1Information We Collect

1.1 Information You Provide Directly

• Account details: Full name, email address, phone number, and password when you register.
• Delivery addresses: Street address, city, and any additional delivery instructions.
• Payment information: Encrypted card tokens (we never store raw card numbers); billing details needed to process transactions via our payment provider (HyperPay).
• Order details: Prescription images or notes you attach to an order.
• Support communications: Messages you send to our customer support team.

1.2 Information Collected Automatically

• Device information: Device model, operating system version, unique device identifiers, and push notification tokens.
• Usage data: Pages and features accessed, session duration, search queries, and in-app interactions.
• Location data: Approximate location (city/region) to show relevant pharmacies and delivery options. Precise GPS is only used when you explicitly allow it for store-finding features.
• Log data: IP address, browser type, crash reports, and diagnostic data.

1.3 Information from Third Parties

• Social sign-in: If you sign in with Google or Apple, we receive your name, email address, and profile picture from those providers.
• Payment processors: Transaction status, masked card details, and fraud signals from HyperPay.

2How We Use Your Information

We use the information we collect to:

• Create and manage your account.
• Process orders and facilitate deliveries from partner pharmacies.
• Send order confirmations, delivery updates, and receipts.
• Process payments securely through our payment gateway.
• Respond to customer service inquiries and resolve disputes.
• Send promotional notifications and offers (only with your consent, and you may opt out at any time).
• Improve our app, detect bugs, and prevent fraud or abuse.
• Comply with applicable laws and regulatory requirements in the Kingdom of Saudi Arabia.

3Sharing Your Information

We may share your information with:

3.1 Partner Pharmacies (Chemists)

When you place an order, we share your name, delivery address, and order details with the fulfilling pharmacy so they can prepare and dispatch your order. Pharmacies are contractually bound to handle your data securely and only for order fulfilment.

3.2 Delivery Partners

Your name, phone number, and delivery address are shared with our delivery riders or courier partners solely to complete the delivery.

3.3 Payment Processors

Payment data is processed by HyperPay, a PCI-DSS-compliant payment gateway. We transmit only what is required for transaction processing. HyperPay's own privacy policy governs their data handling.

3.4 Service Providers

We work with trusted third-party vendors (cloud hosting, analytics, push notifications, email delivery) who access your data only to perform services on our behalf and are bound by confidentiality obligations.

3.5 Legal and Regulatory Authorities

We may disclose your information when required by law, court order, or government regulation, or when necessary to protect the rights and safety of Mune App, our users, or the public.

4Data Retention

We retain your personal data for as long as your account is active or as needed to provide services to you. After account deletion:

• Order history and transaction records are retained for 7 years to comply with Saudi Arabian financial and tax regulations (ZATCA requirements).
• Account and profile data is deleted within 30 days of account closure.
• Backup copies may persist for up to 90 days before permanent deletion.

5Your Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete data.
• Delete your account and associated personal data.
• Object to or restrict certain processing activities.
• Withdraw consent for marketing communications at any time via in-app settings or by contacting us.
• Portability: Receive a copy of your data in a structured, machine-readable format.

To exercise any of these rights, please contact us at the details in Section 10. We will respond within 30 days.

6Cookies & Tracking Technologies

Our mobile app does not use browser cookies. We use equivalent technologies such as device identifiers and local storage to:

• Keep you signed in between sessions.
• Remember your preferences (language, default address).
• Measure app performance and diagnose errors.

If you access Mune App through a web browser, we may use session cookies and analytics cookies. You can configure your browser to refuse cookies, but some features may not function correctly.

7Data Security

We implement industry-standard technical and organisational measures to protect your data, including:

• HTTPS / TLS encryption for all data in transit.
• AES-256 encryption for sensitive data at rest.
• Card tokenisation via HyperPay — raw card numbers never touch our servers.
• Role-based access controls so only authorised staff can access personal data.
• Regular security reviews and penetration testing.

No system is 100% secure. If you believe your account has been compromised, please contact us immediately at support@mune.com.

8Children's Privacy

Mune App is not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via in-app notification or email before the changes take effect. Continued use of the app after the effective date constitutes acceptance of the updated policy.

We encourage you to review this page periodically to stay informed about how we protect your information.

10Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to us: