Privacy policy
Who we are and what this policy covers
Sakudar is a digital service provided by Novanex Studio, operated from the Arab Republic of Egypt, for property owners and heirs in the Kingdom of Saudi Arabia. This policy explains what personal data we collect through sakudar.novanex.app, the platform and the mobile apps, why we collect it, how we protect it and what your rights are. We process your data in line with the Saudi Personal Data Protection Law, issued by Royal Decree No. M/19 dated 9/2/1443 AH, as amended, and its implementing regulations.
The data we collect
Account data: name, email, mobile number and preferred language. Property data you enter: city, district, plan and parcel numbers, deed type, and if you wish the deed number and date, area, share and registration status. Data about heirs and co-owners you add: name, relationship, share and mobile number for sending an invitation. Invoices and tasks you log. The deed photo, if you choose to upload it. Subscription and billing data, without card numbers, which stay with the payment gateway. Limited technical data such as device type and sign-in logs to protect your account. We never ask for a national ID or iqama number, or for Nafath or any government platform login.
Why we use your data
To provide the service you signed up for: matching your properties with official announcements, sending alerts, reminders and the weekly summary, working out deadlines and fee estimates, and letting the people you invite see the file. We use account data for billing, support and protecting the service from abuse. The legal basis is performing our agreement with you, your consent to WhatsApp and email alerts, which you can withdraw at any time, and our legal duties such as tax invoicing. We do not sell your data and we do not use your property data for advertising.
WhatsApp and email alerts
We only send WhatsApp alerts after you agree, at sign-up or in the settings. WhatsApp messages go through the WhatsApp Business platform of Meta, and email through an email provider. A message contains only what is needed: the district, the date and the next step, never the deed number. Urgent alerts are sent between 8 am and 10 pm Riyadh time, and you can set quiet hours or turn off any channel in the settings.
Where your data is kept, and transfers outside the Kingdom
Accounts and property, heir and invoice data are kept in a database run by Supabase on Amazon Web Services servers outside the Kingdom, and the website and platform are served through the Cloudflare network. Data is encrypted in transit and at rest, and each file's data is kept apart from every other file by access rules inside the database itself. Because the service is operated from Egypt and the servers are outside the Kingdom, any transfer of or access to your data from outside the Kingdom follows the Regulation on Personal Data Transfer outside the Kingdom and the safeguards it requires, such as binding contractual commitments with providers, and only to the extent needed to provide the service. We ask for your explicit consent to this when you create your account, in a box separate from accepting the terms, and record the date you gave it. If hosting inside the Kingdom becomes available to us, we will move the data there and update this policy.
Who can see your data
You and the people you invite, each with the role you choose. Our team sees only the minimum needed for support and for reviewing matches. We share data with service providers working for us under confidentiality obligations: hosting and database, WhatsApp and email delivery, the payment gateway and the app stores (Apple and Google) when you buy. We disclose data to anyone else only under a binding legal request, and only what is required.
How we protect your data
We encrypt the connection between your device and our servers, encrypt stored deed photos, separate each account's data with access rules inside the database itself, and limit team access to those who need it. If an incident affects your data, we notify the Saudi Data and AI Authority (SDAIA) within 72 hours of becoming aware of it, as the implementing regulation requires, and we tell you without delay if it could harm you.
Retention and deletion
We keep your data while your account is active. A deleted property or file is removed from the database at once and from backups within 30 days. If you delete your account data in the settings, we delete the properties, heirs, invoices, tasks and files linked to it, keeping only what the law requires, such as tax invoices, and only for the required period.
Your rights
The law gives you the right to know how we process your data, to get a copy of it, to ask us to correct, complete or update it, to ask us to destroy it when it is no longer needed, and to withdraw your consent to alerts at any time. Send your request to support@sakudar.novanex.app from the email on your account and we will reply within 30 days. You may also complain to the Saudi Data and AI Authority if you believe your data was processed against the law.
Data about heirs and other people
When you add an heir's or co-owner's name or mobile number, you confirm that you have a legitimate connection to the property and add only what is needed. We use the mobile number to send the invitation if you ask us to, and never for marketing. Anyone added to a file can ask us to delete their data.
Changes and contact
We may update this policy when the service or the law changes, and we will tell you about any material change by email or in the platform before it applies. Last updated: 28 October 2026. For anything about your data: support@sakudar.novanex.app.