Legal

Privacy Policy – Layni

This policy explains how Layni collects, processes, and protects your personal data when you join queues, track your turn, and use loyalty points and rewards. We treat your data with care and in accordance with applicable law.

Last updated: 2026-10-13

1. Legal framework

We comply with the Kingdom of Saudi Arabia Personal Data Protection Law (PDPL) and its implementing regulations, and with applicable data-protection laws in the countries where the service is used.
Where local mandatory rules conflict with this policy, those mandatory rules prevail in that country.

2. Information we collect

The name you provide when joining a queue or creating an account.
Mobile phone number (required when joining as a guest) — in international format where possible.
Email address when you create a customer account.
Usage and visit records (such as queue joins, status, notifications, and loyalty history).
Technical device or browser data as needed (such as notification identifiers and IP address) to operate and secure the service.

3. Why we require your mobile number

So the business can contact you if a technical issue occurs (for example connection loss, weak network, or a push notification that does not reach your device).
To confirm your place in the queue when needed, support orderly service, and reach you if operational circumstances at the venue change.
The number is used only for that visit and operational contact with that business, not with unrelated parties.

4. How we use your data

Operate queues, turn tracking, and visit-related notifications.
Manage loyalty points and rewards for businesses that enable them.
If you expressly opt in: enable the business to send you offers, rewards, updates, and useful information about that business’s services through Layni.
Secure the platform, prevent abuse, and comply with legal obligations.

5. Sharing data

We do not sell your personal data to third parties.
The minimum necessary data is shared with the business whose queue you joined (such as name and mobile number) to run the visit and for operational contact.
We may use trusted infrastructure providers (hosting, notifications, email) only as needed to run the service, under appropriate contractual safeguards.
We may disclose data when required by a binding lawful request from a competent authority.

6. Retention

We retain data for as long as needed for operations, loyalty where applicable, and legal compliance, then delete or anonymize it in line with our policies and applicable law.

7. Your rights

Request access to, correction of, or deletion of your data, within the limits of the PDPL and other applicable local laws.
Withdraw consent to offers and updates at any time without affecting the lawfulness of prior processing.
Contact us with privacy questions or complaints.

8. Security and updates

We apply appropriate technical and organizational measures to protect data against unauthorized access, loss, or unlawful processing.
We may update this policy when needed. The updated version is posted on this page with a revised last-updated date.