Privacy Policy — Mudarj Al-Anabi (English)

Last updated: 26 August 2026 Data controller: Mudarj Al-Anabi — Doha, Qatar ("Mudarj", "we"). Contact: info@mudarajalanabi.qa

This policy covers the Mudarj Al-Anabi mobile app (iOS/Android) and the website mudarajalanabi.qa. We process personal data in accordance with Qatar's Law No. 13 of 2016 on the Protection of Personal Data Privacy ("PDPPL").

1. Data we collect

a. Account & membership data: full name, email, phone number, gender, nationality category (Qatari / children of Qatari mothers / born in Qatar / resident), and your national ID number — only when you apply for a membership card or book a ticket, never at basic sign-up. We may request a photo of your ID card for identity verification; the image is deleted after verification (see §6).

b. Tickets & events: your bookings, match, seat/section, reference code, and delivery status.

c. Trips & chat: trip enrollment, your group, check-in status, and messages you send in trip group chats. Your messages are visible to your group members and to Mudarj moderators, and are subject to moderation under our terms of use.

d. Loyalty & polls: points balance and history, tier (Bronze/Silver/Gold), and poll votes.

e. Device & notifications: push notification token (FCM), device model and OS, app version, device language.

f. Diagnostics & analytics: crash reports and aggregated usage statistics used to improve the app, via Google Firebase (Crashlytics/Analytics). You can turn this off at any time in the app's Settings.

What we do NOT collect: no precise location, no contacts, no photos (other than the ID image when requested), no advertising identifiers, and the app contains no ads.

2. Why we use your data (purposes & legal basis)

We do not sell your personal data, and we do not share it with third parties for advertising or marketing.

3. Sharing

We share data only as strictly needed with:

• Technical service providers acting on our behalf: Google (Firebase) — push notifications, crash reporting and analytics, and the phone-number verification that sends your sign-in code from the app; Twilio, which delivers verification codes over WhatsApp or SMS on the paths that use it; and Hostinger for hosting and email. They process data only under our instructions.
• Match organizers / stadium authorities where required to validate tickets and stadium entry.
• Public authorities where the law requires it.

4. International transfers

Some data (e.g., push tokens, crash reports) may be processed on our providers' servers outside Qatar. We transfer data only with appropriate safeguards, consistent with the PDPPL.

5. Security

We apply appropriate technical and organizational measures, including: encrypted connections (HTTPS), encryption at rest for sensitive data (including national ID numbers), signed QR codes that contain no personal data, least-privilege staff access, and audit logs for administrative actions.

6. Retention

7. Your rights

Under the PDPPL you have the right to: access your data and obtain a copy; correct inaccurate data; delete your data (right to erasure); withdraw consent at any time (e.g., disable notification categories in Settings); object to certain processing; and lodge a complaint with Qatar's data protection authority (Compliance and Data Protection Department — Ministry of Communications and Information Technology).

Account deletion: delete your account in-app via Profile → Delete Account, or at mudarajalanabi.qa/delete-account. On deletion we revoke login tokens and push tokens and delete your data per the retention table above.

Contact for any of these rights: info@mudarajalanabi.qa — we respond within 30 days.

8. Children

The app is not directed at children under 13, who may not create accounts. When booking child-category tickets, the parent/guardian provides the child's data and consents to its processing for that purpose only.

9. Notifications

Notifications are optional and require your OS-level permission. Each category (tickets, chants, news, trips) can be controlled in app Settings; the app works without notifications.

10. Website

The website uses essential cookies only, and no advertising trackers. The contact form collects your name, email, and message so we can reply.

11. Changes to this policy

We may update this policy from time to time. For material changes we will notify you in the app before they take effect and, where required, ask for renewed consent.

12. Contact

Mudarj Al-Anabi — Doha, Qatar Email: info@mudarajalanabi.qa

*In case of any conflict between the Arabic and English versions, the Arabic version prevails.*