Privacy Policy

This policy explains how the KIRA platform — operated by Al Sahaba Investment Co. L.L.C. (شركة السحابة للإستثمار ش.م.م), Sultanate of Oman Commercial Registration No. 1558387, Muscat Governorate ("KIRA", "we") — collects, uses, shares, and protects your data when you use the KIRA app, our websites, or the booking service.

1. Data We Collect

Data you provide:

• Account details: name, phone number, email (if you add it).
• Booking details: the vehicle, period, pickup/return branch or location, and any notes you write (including additional-driver details if you enter them).
• Documents: if you are asked to upload proof of identity or a driving licence to complete a booking, the document is stored for that purpose.
• Communications: your chats with Rental Companies and with support inside the platform, and your ratings.

Data collected automatically:

• Device and usage data: device type, operating system, technical identifiers, usage and crash logs — to operate, improve, and secure the service.
• Location: only if you grant the app location permission (for example, to show nearby branches or set a delivery point on the map). You can revoke the permission in your device settings at any time.
• Notifications: a push-notification identifier used to send you booking updates (via our notifications provider).

WhatsApp verification: at sign-in we send the one-time code (OTP) to your number via WhatsApp, which involves processing your phone number with the messaging service provider.

2. How We Use Your Data

• Creating, verifying, and signing you into your account.
• Executing and managing your bookings and communicating with you about them (notifications, reminders, updates).
• Enabling the Rental Company to perform the rental contract (Section 3).
• Support and responding to your questions and complaints.
• Operating, improving, and measuring the platform and fixing failures.
• Security and preventing fraud and misuse.
• Complying with the law and with requests from competent authorities.

We do not use your data for marketing outside the KIRA platform without your consent.

3. Who We Share Your Data With

• The Rental Company you booked with: it receives your booking details and what is needed to fulfil it (your name, number, booking details, and documents if uploaded for that booking). Its use is limited to fulfilling the booking and the rental contract.
• Technical service providers: hosting, the notifications service, the WhatsApp messaging service, and crash-monitoring tools — they process data on our behalf and only as needed.
• Electronic payment providers: where electronic payment is available and you choose it, payment data is processed directly by the licensed payment gateway — we do not store your card details.
• Official authorities: upon a binding legal request from a competent authority.

We do not sell your personal data to anyone, and we do not share it with rental companies you did not book with.

4. Where Your Data Is Kept

Our data is hosted with providers within the European Union, and some service providers may process data in other countries. In all cases we apply appropriate safeguards, and this policy continues to govern the processing.

5. Retention

We keep your data for as long as your account exists and as needed for the purposes above. After account deletion or when the need ends, we delete the data or anonymize it — retaining what laws require (including financial transaction records) for the statutory periods.

6. Your Rights

Subject to applicable law, you may:

• Access your data and request a copy of it.
• Correct inaccurate data.
• Delete your account and data — from within the app or via the account-deletion page — subject to what the law requires us to retain.
• Withdraw consent where processing is based on it (such as location and notification permissions), without affecting prior processing.
• Object to, or ask us to restrict, particular processing.

To exercise any right, contact us via Section 9; we will respond within a reasonable period.

7. Security

We apply reasonable technical and organizational measures to protect your data — including transport encryption and access controls. No means of transmission or storage is 100% secure, so tell us immediately about any suspicious use of your account.

8. Minors

Our services are directed to persons aged 18 or over, and we do not knowingly collect data from anyone younger.

9. Contact Us

For any privacy question or to exercise your rights: in-app chat, support WhatsApp, or the email address shown on the contact page.

10. Changes to This Policy

We may update this policy as the need arises and will notify you of material changes through the platform a reasonable period before they take effect. Your continued use of the platform after the effective date means you accept the updated version; every version is published with its date.