1. Introduction

Welcome to Flow – the rewards app that allows users to earn points by visiting participating locations, scanning QR codes, and engaging with the Flow ecosystem. Flow Rewards is committed to protecting your personal data in accordance with the Personal Data Protection Law (PDPL) in Saudi Arabia, international transparency standards, and Apple App Store Guidelines (Section 5.1).

2. Data We Collect

2.1 Personal Data Provided by the User

• Full name
• Email address (required)
• Mobile number (for registration and verification)
• Date of birth (to confirm age ≥ 18)
• Nationality and gender
• City and address
• Profile picture (optional)

2.2 Device & Technical Data

• Device type and operating system version
• Device identifiers
• IP address and network information
• App version and crash logs

2.3 Location Data (GPS)

We collect your real-time location only after receiving explicit permission, and only for purposes such as verifying QR code scans and preventing fraudulent activity. Location is collected only while the app is being actively used.

2.4 Usage & Activity Data

• QR codes scanned and points earned
• Leaderboard participation and rankings
• Friend referral activity
• Redemption history and vouchers
• In-app preferences and interactions

3. Earning Points

• Visiting participating stores: Earn points by scanning the Flow QR code.
• Inviting friends: Referral points are granted to both users.
• Profile completion: One-time bonus points.
• Points validity: Points expire one year from the date of earning.

4. Redeeming Points

4.1 Monthly Leaderboard Competition

• Participation is optional and requires explicit consent.
• Points are transferred to the monthly competition wallet upon joining.
• The winner is determined automatically based on total points at the end of the cycle.
• Non-winning users retain their ranking and points for the next cycle.
• Points used for entry are non-refundable.

4.2 Instant Redemption of Digital Vouchers

• Points can be redeemed for digital vouchers within the Rewards section.
• Each voucher has a fixed point cost.
• All redemptions are final and non-refundable.

Disclaimer: Apple Inc. is not a sponsor or participant in any Flow rewards or competitions.

5. How We Use Your Data

• Account creation, operation, and maintenance
• Issuing, tracking, and redeeming points and rewards
• Fraud prevention (such as fake location or bot detection)
• Personalized content and offers (with your consent)
• Performance analytics and feature improvement

6. Legal Basis for Processing

• Performance of a contract (providing the Flow service)
• User consent (location data, marketing updates, leaderboard participation)
• Legal obligation (compliance with regulations)

7. Data Retention & Deletion

• Data is retained as long as the user account remains active.
• Users may permanently delete their account directly from the in-app settings page.
• When deletion is confirmed, the following are permanently erased:
  • All personal data
  • Remaining points
  • All vouchers, rewards, and previous redemptions
  • Usage history and activity records
• Deleted data cannot be restored once the process is completed.
• Flow may retain aggregated, anonymous data for analytical purposes only.

8. Data Sharing

• Flow does not sell user data to any third party.
• Limited data may be shared with:
  • Partner stores for reward processing
  • Service providers (hosting, analytics, fraud prevention)
  • Government authorities when required by law

9. Security Measures

• Data encryption during transfer and storage
• Two-factor authentication (2FA)
• Fraud monitoring and anomaly detection
• Infrastructure protection against unauthorized access

10. User Rights

• Access and update personal data
• Withdraw consent for location or marketing permissions
• Delete the account permanently from settings
• Control device permissions (camera, location, notifications)

11. Children’s Privacy

Flow is not intended for users under 18 years old. If a minor account is detected, it will be deleted along with all associated data.

12. Data Transfer

User data may be processed and stored in secure data centers within Saudi Arabia or in approved international locations that meet equivalent protection standards.

13. Policy Updates

This policy may be updated from time to time. Significant updates will be communicated to users via the app or email. Continued use of the app constitutes acceptance of the updated policy.

14. Contact Information

Flow Rewards Company – Riyadh, Saudi Arabia
Email: info@flow-rewards.com