Privacy Policy

SBR mobile app (Android and iOS)

This policy explains what personal data the SBR app collects, why we collect it, who we share it with and the choices you have. The app is operated by Salem Balhamer Holding Group ("Salem Balhamer", "we", "us"), Balhamer Business Gate, Floor 21, Al Ashriah Street, Ash Shati Ash Sharqi, P.O. Box 150, Dammam 31411, Kingdom of Saudi Arabia. If you have a question about this policy, contact us at info@salembalhamer.com.

This policy covers the SBR app only. We process personal data in line with the laws of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL).

1. Who can use the app

The app is for tenants, owners and customers of our properties. You need an account to use it. The app is not intended for children under 18, and we do not knowingly collect data from children.

2. Data we collect

Category	Examples	Source
Account details	Username, password, full name, phone number, alternative phone number, email address	You, when you register or update your profile
Identity details	National ID or residency number, date of birth, gender, nationality	You, or our customer records linked to your contract
Property and contract data	Units, contracts, payment schedules, invoices, bookings and reservations	Our property management system
Requests and messages	Maintenance requests, cases, comments, survey ratings and messages you type in the in-app assistant	You
Photos and videos	Pictures and videos you take or choose to attach to a maintenance request (videos may include audio)	You, only when you attach them
Device and app data	Push notification token, app version, device model, operating system, crash logs and diagnostics	Collected automatically

We do not collect your location, contacts, call logs or browsing history, and we do not show advertising.

3. Device permissions

Camera: to take photos or videos for a maintenance request. Used only when you tap the camera button.
Photos / media: to choose existing photos or videos to attach. We only access the items you select.
Microphone: to record audio with a video for a maintenance request.
Face ID / fingerprint: to let you sign in with biometrics. Your biometric data is checked by your device and never leaves it; we do not receive it.
Notifications: to tell you about updates on your requests, contracts and bookings.

You can turn any permission off in your device settings. Features that need it will stop working until you turn it back on.

4. How we use your data

Create and manage your account and verify your identity (including one time codes for password reset).
Show your units, contracts, payments and bookings.
Receive, track and resolve maintenance requests and cases.
Send service notifications about your requests and account.
Keep the app secure, prevent fraud and detect misuse.
Fix crashes and improve app performance.
Meet our legal and contractual obligations.

We process your data to perform our contract with you, to meet legal obligations and for our legitimate interest in running a secure service. Where the law requires consent, we ask for it and you can withdraw it at any time.

5. Who we share data with

We do not sell your personal data. We share it only with:

Service providers that host and run the app for us, under contracts that protect your data:
- Google Firebase (Cloud Firestore, Cloud Messaging, Crashlytics, Remote Config), for data storage, notifications and crash reports.
- Our property management CRM system (Microsoft Dynamics 365), where your contract, payment and request records are kept.
Maintenance staff and contractors who need the details of a request to complete it.
Authorities, when the law requires it.

Your data is processed in the Kingdom of Saudi Arabia, on our servers and those of our database management providers. Some service providers, such as Google Firebase, may process data outside the Kingdom. When that happens we use the safeguards required by the PDPL and its regulations.

6. How we protect your data

All traffic between the app and our servers is encrypted (HTTPS).
Sensitive values stored on your device are kept in the device's secure storage (Android Keystore / iOS Keychain).
Access to personal data inside our company is limited to staff who need it.

No system is completely secure. If a breach affects your data, we will notify you and the authorities as the law requires.

7. How long we keep data

We keep your account data while your account is active. Contract, payment and request records are kept for the duration of your business relationship with us, and after that for as long as Saudi law requires. Crash logs are kept for up to 90 days. After that, data is deleted or anonymized.

8. Your rights

Subject to applicable law, you can ask to access, correct, export or delete your personal data, or to restrict or object to its use. Send your request to info@salembalhamer.com. We reply within 30 days. If you are not satisfied with our reply, you can file a complaint with the Saudi Data & AI Authority (SDAIA).

9. Deleting your account

To delete your SBR account, fill in the account deletion request form at https://forms.gle/oXdnL2jHfHysXcd26. We will ask for your name, ID, username and, optionally, your phone, email and the reason for deletion, so we can confirm the request is yours.

When we process the request, we delete your registered app account (login and profile) within 30 days. Your contract, payment and request records in our customer records system are not deleted, because we need them for our business relationship and legal obligations. They are kept for the period in section 7.

10. Changes to this policy

We may update this policy. For significant changes we will notify you in the app.

11. Contact

Salem Balhamer Holding Group
Balhamer Business Gate, Floor 21, Al Ashriah Street
Ash Shati Ash Sharqi, P.O. Box 150, Dammam 31411
Kingdom of Saudi Arabia
Email: info@salembalhamer.com
Toll free: 920020066
Website: salembalhamer.com