1. Introduction & Overview of ViNi App

Welcome to ViNi, a modern specialty coffee and bakery application operating in the Kingdom of Saudi Arabia. Your privacy and the confidentiality of your personal and financial information are of utmost priority to us. We strictly adhere to applicable data protection regulations and international privacy standards, including Apple's App Store Review Guidelines (specifically Guideline 5.1.1 - Legal - Privacy - Data Collection and Storage) and Apple Pay security guidelines.

This Privacy Policy clearly describes how our application works, what information we collect, why we collect it, how payments are securely processed, how your data is protected, and your unconditional right to access and permanently delete your account and personal records at any time.

2. How the Application Operates

The ViNi app is designed to deliver a swift and convenient coffee ordering experience through the following flow:

• Menu Exploration: Customers can view our coffee beverages, cold brews, and fresh bakery products, selecting desired customizations and sizes.
• Fulfillment Options: Customers select their preferred pickup method:
  1. In-Store Pickup: Collect your order directly from the store counter.
  2. Car Pickup (Drive-thru / Curbside): Receive your order delivered directly to your vehicle outside the store without having to step out.
• Secure Login & Registration: Users sign up or authenticate securely using their Saudi mobile phone number via SMS One-Time Password (OTP) verification.
• Fast & Secure Checkout: Customers pay conveniently and safely using Apple Pay, Mada debit cards, major credit cards, or through our integrated digital in-app wallet balance.
• Real-time Order Tracking: Instant push notifications inform the customer about their order state progression (Under Review, Preparing, Ready for Pickup, Delivered).

3. Information We Collect and Purpose of Collection

We only collect the minimal personal information essential for providing our services and fulfilling your beverage and bakery orders:

• Mobile Phone Number: Used to create and authenticate your account through SMS OTP verification, associate your orders, and reach you regarding order status if needed.
• Name (Optional): Used to personalize your in-app experience and call out your name when serving your coffee in-store or at your vehicle.
• Vehicle Details (Exclusively for Car Pickup): When you choose "Car Pickup", we ask for your vehicle model, color, and license plate number. This data is strictly used by our baristas to locate your parked vehicle and safely hand over your order. We never request vehicle details if you choose in-store pickup.
• Order History: Record of purchased products, timestamps, and order identifiers to display in your order history screen and streamline repeat orders.
• Digital Wallet Balance & Loyalty Points: Stored securely to track earned reward points and in-app wallet credit.
• Device Push Token (FCM Token): An encrypted device token used solely to dispatch real-time status updates concerning your order.

4. Electronic Payments & Apple Pay (Guideline 5.1.1 Compliance)

We treat payment data with the highest degree of security and compliance with international banking standards:

• No Storage of Sensitive Card or Apple Pay Data: ViNi never views, captures, processes, or stores your full credit/debit card numbers, CVV/CVC security codes, or confidential Apple Pay payment tokens on our servers.
• Apple Pay Security & Tokenization: When paying with Apple Pay, Apple employs device-specific Account Numbers and dynamic one-time security codes. Your actual payment card details are never exposed to our application or stored anywhere on our infrastructure.
• Certified Payment Gateways: Payment transactions are handled directly through authorized payment service providers (such as Moyasar) regulated by the Saudi Central Bank (SAMA) and certified under global PCI-DSS Level 1 security standards.
• Transaction Records: ViNi only receives verification confirmation of payment success, an authorization reference ID, and the transaction amount necessary for issuing official electronic tax invoices and attributing loyalty points.

5. Data Security & Technical Safeguards

We employ robust enterprise-grade security protocols to protect your information from unauthorized access, alteration, or disclosure:

• End-to-End Transport Encryption: All data transmissions between the ViNi mobile application and our backend servers are encrypted using high-grade HTTPS / TLS 1.3 encryption.
• Database Row-Level Security (RLS): Our database implements strict server-side Row Level Security policies, ensuring that each authenticated customer has access strictly to their own profile, cars, and order history.
• Protected Infrastructure: All databases, credentials, and API communication adhere to rigorous access control and monitoring.

6. Third-Party Data Sharing

We do not sell personal data. Limited necessary data is securely shared strictly with vetted service providers essential for operating the application:

• Payment Processors & Apple Pay: To execute transactions securely without retaining card credentials.
• SMS Gateways: To deliver verification OTP codes during login.
• Push Notification Services: To dispatch real-time order notifications to your device.

7. User Rights & Complete Account Deletion

ViNi empowers you with comprehensive control over your personal data:

• Access and Updates: You can review your previous orders, adjust your profile name, and manage your saved vehicles directly in the app.
• Notification Preferences: You can toggle or disable push notifications at any time via your device operating system settings.
• Permanent Account Deletion: You have the absolute right to delete your account and all associated personal data immediately from within the app by going to: (More → Delete Account), or by contacting our support team via email. Upon confirmation, your personal identity records, saved cars, favorites, saved card tokens, wallet transactions, and order history will be permanently erased from our production servers.

8. Local Device Storage

The application maintains local cached data on your device to ensure quick startup, faster menu loading, and offline responsiveness. All localized cache files are completely purged upon signing out to prevent cross-account data leakage.

9. Children's Privacy

ViNi is not intended for or marketed to children under the age of 13. We do not knowingly collect personal information from minors. If we learn that personal information of a child has been collected, we will take immediate steps to delete that account and data.

10. Contact Us & Official Privacy Link

If you have any questions, inquiries, or feedback regarding this Privacy Policy or our compliance with Apple Pay guidelines, please reach out to us at our official contact email: