (section 4) |
- Competent authorities: only under a binding legal request.
6. Transfers outside Saudi Arabia
Your data is stored on Amazon Web Services servers in the United Kingdom, and some of the providers above operate outside the Kingdom. We transfer only what is needed to provide the service, over encrypted connections, as permitted by the Personal Data Protection Law and its regulations.
7. How long we keep your data
| Data | Period |
|---|---|
| Account data and addresses | While your account exists. |
| Orders, invoices, wallet and coin transactions | As long as required by tax and commercial law, and as needed to handle complaints and disputes and prevent fraud. |
| "Contact us" messages | While your account exists; deleted when you delete it. |
| Backups | Kept securely to ensure continuity of the service and not used for any other purpose. |
| Data received by measurement and advertising tools | According to the policies of the companies that provide them. |
8. Deleting your account
In the app: Account screen → "Delete my Account". Or email us at info@material.sa from your registered mobile number.
- You cannot delete your account while you have an order in progress. Wait for it to be delivered or contact us.
- If your wallet has a balance, use it first or contact us before deleting.
- After deletion your account is closed and can no longer be used to sign in, your messages to us are deleted, and unused coins are forfeited. You can create a new account with the same number later.
- We keep the record of your orders and their invoices as required by law. If you want other data erased that we are not required to keep, email us and we will do it.
9. Your rights
Under the Saudi Personal Data Protection Law you may:
- Access your data and obtain a copy of it.
- Correct inaccurate data, from your account page or by contacting us.
- Ask us to delete it (section 8).
- Withdraw your consent: turn off location, notifications or tracking in your device settings. The app keeps working.
- Complain to the Saudi Data & AI Authority (SDAIA) if you believe we have breached the law.
Email us at info@material.sa. We reply within 30 days at most.
10. Children
The service is intended for people aged 18 or over. We do not knowingly collect data from anyone younger, and we will close such an account if we learn of it.
11. Security
- Traffic between the app or website and our servers is encrypted (HTTPS).
- Our database is encrypted and cannot be reached directly from the internet.
- Access to customer data is limited to staff who need it for their work.
- Card data is handled by our payment provider, PayTabs, and is not stored by us.
No system is perfectly secure. If a breach affects your data, we will notify the competent authority within 72 hours of becoming aware of it, and notify you without delay if it may harm you, explaining what happened and what we have done about it.
12. Changes to this policy
We update this policy when our services or the tools we use change, and we will tell you about any material change before it takes effect. The date of the last update is at the top of this page.
13. Contact us
Use "Contact us" in the app or on the website, call 920033856, or email info@material.sa.
See also: Terms and Conditions.
