Privacy Policy

Last updated: 13 August 2026

1. Who we are

Family Day Resort operates the Family Day mobile application and familyday-sa.com. This policy explains how we collect, use, disclose, retain, and protect personal data when you use either service.

2. Data we collect

Account and contact data: your name, email address, phone number, profile image, login credentials in protected form, and identifiers received when you sign in with Google or Apple.

Reservation and transaction data: reservation dates, selected property and services, guest and contact details, national ID when needed for the rental contract, invoice amount, payment status, payment reference, cancellation or refund information, and communications with us. Card details are entered with and processed by our payment provider; we do not store full payment-card numbers.

App, device, and technical data: an Expo push-notification token, the customer ID linked to that token, notification preferences, IP address, browser or device information, server logs, and diagnostic/security data.

Usage and marketing data: pages and features used, cookies, campaign parameters, and advertising click identifiers such as ScCid, ttclid, and fbclid. With your choice, the website loaded in the app may use Google Tag Manager and Snapchat Pixel and may send purchase-conversion events to Snapchat, Meta/Facebook, and TikTok. Those events may contain a reservation or customer identifier, purchase value, IP address, browser/device information, campaign identifiers, and email or phone in hashed form.

3. How we use data

We use personal data to create and secure accounts; provide availability, reservations, contracts, payments, invoices, cancellations, and refunds; send booking and push-notification updates; provide customer support; prevent fraud and misuse; comply with legal and accounting obligations; improve performance and reliability; and measure or personalize marketing where permitted.

4. When we share data

We share only the data needed with service providers that help us operate the service, including cloud hosting and database providers, MyFatoorah and other payment services, Expo push notifications, Google and Apple sign-in, email and messaging providers, and reservation/accounting systems. When you allow analytics and marketing, relevant data may also be shared with Google, Snapchat, Meta/Facebook, and TikTok for analytics, advertising measurement, and conversion attribution. We may also disclose data when required by law, to protect users or our rights, or as part of a business reorganization.

Some providers may process data outside Saudi Arabia. Where applicable, we use contractual and organizational safeguards required by law.

5. Retention and deletion

We retain data only for as long as needed for the purposes above and for applicable legal, tax, accounting, dispute, and fraud-prevention periods. Retention periods vary by record type.

You can request deletion from the in-app account menu or from our public account deletion page. You may also contact us to request access, correction, or deletion. We delete the account and associated personal data, including linked push-notification tokens, unless we must retain specific transaction, tax, fraud-prevention, dispute, or legal records. Any retained record is restricted to that purpose and kept only for the required period. Backup copies are removed on their normal secure rotation schedule.

6. Your choices and rights

You can deny or disable notifications in your device settings. Google Tag Manager, Snapchat Pixel, and Snapchat, Meta/Facebook, and TikTok conversion reporting remain off until you make an affirmative choice in our privacy notice; you can change that choice using the Privacy choices button. Subject to applicable law, you may request access, correction, deletion, restriction, or a copy of your personal data and may withdraw consent where processing relies on consent.

7. Security and children

We use reasonable technical and organizational safeguards, including access controls and encrypted network connections. No method of transmission or storage is completely secure.

The service is intended for adults who can make a reservation and is not directed to children under 13. We do not knowingly collect a child's personal data without authorization from a parent or guardian. Contact us if you believe a child provided data improperly.

8. Updates and contact

We may update this policy when our practices or legal obligations change. We will publish the revised date on this page and provide additional notice when required.

For privacy questions or requests, email support@familyday-sa.com or call +966 55 615 6693. Controller: Family Day Resort, Saudi Arabia.