Sadaraصدارة

Sadara for Software Development

Privacy policy

Version 0.3 — draft · Last updated 14 October 2026

Draft for legal review This text is a working draft prepared to satisfy the App Store and Google Play requirement for a hosted privacy policy. It must be reviewed and approved by qualified counsel, and reconciled against the personal-data inventory produced from the application codebase, before the app is submitted. Remove this notice once counsel has signed off.

1. Who we are

Sadara is operated by Sadara for Software Development, a business licensed by the Ministry of Commerce and Industry in the State of Qatar under licence number 337600. In this policy, "we" and "us" mean Sadara for Software Development, and "you" means a person using the Sadara mobile application.

For anything relating to your personal data, contact privacy@sadarasoftware.com.

2. What we collect

We collect only what the app needs to work.

DataWhy we hold it
Email addressTo create your account, verify it, and let you reset your password.
Display name and profile photoSo other players in your league can recognise you. The photo is optional.
League and match activityFixtures, results, ratings, and standings for the leagues you belong to.
MessagesChat and photos you send in league conversations.
Sign-in recordsEach sign-up and sign-in is recorded, with the time and the device used — see section 3.
Crash reportsDevice model, operating system version, app version, and diagnostic data when the app fails, so we can fix it.
Push notification tokenAn identifier for your device, used solely to deliver notifications to it.

We do not collect your phone number, precise location, contacts, or payment details. The app does not request microphone access.

3. Sign-in and device records

For security, and to help us investigate problems reported by players, we record each sign-up and sign-in to an account. Each record holds:

These records are held in our own database and are not shared with any other party. The IP address and client identification string are not accessible through our administration tools.

4. How we use it

We do not sell personal data, and we do not use your data for advertising. We do not currently use product analytics in the app.

5. Who processes data on our behalf

We use established service providers to run parts of the app. They act on our instructions and may not use your data for their own purposes.

ProviderRoleProcessed in
SupabaseDatabase, authentication, and file storageMumbai, India
StreamChat messaging infrastructureMumbai, India
BrevoVerification, confirmation and password-reset emailEuropean Union
Google FirebasePush notification delivery and crash reportingGoogle infrastructure
ExpoApplication builds and push notification delivery, and through it Apple and Google notification servicesProvider infrastructure

Crash reporting receives the device model, operating system version, its own installation identifier, and a one-way hashed account identifier. It does not receive your email address, name, or IP address, and the hash cannot be used to look you up in our records.

6. Where your data is held

Our database, authentication, file storage and chat infrastructure are hosted in Mumbai, India. Email is processed in the European Union. Crash reporting and push notification delivery run on Google, Apple and Expo infrastructure, which may process data in other countries.

This means personal data is transferred outside Qatar. Where that happens, we take steps to see that it remains protected to a standard consistent with Law No. 13 of 2016 on Personal Data Privacy Protection.

7. How long we keep it

DataRetention
Account dataFor as long as your account is open.
Deactivated accountsPermanently erased 90 days after deactivation.
Account deletion requestsPersonal data removed within 30 days.
Sign-in and device records12 months, and removed when an account is deleted.
Crash reportsDeleted after 90 days, from live systems and backups alike.

Messages you have sent to a league conversation may remain visible to that league after your account is deleted, since they form part of other people's conversations. Match results you took part in also remain, so that league history and past standings stay correct, but they are no longer shown under your name.

8. Your rights

Under Qatari data protection law you may:

Email privacy@sadarasoftware.com and tell us what you would like. We respond within 30 days.

9. Security

Data is encrypted in transit and at rest. Access to production systems is limited to people who need it and is protected by two-factor authentication. Access rules in our database restrict each player to their own data and the leagues they belong to. No system is perfectly secure, but if a breach affects your personal data we will notify you and the relevant authority as the law requires.

10. Children

Sadara is not intended for children under 13, and we do not knowingly collect their personal data. If you believe a child has given us their data, contact us and we will delete it. [Confirm the intended minimum age with counsel — it affects the age rating declared to both app stores.]

11. Changes to this policy

If we change this policy we will update the date at the top of this page, and where the change is significant we will tell you in the app before it takes effect.

12. Contact

Sadara for Software Development
Doha, State of Qatar
privacy@sadarasoftware.com