Privacy Policy
This policy explains what the Impact Studio mobile application collects, why, who it is shared with, and exactly how long it is kept.
1. Who We Are and Which App This Policy Covers
This Privacy Policy is published by Elitevps, the developer name under which the mobile application Impact Studio is listed on Google Play. Elitevps is the trading identity of COMPANY CODE AL-RAKHTARAYEH FOR TRADING, the legal entity that owns and publishes the application. In this policy, "we", "us" and "our" refer to that entity.
This policy applies specifically and exclusively to the Impact Studio mobile application, which serves the Impact Salon business at impactksa.com and is published by the developer identified below:
| Application name | Impact Studio |
| Developer name (as listed on Google Play) | Elitevps |
| Legal entity | COMPANY CODE AL-RAKHTARAYEH FOR TRADING |
| Google Play package name | com.gexpo.impact |
| Google Play listing | play.google.com/store/apps/details?id=com.gexpo.impact |
| Apple App Store ID | 6737921913 |
| Registered address | Building No. 5262, Al Imam Saud Ibn Abdul Aziz Road, Al Nakhil District, P.O. Box 12381, Riyadh 12381, Kingdom of Saudi Arabia |
| Contact email | [email protected] |
| Contact phone | +966 53 851 8904 |
| Website | https://impactksa.com |
The application name Impact Studio, the developer name Elitevps, the legal
entity COMPANY CODE AL-RAKHTARAYEH FOR TRADING, the package name
com.gexpo.impact, and the contact email [email protected] stated above all
match, exactly and without variation, the details published on our Google Play store listing.
2. Information We Collect
Information you provide directly
- Full name
- Email address
- Mobile phone number (verified by a one-time SMS code)
- Date of birth
- Gender
- Password (stored by us only in a hashed, irreversible form)
- Profile photo (optional — only if you choose to upload one)
- Delivery or service addresses, including country and postal code (optional)
- VAT / tax number (optional, for business invoices)
Information generated when you use the app
- Bookings, appointments and their status
- Orders, purchases and their contents
- Wallet balance, loyalty points, and gift cards you send or receive
- Transaction and invoice history
- Feedback and support messages you submit
Information collected automatically
- Device model and operating system version
- App version number
- Language preference
- A Firebase Cloud Messaging (FCM) push notification token, used only to deliver notifications to your device
- Crash diagnostics (via Firebase Crashlytics) when the app crashes — this includes the device model, OS version, and a technical stack trace
Device permissions we request
- Camera and photo library — only when you choose to upload a profile picture. We access these only at the moment you tap to select or take a photo.
- Notifications — to send you booking reminders and order updates. You may decline or revoke this at any time.
3. Information We Do NOT Collect
To be explicit:
- We do not collect your location. The app does not request or use GPS or device location data.
- We do not collect your advertising ID. The Android advertising ID permission is explicitly removed from the app.
- We do not use advertising or analytics tracking SDKs, and we do not build advertising profiles about you.
- We never see, handle, or store your payment card details. See section 5.
- We do not access your contacts, microphone, SMS messages, call logs, or files on your device.
- We do not sell your personal data to anyone, ever.
4. How We Use Your Information
We use your information only to:
- Create and manage your account and authenticate you
- Process, confirm, and deliver your bookings and orders
- Process payments and issue invoices and receipts
- Operate the wallet, loyalty points, and gift card features
- Send you service notifications relating to your bookings and orders
- Respond to your support requests and feedback
- Diagnose crashes and improve the stability of the app
- Comply with our legal, tax, and regulatory obligations in the Kingdom of Saudi Arabia
5. Payments
Payments in the app are processed by PayTabs, a licensed third-party payment gateway, on its own secure hosted payment page.
Your card number, expiry date, and CVV are entered directly into PayTabs' hosted page and are transmitted directly to PayTabs. They never pass through, and are never stored by, the Impact Studio app or our servers. We receive only the payment result (success or failure) and a transaction reference.
PayTabs' handling of your payment data is governed by its own privacy policy: https://www.paytabs.com/en/privacy-policy/
6. Sharing Your Information
We share your data only with the following parties, and only for the purposes stated:
| Recipient | What is shared | Purpose |
|---|---|---|
| PayTabs | Payment amount, transaction reference, and the card details you enter on their page | Processing your payment |
| Google Firebase (Cloud Messaging & Crashlytics) | Push token; crash diagnostics with device model and OS version | Delivering notifications; diagnosing app crashes |
| Competent authorities in Saudi Arabia | Only what is legally required | Compliance with a valid legal or regulatory obligation |
We do not share your personal data with any other third party. We do not sell, rent, or trade your personal data.
7. Data Retention
We retain your personal data only for as long as necessary for the purposes described in this policy, as follows:
| Data category | Retention period |
|---|---|
| Account profile data (name, email, phone, date of birth, gender, profile photo, addresses) | Retained for as long as your account remains active. Deleted within 30 days of your account deletion request, except where a longer period is required below. |
| Bookings, orders, transactions, invoices, and tax records | Retained for 6 years from the date of the transaction, as required by the tax, e-invoicing, and commercial record-keeping regulations of the Kingdom of Saudi Arabia. After this period they are permanently deleted. This obligation applies even after account deletion; such records are dissociated from your profile and kept solely for legal compliance. |
| Wallet balance, loyalty points, and gift card records | Retained for as long as your account is active. On deletion, any outstanding balance is settled first, then the records are retained only as part of the transaction records described above. |
| Support messages and feedback | Retained for 2 years from the date of your last correspondence, then deleted. |
| Crash diagnostics (Firebase Crashlytics) | Retained for a maximum of 90 days, then automatically deleted by Google. |
| Push notification token (FCM) | Deleted immediately when you log out, uninstall the app, or delete your account. |
| Encrypted backups | Overwritten on a rolling cycle and fully purged within 90 days. |
| Data cached locally on your device | Stored only on your device and permanently erased when you log out or uninstall the app. |
When a retention period expires, the data is permanently and irreversibly deleted or anonymised.
8. Deleting Your Account and Your Data
You can delete your account directly inside the Impact Studio app at any time, from the account settings screen. No email or request form is required.
You may alternatively request deletion by emailing [email protected].
When you delete your account:
- Your profile, contact details, addresses, profile photo, and saved preferences are permanently deleted within 30 days.
- Your push notification token is deleted immediately.
- Data cached on your device is erased immediately.
- Your financial and tax records are retained only for the 6-year period legally mandated in Saudi Arabia, as described in section 7, and are used for no purpose other than legal compliance.
9. Your Rights
You have the right to:
- Access the personal data we hold about you
- Correct any inaccurate data — most fields are editable directly in the app
- Delete your account and personal data (see section 8)
- Withdraw consent for notifications, camera, or photo access at any time through your device settings
- Object to how we process your data
- Lodge a complaint with the Saudi Data & Artificial Intelligence Authority (SDAIA)
To exercise any of these rights, contact [email protected]. We will respond within 30 days.
10. Data Security
We protect your data using:
- Encryption of all data in transit using HTTPS/TLS
- Irreversible hashing of passwords — we cannot read your password
- Token-based authentication with automatic session expiry
- Access controls limiting staff access to personal data on a need-to-know basis
- Delegation of all card handling to PCI-DSS compliant PayTabs
Your data is stored on secure servers. No method of transmission or storage is completely secure; while we work to protect your data, we cannot guarantee absolute security.
11. Children's Privacy
Impact Studio is not directed at children under 13. We do not knowingly collect personal data from children under 13. If we learn we have collected such data, we will delete it promptly. If you believe a child has provided us data, contact [email protected].
12. Changes to This Policy
We may update this policy from time to time. Material changes will be announced in the app and the "Last updated" date above will be revised. Continued use of the app after a change constitutes acceptance.
13. Contact Us
For any question or request regarding this policy or your personal data:
- Developer: Elitevps
- Legal entity: COMPANY CODE AL-RAKHTARAYEH FOR TRADING
- Application: Impact Studio (
com.gexpo.impact) - Email: [email protected]
- Phone: +966 53 851 8904
- Address: Building No. 5262, Al Imam Saud Ibn Abdul Aziz Road, Al Nakhil District, P.O. Box 12381, Riyadh 12381, Kingdom of Saudi Arabia
- Website: https://impactksa.com
Impact Studio · com.gexpo.impact
Elitevps — COMPANY CODE AL-RAKHTARAYEH FOR TRADING
[email protected]