1. Introduction
Welcome to Flow, a mobile application that rewards users for visiting destinations, exploring partner merchants, and engaging with the Flow community.
Your privacy matters. This Privacy Policy explains how we collect, use, share, and protect your personal data in line with the Kingdom of Saudi Arabia’s PDPL, international transparency best practices (GDPR principles), and Apple App Store Review Guidelines (Section 5.1 – Privacy). By using Flow, you consent to this Policy. If you do not agree, please discontinue use of the app.
2. What Information We Collect
2.1 Personal Information You Provide
- Full Name
- Email Address
- Mobile Number
- Date of Birth
- Nationality, Gender
- City, Address
- Nickname
- Profile Photo (optional)
2.2 Device & Technical Information
- Device type, OS version, unique device IDs/advertising IDs
- IP address and network information
- App version, crash logs, diagnostics
2.3 Location Data
Real-time GPS location used strictly for QR scan validation and fraud prevention, collected only with explicit user permission and while the app is in use.
2.4 Usage & Activity Data
- QR scans and points earned
- Leaderboard participation and ranking
- Referrals and friend connections
- Redemption history and voucher claims
- In-app interactions and preferences
3. How Users Earn Points
- Visiting Partner Merchants: After registration and profile completion, explore participating merchants and earn points by visiting stores and scanning the Flow QR code displayed in-store.
- Inviting Friends: Each user has a unique personal QR code. When two users scan each other’s codes, both receive referral points.
- Profile Completion Bonus: A one-time points bonus is granted after fully completing your profile with valid information.
Point Validity: Each point remains valid for one (1) year from the earning date and then expires automatically.
4. How Users Redeem Points
4.1 Leaderboard Grand Prize (Opt-In)
- Participation is optional and requires explicit consent.
- By joining, your current wallet points are redeemed and locked for the monthly competition cycle.
- At countdown end, the highest-scoring user is automatically selected as the winner.
- Non-winners retain their ranking position and accumulated score for the following month’s cycle.
- Points redeemed for entry cannot be withdrawn/refunded.
4.2 Instant E-Voucher Redemption
- Redeem points for digital e-vouchers in the Rewards section; each voucher has a defined point cost.
- Redemptions are instant, final, and non-refundable.
Notice: Apple Inc. is not a sponsor, administrator, or participant in any Flow rewards or contests.
5. How We Use Your Information
- Account creation, maintenance, and security
- Issuing, tracking, and redeeming points/rewards
- Fraud prevention (e.g., GPS spoofing/bot detection)
- Personalization of offers and in-app content (if opted in)
- App analytics, performance, and feature improvements
6. Legal Basis for Processing
- Contractual necessity – to provide Flow services
- Consent – for location, marketing, and leaderboard participation
- Legal obligation – to comply with applicable laws
7. Data Retention & Deletion
- We retain personal data while your account remains active.
- You may request account and data deletion by emailing info@flow-rewards.com; requests are processed within 30 days.
- Anonymized/aggregated data may be retained for analytics.
8. How We Share Information
We do not sell personal data. Limited data may be shared with:
- Merchants & Partners – to process rewards
- Service Providers – hosting, analytics, fraud monitoring
- Authorities – where required by law
9. Security Measures
- Encryption in transit and at rest (e.g., AES-256)
- Two-Factor Authentication (2FA)
- Anti-fraud monitoring and anomaly detection
10. Your Rights
- Access and correct your data in the app
- Withdraw consent for location/marketing at any time
- Request account deletion
- Control device-level permissions (location, camera, notifications)
11. Children’s Privacy
Flow is not intended for users under 18. If a minor is identified, the account and data will be deleted promptly.
12. International Transfers
Data is processed/stored in secure KSA-based or equivalent data centers with appropriate safeguards.
13. Policy Updates
We may update this Policy and will notify users via in-app notice or email when changes are material. Continued use constitutes consent to the updated Policy.
14. Contact Us
Flow Rewards Company – Riyadh, KSAEmail: info@flow-rewards.com