Privacy Policy

Effective Date: January 2026

Last Updated: January 2026


1. Introduction

Welcome to tkana ("we," "our," or "us"). This Privacy Policy explains how tkana, a company registered in the Kingdom of Saudi Arabia, collects, uses, discloses, and protects your personal information when you use our website (tkana.sa), mobile applications (iOS and Android), and services (collectively, the "Services"). By using our Services, you consent to the collection and use of your information as described in this Privacy Policy. If you do not agree with these practices, please do not use our Services. This Privacy Policy complies with the Kingdom of Saudi Arabia's Personal Data Protection Law (PDPL - نظام حماية البيانات الشخصية) and other applicable data protection regulations.

2. Information We Collect

2.1 Account Information

  • Phone number: Required for account registration and authentication via SMS verification
  • Email address: For account recovery and communications
  • Name and business information: To personalize your experience
  • Password or authentication credentials: Secured using industry-standard encryption

2.2 Device Information (Mobile App)

  • Device identifiers: Unique device ID for push notifications
  • Device type and model: iPhone, Android device model
  • Operating system and version: iOS version, Android version
  • App version: The version of tkana app installed
  • Push notification tokens: Device tokens for delivering notifications

2.3 Communication Data

  • Messages: Customer conversations through our platform
  • Templates: Message templates you create or use
  • WhatsApp interactions: Messages sent and received through WhatsApp Business API

2.4 Usage Data

  • Feature usage: Which features you use and how often
  • Session information: Login times, session duration
  • Analytics data: App performance, crash reports, interaction patterns

2.5 Location Data

  • Country/region: Derived from your phone number or IP address
  • We do not collect precise GPS location data

2.6 Information from Third Parties

  • WhatsApp Business API: Customer contact information and message history
  • Authentication providers: Verification data from authentication services

3. How We Use Your Information

3.1 Providing Our Services

  • Create and manage your account
  • Authenticate your identity via phone number verification
  • Deliver push notifications for new messages and updates
  • Process and deliver messages through WhatsApp Business API
  • Enable AI-powered customer service automation (AIDA)

3.2 Improving Our Services

  • Analyze usage patterns to improve features
  • Debug and fix technical issues
  • Develop new features based on user needs

3.3 Communications

  • Send service-related notifications
  • Respond to your inquiries and support requests
  • Send marketing communications (with your consent)

3.4 Legal Compliance

  • Comply with applicable laws and regulations
  • Respond to legal requests from authorities
  • Protect our rights and prevent fraud

4. How We Share Your Information

We do not sell your personal information. We may share your information in the following circumstances:

4.1 Service Providers

We work with trusted third-party service providers who process data on our behalf:

ProviderPurposeData Shared
Authentication providersPhone authentication & SMS verificationPhone number, verification codes
Push notification providersPush notification deliveryDevice tokens, notification content
WhatsApp/MetaBusiness messaging APIMessages, customer contacts
Cloud hosting providersData storage and processingAll service data (encrypted)

4.2 Legal Requirements

We may disclose your information when required by:

  • Saudi Arabian law or regulations
  • Court orders or legal processes
  • Government or regulatory authorities

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

4.4 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information:

  • Encryption: Data encrypted in transit (TLS/SSL) and at rest
  • Access controls: Role-based access to sensitive data
  • Secure authentication: Phone-based OTP verification
  • Regular audits: Security assessments and vulnerability testing
  • Employee training: Data protection and privacy training

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

Data TypeRetention Period
Account informationDuration of account + 2 years after deletion
Message history2 years or as required by WhatsApp policies
Device tokensUntil you uninstall the app or revoke permissions
Usage analytics1 year (anonymized data may be kept longer)
Legal/compliance recordsAs required by Saudi Arabian law

You can request deletion of your data at any time (see Section 8).

7. Your Rights Under PDPL

Under Saudi Arabia's Personal Data Protection Law (PDPL), you have the following rights:

7.1 Right to Access

You can request a copy of the personal information we hold about you.

7.2 Right to Correction

You can request correction of inaccurate or incomplete information.

7.3 Right to Deletion

You can request deletion of your personal information, subject to legal retention requirements.

7.4 Right to Restrict Processing

You can request that we limit how we use your information.

7.5 Right to Data Portability

You can request your data in a structured, machine-readable format.

7.6 Right to Object

You can object to processing of your information for marketing purposes.

7.7 Right to Withdraw Consent

You can withdraw your consent at any time for processing based on consent.

To exercise these rights, contact us at privacy@tkana.sa.

8. International Data Transfers

Your information may be processed in countries outside the Kingdom of Saudi Arabia where our service providers operate. When we transfer data internationally, we ensure appropriate safeguards are in place:

  • Data processing agreements with service providers
  • Compliance with PDPL requirements for international transfers
  • Use of secure, encrypted transmission methods

9. Children's Privacy

Our Services are intended for users aged 18 years and older. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@tkana.sa. We will take steps to delete such information.

10. Push Notifications

10.1 How Push Notifications Work

When you enable push notifications in our mobile app:

  • We register your device with our push notification service
  • We store your push token to send you notifications
  • Notifications include new message alerts and important updates

10.2 Opting Out

You can disable push notifications at any time:

  • iOS: Settings > tkana > Notifications
  • Android: Settings > Apps > tkana > Notifications

Disabling notifications does not delete your account or data.

11. Cookies and Tracking

11.1 Website Cookies

Our website uses cookies to:

  • Remember your preferences
  • Analyze website traffic
  • Improve user experience

11.2 Mobile App Analytics

Our mobile app collects analytics data to:

  • Monitor app performance
  • Identify and fix crashes
  • Understand feature usage

You can opt out of analytics in the app settings.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by:

  • Posting the updated policy on our website
  • Sending you an email or in-app notification
  • Displaying a notice in our mobile app

The "Last Updated" date at the top indicates when changes were made.

14. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

tkana

The Garage, King Abdullah Street AlRaed District, Riyadh Kingdom of Saudi Arabia

Email: privacy@tkana.sa

Phone: +966 55 281 2126

Website: https://tkana.sa

For data protection inquiries, you may also contact our Data Protection Officer at dpo@tkana.sa.

15. Governing Law

This Privacy Policy is governed by the laws of the Kingdom of Saudi Arabia, including the Personal Data Protection Law (PDPL).


© 2026 tkana. All rights reserved.