Markabat Jasir Company ("Jaser", "we") operates the Jaser rider app and the Jaser Captain driver app. This policy explains what personal data those apps collect, why, who it is shared with, where it is stored and what you can do about it.
It is written to the Saudi Personal Data Protection Law (PDPL) and its Implementing Regulations. Where this English text and the Arabic text differ, the Arabic text governs.
1. Who is responsible
Markabat Jaser Company is the data controller.
| Entity | Markabat Jaser Company — a limited liability company |
| Licence | 20/00001153, issued by the Transport General Authority, Jeddah |
| Commercial registration | 7054231555 |
| VAT number | 3147705204 |
| National address | 2934 Industrial District 1, 23793, Jeddah, Kingdom of Saudi Arabia |
- Privacy enquiries and rights requests: privacy@markabatjaser.com
- General support: support@markabatjaser.com · +966 56 003 5078
This policy is complementary to our Terms of Service; clause 18 of those Terms governs data protection and points here for the detail.
2. What we collect
Everyone
| Data | Why we hold it |
|---|---|
| Mobile number | It is your account identifier. Sign-in is a one-time code sent by SMS; we do not use passwords. |
| Full name | Shown to the other party in a trip so you can recognise each other. |
| Email address (optional) | Receipts and account notices, when you give one. |
| Preferred language | To show the app and notifications in Arabic or English. |
| Date you accepted these terms, and which version | To prove consent and to ask again when the terms change. |
| Device push token | To notify you about a booking. Issued by Apple or Google; it is not a device identifier we can read. |
| IP address, app version, device model, error logs | Security, abuse prevention and fixing faults. |
If you book rides (rider app)
| Data | Why we hold it |
|---|---|
| Pickup and drop-off addresses and coordinates | To find you a driver, price the trip and guide the driver. |
| Saved locations you create ("Home", "Work") | Convenience. You can delete them at any time. |
| Profile photo, if you add one | Shown to your driver. |
| Trip history — times, distance, duration, fare, VAT, vehicle tier | Receipts, disputes, and statutory tax records. |
| Card brand, last four digits, expiry, and a payment token | To let you pay without re-entering the card. See section 5 — we never receive your full card number. |
| Messages you send the driver in the in-app chat | So the two of you can coordinate pickup, and so we can investigate a report. |
| Ratings and comments you leave | To maintain driver quality. Drivers see the stars and the comment but never who wrote it. |
If you drive (driver app)
| Data | Why we hold it |
|---|---|
| National ID or Iqama number | Identity verification and the regulatory ride manifest. |
| IBAN | To pay you your earnings. |
| Driving licence type and a photo of the licence | To confirm you are entitled to carry passengers. |
| Profile photo | Shown to riders. |
| Vehicle details and registration document (istimara) | To confirm the vehicle is roadworthy and correctly registered. |
| Your location while you are online, and throughout a trip | To offer you nearby bookings, to show the rider where the car is, and to give you turn-by-turn navigation. We do not collect your location while you are offline. |
| Trip, earnings and settlement records | To pay you correctly and to meet tax obligations. |
| Your affiliation with a transport institution, if any | To route your earnings and to let your employer manage its fleet. |
If you drive for a transport company registered on Jaser, that company can see your trips, status and earnings attributable to its fleet.
3. How we use your data
- To operate the service: match riders and drivers, price and record trips, process payment, and deliver the in-app chat and notifications.
- To keep people safe: verify driver documents, investigate reports about a rider or a driver, and act on ratings flagged for review.
- To meet the law: keep ride, invoice and settlement records for the periods Saudi transport and tax rules require.
- To improve the service: aggregate, non-identifying analysis of demand and reliability.
We do not sell your personal data, and we do not use it for third-party advertising.
4. Location, specifically
- Riders. We use your location only while you are choosing a pickup point or have an active booking, so that the map shows where you are and the driver can reach you.
- Drivers. While you are set to online, the app reports your position so the dispatcher can offer you nearby work and so a matched rider can watch the car approach. During a trip, the driver app may use location in the background to keep turn-by-turn navigation running when the screen is off. Going offline stops the reporting.
You can revoke location permission in your device settings at any time. The apps will still open, but booking and driving cannot work without it.
5. Payments — what we never see
Card payments are processed by Moyasar, a payment provider licensed in Saudi Arabia.
When you add a card, the card number and CVC are sent from your device straight to Moyasar and are never transmitted to, logged by, or stored on a Jaser server. What we receive back and keep is the card brand, the last four digits, the expiry date and an opaque token that lets us charge that card again. That is all we can see, and it is all we can give anyone else.
6. Who else sees your data
| Recipient | What they receive | Why |
|---|---|---|
| Your driver or your rider | First name, profile photo, pickup and drop-off, and the chat thread for that trip | To complete the trip |
| Taqnyat | Your mobile number | To deliver the sign-in code by SMS |
| Moyasar | Your card details, sent directly from your device | To take payment |
| Google Maps Platform | Pickup and drop-off coordinates and search terms | Routing, distance and fare estimation, address search, driver navigation |
| Apple Push Notification service / Firebase Cloud Messaging | Your push token and the notification text | To deliver notifications |
| Hetzner Online GmbH | Hosting of the servers this data sits on | Infrastructure |
| Competent authorities | Only what the law requires, on a lawful request | Legal obligation |
Chat messages may be machine-translated so that a rider and a driver who do not share a language can communicate. This feature is switched off at the time of writing; if it is switched on, the message text is sent to Google Cloud Translation for that purpose.
7. Where your data is stored
Jaser's servers are operated by Hetzner Online GmbH in Nuremberg, Germany. Your personal data is therefore stored and processed outside the Kingdom of Saudi Arabia, in the European Union.
We tell you this plainly because you are entitled to know where your data lives, and because PDPL places conditions on transferring personal data outside the Kingdom. If and when the service moves to hosting inside the Kingdom, this section will be updated and the change announced in the apps.
8. How long we keep it, and what deletion does
You can delete your account from inside either app: Profile → Delete account. It is also explained at /legal/account-deletion/.
Deletion is immediate and cannot be undone. It works by anonymising you in place rather than by erasing every row, because Saudi transport and tax rules require the underlying trip and financial records to survive.
Removed or blanked on deletion: your name, email, profile photo, saved locations, stored payment methods and their tokens, push tokens and all active sessions. For drivers: national ID or Iqama, IBAN, licence and profile photographs, vehicle registration documents and the stored location trail — including the historical audit copies of those fields. Your mobile number is replaced with a non-identifying placeholder, which also frees the number should you ever wish to register again.
Retained, and why: the trip log, invoices, payment transactions and settlement records, because tax and transport regulation require them; the regulatory ride manifest, including the driver identity snapshot the regulator requires on it; and ratings and chat messages, which never carried the rider's identity to begin with and now point at an anonymised account.
If money is owed to you as a driver at the moment you ask to delete, we tell you the amount before you confirm.
9. Your rights
Under PDPL you may ask us to:
- tell you what personal data we hold about you, and give you a copy;
- correct anything inaccurate;
- delete your data, subject to the statutory retention described above;
- withdraw a consent you previously gave;
- explain how your data is processed.
Write to privacy@markabatjaser.com and we will respond within the period the Regulations allow. If you are not satisfied, you may complain to the Saudi Data & AI Authority (SDAIA).
10. Security
Sign-in is one-time-code based, so there is no password of yours for anyone to steal or reuse. All traffic between the apps and our servers is encrypted in transit. Card data never reaches our systems. Access to production data is restricted to named staff and administrative actions on personal data are recorded in an audit trail.
No system is perfectly secure. If a breach affects your personal data we will notify you and the competent authority as the Regulations require.
11. Children
Jaser is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has registered, write to us and we will remove the account.
12. Changes
We may update this policy. The version and effective date are shown at the top of this page, and material changes are announced in the apps. Continuing to use Jaser after a change means you accept the updated policy.