Privacy policy — Souq Mrah

Last updated: November 1, 2026

Souq Mrah is a marketplace for buying and selling livestock. Contact: admin@mrah.sa.

What we collect

• Phone number, to sign in with an SMS code (Google Firebase). It is not shown to guests; a post's contact number reaches signed-in members only, and to no other user while you have both call and WhatsApp off.
• Name and profile picture (optional), shown with your posts, bids and messages.
• Posts: text, photos, videos, city and the town's approximate location, and bids. Photos are saved again without the data your phone puts in them, so none of it is shown to anyone. If a photo carries where and when it was taken (phones add this when the camera's location is on), we keep those two on our server only: they are never shown in the app to any user, and we look at them only when needed to settle a dispute or a report. They are deleted with the photo. Videos too: if a video carries where it was recorded, the app reads it before compressing the video and sends it along; we keep it the same way and remove it, with the rest of the data the phone put in the file, from the video file itself.
• Messages between members (text, photos, voice notes), reports and blocks. Where and when a chat photo was taken, if it says, is kept the same way. On iPhone, a voice note you receive is turned into text by Apple's speech recognition (if you allow it): on the phone itself when it can, otherwise the phone sends the voice note to Apple to do it. The text stays on your phone; it is not sent to us or to the sender. The app also keeps on your phone a copy of your chats list, each chat's latest messages and any message not sent yet, so they show without internet and go once the connection is back; signing out deletes them from the phone.
• Location: when you create a post and allow location, your phone's position is sent to our server and to Google Maps to name your town and the towns around it; we keep these lookups to improve the service. If that fails, the app asks your phone's own geocoder (Apple on iPhone, Google on Android). A post shows its town's location, never yours. The distance shown on posts is computed on your phone; your position is not sent for it. If you choose a distance filter (e.g. “within 100 km”) or search for a post's city, a rough position (to about a kilometre) is sent with that request only, and we don't keep it.
• Favourites: the posts you follow with the star; only you see them.
• Views: we count how many people saw each post, and the count is shown on it. To count each person once, we keep that they saw it: by their account when signed in, or for a guest by a random number the app keeps on the phone (it says nothing about the phone or its owner). Nobody is shown who saw a post.
• Notification token, to notify you of new messages.
• Notification log: each notification sent to your phones (its kind and time, and the post or chat it is about), shown in «الإشعارات» → «السجل» and deleted after 90 days.
• New-post alert: if you turn it on, we keep the town you chose from the list, the distance, the animal and the head count, to notify you of new posts near it, and delete them when you turn it off or delete your account. Your phone's position is not kept for it.
• App use and errors: the app sends our server what happens in it: its starts, the pages you open, the sign-in steps (whether each worked and why not, never your number or the code) and its errors, with the kind of phone (iPhone or Android), the app's version number and the network address, and your account when you are signed in. We use them to know how many people use the market and on which version, and to fix errors. They are kept 180 days and deleted with your account.
• Network address (IP): when a sign-in attempt fails, or a guest (without an account) sees a post, we keep the address it came from for up to two days, to stop repeated attempts and inflated view counts.

Use and sharing

Only to run the market: sign-in, posts and bids, messages, notifications and reviewing reports. Where and when photos and videos were taken is seen by no user and no moderator in the app; only we look at it, to settle a dispute or a report. We don't sell data, show ads or track you across other apps or websites. Service providers: Google (Firebase sign-in and notifications, Google Maps geocoding, Google Cloud for backups), your phone's geocoder (Apple or Google) when our server can't name the town, Apple's speech recognition on iPhone (it receives a voice note you got when the phone can't turn it into text itself), and our hosting server.

Reports and blocking

Any post, message or person can be reported and any seller blocked. A moderator reviews reports and removes content or suspends accounts. A suspended account can appeal in the app («حسابي» → «اعتراض»); the appeal is kept like a report. If a suspended account is deleted, we keep only its phone number, so an account signed up with it again starts suspended; it can still appeal. Offensive words are refused in posts, messages and names.

Deleting your account

In the app: «حسابي» → «حذف الحساب», or email admin@mrah.sa. The account is deleted for good 30 days after the request (it can be restored by signing in before then); its posts leave the market at once. Then the account, its posts with their media, its picture, its location lookups, its favourites, the record of the posts it saw, its new-post alert, its notification log and its app-use log are deleted and its messages' content (with where their photos were taken) is cleared; bids on others' posts stay as "deleted user". If the account is suspended when it is deleted, its phone number is kept (see Reports and blocking). Report evidence is deleted after 180 days. We keep a daily backup of the data and files for 30 days, on our server and in Google Cloud, so what is deleted stays in it for up to 30 days. Details: account deletion.

Age

For adults (18+).