Privacy Policy

This policy explains how we handle personal data on the MuDeer app and the websites mudeerapp.com and app.mudeerapp.com, and your rights under Law No. 13 of 2016 on Protecting Personal Data Privacy (the "Law"). It is published in Arabic and English, and the Arabic text prevails.

1. Who we are

"MuDeer", "we" and "us" mean Mudeer for Digital Platforms and Business Support and Trading W.L.L., Commercial Register number 244734, commercial licence 335181 issued by the Ministry of Commerce and Industry, registered address Zone 24, Street 950, Building 146, Floor 2, Unit 5, State of Qatar.

We run the MuDeer app and the websites mudeerapp.com and app.mudeerapp.com (the "Platform"), where Customers in Qatar request Services and receive price offers from businesses ("Providers"). We are the "controller" of this personal data under the Law.

This policy covers everyone with a customer account, Providers and the people who work for or represent them, and website visitors, but not our staff.

Contact: [email protected] for Customers, including privacy requests, and [email protected] for Providers.

2. The data we collect

• Account: your Qatar mobile number or email, used to sign in with a login code, your name if you give it, and a record of the versions of the Terms and this policy you accepted, when, and in which app or website.
• Addresses: saved addresses, access notes and map pins. We use your device's location only while you pick an address on the map.
• Requests: your description, answers, preferred time and photos; we keep photos as you upload them, including any location your device adds to them.
• Bookings and payments: chosen Offers, cancellations, recurring maintenance plans, amounts paid and refunded, payment references and your MuDeer credit balance, but not your full card number (section 5).
• Reviews and reports: your ratings, comments and reports, with any photos, and your messages with our team.
• Technical data: your push notification identifier and, in server logs and error reports, your IP address, pages opened, browser or device type and internal account identifier.
• Provider data: business, contact-person and sign-in details, activity, commercial terms, staff details we ask for, and, for Tap payouts, licence and business documents, bank details, and the identity details and documents of authorised representatives.
• Website forms: what you send through our contact or Provider application forms.

We collect technical data automatically when you use the Platform. We also receive data from Providers (Offers, invoices, notes and reports), Tap (payment status and saved-card details), Google Maps (address results), Vodafone Qatar (message delivery status) and our team (notes and account blocks).

You must give a Qatar mobile number or email for an account, and an address and description for a Request. Your name, photos, access notes and device permissions are optional.

3. How we use your data

We rely on these grounds, which the Law permits:

• Contract: your account and sign-in; sending your Request to Providers and booking the Service; payments, refunds and Provider payouts through Tap; service messages; and reports and support.
• Legal obligation: accounting and transaction records, rights requests, and requests from competent authorities.
• Legitimate interest: security and fraud prevention, including blocking accounts that break the Terms; ranking Requests; publishing reviews with the reviewer's name; checking Providers before giving the "Verified" badge; checking who performed a Service when handling a report; fixing errors and maintaining the Platform; statistics; answering website messages; and defending our rights. You can object to this processing.
• Consent: saving a payment card; marketing messages; and device permissions such as location and notifications.

Requests are ordered in Providers' lists by an automatic quality score, based on how complete each Request is, the number of your completed Requests and your cancellation rate, and Providers see a summary of this score. A low-scoring Request may not appear in a busy Provider's list, although we notify every active Provider offering the Service of it.

4. Who sees your data

• Providers that can send Offers: every active Provider offering the Service, whatever areas of Qatar it covers, sees your Request and photos, your name if you gave it, your address and map pin, and your account's internal identifier, which lets it link your Requests to one another. It also sees the number of your completed Requests and your cancellation rate. It does not see your phone number or access notes.
• The Provider you choose: it also gets your phone number and access notes, and keeps the job record, even if the Request is cancelled.
• Customers: after paying the Confirmation Fee for a Request, the Customer sees the chosen Provider's contact details, namely phone, WhatsApp and email.
• The public: reviews appear on Provider profiles with your name.
• Our team: authorised staff, with access set by their role, to run the Platform and support you.

5. Payments

You pay through Tap Payments:

• on app.mudeerapp.com: on Tap's secure payment page;
• in the MuDeer app, where available: with Tap's card form, Google Pay on Android, Apple Pay on iOS or a card saved with Tap, or on Tap's page in your phone's browser.

We do not see or store your full card number or its security code. In the app, Google Pay and Apple Pay payment details pass through our servers in encrypted form that only Tap can read. A card is saved only if you tick "Save this card for future payments": Tap keeps it, and we keep its type, last 4 digits, expiry date and the time you agreed. You can remove it in the app under "Settings", then "Saved payment cards", and we then ask Tap to delete it. When you delete your account, we delete our records of your cards, including removed ones, and ask Tap to delete any it still holds.

We send Tap the name, email and phone number on your account, the amount and our references, and, for Google Pay and Apple Pay in the app, your IP address. Tap's card form also receives technical information about your app and device, which Tap uses under its own terms.

6. Sharing and transfers outside Qatar

Service providers process data for us, as "processors" within the meaning of the Law, under contracts requiring them to protect it, for hosting, network and storage, text messages, email, notifications, error monitoring, and the software and AI tools our technical team uses to maintain the Platform. Tap, for payments, and Google and Apple, for maps, fonts, Google Pay and Apple Pay, use the data they receive under their own terms.

We also share data with Providers (section 4), only for the Service; with competent authorities, as the law requires; and with any buyer or successor of our business, which must protect it as this policy describes.

We do not sell personal data or use advertising or analytics trackers. Most processing takes place outside Qatar, in the United Kingdom, Europe and the United States, as the Law allows, under contractual safeguards, encryption in transit and encrypted backups.

7. Cookies

We use only cookies that keep you signed in to app.mudeerapp.com and remember settings such as language, and Cloudflare's security cookies against bots and attacks, but none for analytics or advertising. Blocking cookies may stop you from signing in.

8. How long we keep data

We keep personal data only as long as our purposes or the law requires, then delete it or remove what identifies you:

• Account: while it exists; at deletion, your name, email and phone number are erased at once.
• Acceptance records: kept while the account exists and for 5 years after it is deleted or closed, as proof of our agreement.
• Addresses and photos: saved addresses, Request photos, and the pins, access notes and address details other than the area in your Requests and recurring maintenance plans: deleted within 30 days of account deletion, unless a report or legal claim about them is open.
• Transactions: Requests, Offers, bookings, payments, invoices and related reports: 5 years from the transaction, without your name and phone number after account deletion; accounting books: 10 years from closing.
• Reviews: shown on the Provider's profile and kept with its records, under a neutral label such as "Customer" after account deletion; you can ask us to delete yours.
• Website and email messages: 24 months.
• Server logs and error reports: 30 days for server logs, and up to 90 days for error reports.
• Backups: up to 36 days; deleted data stays in them until they are replaced.
• Providers: business and activity records are kept 5 years after closure; the personal data of a Provider's contact persons, representatives and staff is deleted within 30 days of closure, except what the law requires us to keep.

9. Deleting your account

You can delete your account in the MuDeer app ("Settings") or on app.mudeerapp.com ("My account"), under "Privacy & data", then "Delete my account", or by emailing [email protected]. Complete or cancel any open Request first.

We then immediately erase your name, email and phone number, delete your saved cards and notification identifiers, and end your sessions. Other data is kept only as section 8 sets out, and Tap keeps its own records. For your MuDeer credit, see the Terms and Conditions.

A Provider can close its account the same way, from "Profile" in the MuDeer app or on app.mudeerapp.com, or through [email protected], once it has no open Requests, pending Offers or unpaid amounts due to us. Closing removes its public profile and counts as a request to delete the personal data of its contact persons, representatives and staff (section 8).

10. Your rights

Under the Law, you, as the "individual" whose data is processed, have the right to:

1. withdraw your consent at any time, where processing is based on it;
2. object to processing that is unnecessary for its purpose, excessive, discriminatory, unfair or unlawful;
3. ask us to delete or erase your data after you withdraw consent or object, when the purpose of processing has ended, or when there is no longer a reason to keep it;
4. ask us to correct your data;
5. access and review your data, be told about its processing and purposes and about any disclosure of inaccurate data about you, and get a copy.

To use them, email [email protected] or, for Providers, [email protected], or contact us by any other means. We answer within 30 days, free of charge, but we may charge up to the cost of providing a copy of your data, and we tell you the amount in advance.

11. Complaints

If you have a concern about your personal data, contact us first at [email protected] or, for Providers, [email protected]; we reply within 30 days. You can also complain to the National Cyber Security Agency by sending its Individual Complaint Form to the email below.

• Email: [email protected]
• Address: National Cyber Security Agency, Wadi Al Sail area, Doha, Qatar, P.O. Box 24100
• Phone: +974 40466000

Complaints about Services, prices or payments are covered by the Terms and Conditions.

12. Children

The Platform is for people aged 18 or over. No one under 18 may create an account. If we learn that we hold personal data of someone under 18, we delete it.

13. Marketing messages

We send marketing messages by notification, text message or email only with your explicit, prior consent for each channel; giving this consent is optional. Each message is marked "Ad", names MuDeer as the sender and explains how to opt out, and you can also withdraw consent by email or any other means. We send them through Google, Vodafone Qatar or Resend. Service messages, such as login codes and updates on your Requests and payments, are not marketing.

14. Security

We use encrypted connections (HTTPS) and encrypted backups, encrypt Providers' bank details and their representatives' identity details, restrict staff access by role, and limit repeated sign-in attempts; Tap handles card details. No system is completely secure. If a breach of the precautions we take could seriously damage your personal data or privacy, we inform you and the National Cyber Security Agency as the Law requires, within 72 hours of learning of it where the Agency's guidelines apply.

15. Changes to this policy

We announce material changes in the app or on the website at least 14 days before they take effect, unless the law requires otherwise.

16. Contact us

Write to us at the email addresses in section 1, or use our contact page.