01 Who we are
Murshidy is operated by Liajlehum Association for Persons with Disabilities (جمعية لأجلهم لخدمة الأشخاص ذوي الإعاقة), a Saudi nonprofit association, License No. 1053. Liajlehum Association is the controller responsible for the personal data described in this Privacy Policy.
Address: Makkah Al Mukarramah Road, Al Mathar Ash Shamali District, Riyadh 12312, Kingdom of Saudi Arabia.
For privacy questions or requests, email info@liajlehum.org or use our Contact page.
02 Scope
This Privacy Policy explains how Murshidy collects, uses, shares, stores and protects personal data when you use the Murshidy mobile application, account services, tourism-discovery features, tour-guide profiles, community features, support channels, and Murshidy pages that link to this Policy.
This Policy should be read together with the Murshidy Terms & Conditions. The Terms govern acceptable use and user conduct; this Policy describes how personal data is handled.
03 Personal data you provide
Depending on whether you register as a tourist or tour guide and which features you choose, you may provide:
- Account and contact information, including your name, email address, password and password confirmation, and, where applicable, telephone or WhatsApp number.
- Tourist profile information, including a profile photograph and an optional accessibility choice indicating whether you are deaf.
- Tour-guide profile and professional information, including a profile photograph, country, governorate or state, gender, age, tourism-guide license number, biography, spoken languages, sign languages, telephone or WhatsApp details, and a YouTube biography URL where applicable.
- Community content, including post captions and images, comments, guide-review ratings and comments, likes, follows and other interactions.
- Safety and moderation information, including reasons and descriptions submitted when you report content and the identity of an account you choose to block.
- Search and discovery information, including attraction or guide search terms, filters, selected destinations, current location when requested, and a photograph you choose for image-based attraction search.
- Preferences, consent choices and communications, including language, theme, update preferences, AI-filtration permission, and information sent to support.
Fields identified as required are needed to create the applicable account or provide the requested feature. Optional fields and device permissions may be left blank or denied, subject to the feature limitations described below.
04 Information collected automatically
When you use Murshidy or an integrated service, we may automatically receive or generate:
- Account and content identifiers, such as user, guide, post, comment and review IDs.
- Device and notification identifiers, including Firebase Cloud Messaging registration information and information used with Apple Push Notification service.
- App and device information, including app version, build number, operating-system platform, installation identifiers and information required for update checks.
- Network and technical information, including IP address, request time, server logs and basic connection metadata.
- Interaction information, including likes, follows, blocks, reports, pagination information and timestamps.
- Diagnostic information generated by the app or integrated software components, such as crash, performance and product-interaction information.
05 Device permissions, media and location
Murshidy may request camera access to take a profile, post or search photograph; photo-library access to select an image; location access while using the app to find nearby attractions; and notification permission to display push notifications.
You can deny or later change these permissions in your device settings. Denying a permission prevents the related feature from working but should not prevent unrelated features. A tour-guide profile may require a profile photograph. If you deny location access, you can still search using text and available country or governorate filters.
Location is requested when you use the nearby-attractions feature. If allowed, the app obtains your current latitude and longitude and sends them to Murshidy to return nearby results. Country and governorate selections used for guide profiles or search filters are also sent to Murshidy. GeoNames may receive a country code, GeoName identifier, app language and normal network metadata when the app resolves country or governorate information.
Selected files may temporarily remain in app- or operating-system-managed storage. Displayed network images and media may be cached. Cache lifetime and clearing behavior depend on your device, operating system and the integrated software used to display the content.
06 Public profiles and user-generated content
Community posts are public by design. Posts, images, comments, guide reviews, profile names, profile photographs, membership indicators, counts and timestamps may be visible to other Murshidy users. Guide profiles may display professional and contact information, biography, languages, rating, YouTube biography video and a profile or QR link.
Do not submit information that you do not want other people to see or copy. Other users may save, share or reproduce public content outside Murshidy. Although you may delete content where the app provides that control, Murshidy cannot remove copies independently made by other people.
07 AI-assisted content moderation
Before Murshidy submits a post, comment or guide-review comment to the community service, the app performs automated content-safety checks through OpenAI:
- Non-empty submitted text is sent to OpenAI for safety classification and a separate political-content check.
- For posts with images, every image attached to the post is sent to OpenAI with the submitted text.
- OpenAI returns safety categories, scores or a short pass/block result used to determine whether the content may be published.
Murshidy displays a just-in-time notice and asks for your explicit permission before the first transmission to OpenAI. Permission is separate from acceptance of the Terms and is stored locally for your account. You can withdraw it at any time using the AI Content Filtering toggle in Settings.
If you decline or withdraw permission, Murshidy will not send new content to OpenAI. You can continue using unrelated features, but you cannot create or edit posts, comments or guide reviews that require AI filtration. If a safety check blocks content or cannot be completed, the content is not published.
Because moderation occurs before publication, content that is rejected has already been transmitted to OpenAI. OpenAI states that data submitted through its API is not used to train its models by default unless the customer opts in, and that API abuse-monitoring logs may retain customer content for up to 30 days by default unless different approved controls apply or longer retention is required by law. See OpenAI’s API Data Controls.
Automated moderation affects only whether submitted community content may be published. If you believe content was blocked incorrectly, contact info@liajlehum.org.
08 How we use personal data
Murshidy uses personal data, as applicable, to:
- Create, authenticate, maintain and secure tourist and tour-guide accounts.
- Review tour-guide registration and license information.
- Create and display profiles, posts, comments, reviews, ratings and social interactions.
- Help users find attractions and guides using text, images, location, language and other filters.
- Facilitate user-initiated contact with tour guides through WhatsApp.
- Moderate content, process reports, block abusive users, enforce the Terms and protect users.
- Deliver push notifications and handle notification interactions.
- Provide maps, accessible audio or video and localized content.
- Remember app preferences and maintain signed-in sessions.
- Check for app updates, troubleshoot problems, prevent fraud and protect the service.
- Respond to support, privacy and legal requests, and comply with applicable law.
09 Legal bases for processing
We process personal data under the Saudi Personal Data Protection Law and other applicable laws. Depending on the purpose and the information involved, processing may be based on your consent, performance of an agreement with you, compliance with a legal obligation, protection of your or another person’s interests, or our legitimate interests where permitted by law and not overridden by your rights.
Where processing requires consent, including the transmission of submitted community content to OpenAI, you may withdraw consent for future processing. Withdrawal does not affect processing that was lawful before withdrawal. If information is necessary to provide a feature you request, choosing not to provide it may make that feature unavailable.
11 Push notifications
Murshidy uses Firebase Cloud Messaging and Apple Push Notification service where applicable. A notification registration token may be sent to Murshidy during registration or login. Notification titles, bodies and payloads are processed on the device. You can disable notifications through device settings without disabling unrelated app features.
12 Local storage and cookies
Murshidy stores certain information on your device, including language, theme and update preferences and, while signed in, session and profile information needed to operate the app. Your AI-filtration permission is stored locally for your account and remains until you change it or your account is successfully deleted.
Logging out removes selected local session and profile values. Account deletion removes selected local account data after the server confirms the deletion request. Uninstalling the app generally removes app-local data, subject to operating-system backup and restoration behavior.
The mobile application does not use a first-party cookie manager. YouTube content and pages opened in an external browser may use cookies or similar technologies under the relevant provider’s privacy policy.
13 Retention and deletion
We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, to meet legal and regulatory requirements, resolve disputes, enforce agreements, protect users and the service, and establish or defend legal claims. The criteria applied include:
- Account and profile information is retained while the account is active and thereafter only as necessary to complete deletion, satisfy legal obligations, prevent fraud or resolve disputes.
- Public posts, comments, reviews and media are retained until deleted by the user, removed under our rules, or deleted with the account, subject to legal holds, backup cycles and copies made by other users.
- Reports, blocks and moderation records are retained for as long as reasonably necessary for safety, abuse prevention, appeals, enforcement and legal compliance.
- Search, image-search and location inputs are retained only as necessary to provide the requested feature and for limited operational, security or legal records.
- Notification tokens are retained while required to provide notifications and are removed, replaced or invalidated when no longer necessary.
- Security, diagnostic and server logs are retained for limited periods determined by operational security, incident response and applicable legal requirements.
- Support and privacy-request records are retained for as long as necessary to respond, demonstrate compliance and resolve related disputes.
When retention is no longer necessary, information is deleted, anonymized or isolated until deletion from backups during the ordinary backup cycle, unless continued retention is legally required.
14 International data transfers
Murshidy and the service providers identified in this Policy may process personal data outside the country where you live. When personal data is transferred outside Saudi Arabia or another applicable jurisdiction, we use measures required by applicable law, which may include approved contractual safeguards, transfer assessments or another lawful transfer mechanism.
15 Security
We use administrative, technical and organizational safeguards designed to protect personal data against unauthorized access, loss, alteration, disclosure or destruction. These safeguards include access controls, secure communications, service-provider oversight and security monitoring appropriate to the nature and risk of the processing.
No method of transmission or storage is completely secure. If you believe your account or personal data may have been compromised, contact info@liajlehum.org promptly.
16 Your choices and consent controls
You can:
- Change camera, photo, location and notification permissions in device settings.
- Change language, theme, update and AI-filtration settings in the app.
- Withdraw AI-filtration permission using the Settings toggle; future post, comment and guide-review content will not be sent to OpenAI unless permission is granted again.
- Edit or remove optional profile information where the app provides that control.
- Delete individual posts, comments and guide reviews where the app provides that control.
- Unlike or unfollow to reverse those interactions.
- Log out or initiate account deletion as described below.
17 Account and content deletion
You can initiate account deletion through Settings → Account → Delete Account and confirm the request. Murshidy sends an authenticated deletion request and clears selected local account data after a successful response.
You may also delete individual posts, comments and guide reviews through available controls. Deletion may be delayed or limited where retention is required by law, necessary for safety or fraud prevention, subject to a valid legal hold, or pending deletion from backup systems. Deletion cannot remove copies independently made by other users or information lawfully retained by a third party under its own obligations.
18 Your privacy rights and complaints
Subject to applicable law, including Saudi Arabia’s Personal Data Protection Law, you may have the right to:
- Be informed about the legal basis and purpose for collecting your personal data.
- Access personal data held about you.
- Request a readable and clear copy of your personal data.
- Correct, complete or update inaccurate personal data.
- Request destruction of personal data that is no longer needed, subject to lawful exceptions.
- Withdraw consent where processing is based on consent.
- Submit a complaint to the competent data-protection authority and seek compensation where provided by law.
To exercise a right or raise a privacy complaint, email info@liajlehum.org. We may need to verify your identity and request details reasonably necessary to respond. We will respond within the period required by applicable law.
If you are not satisfied with our response, you may submit a personal-data complaint to the Saudi Data & AI Authority through the National Data Governance Platform.
19 Third-party links and services
Murshidy contains or opens maps, YouTube videos, WhatsApp, photographer or image-source pages, app stores, profile links and other external content. When you interact with a third-party service, that service processes information under its own terms and privacy policy. Review the relevant notice before providing information.
20 Changes to this Policy
We may update this Privacy Policy to reflect changes in the app, service providers, legal requirements or our data-handling practices. We will update the “Last updated” date and provide additional notice or request renewed consent where required by law or where a change materially affects consent-based processing.
21 Contact us
Controller: Liajlehum Association for Persons with Disabilities (جمعية لأجلهم لخدمة الأشخاص ذوي الإعاقة), Saudi nonprofit association, License No. 1053.
Address: Makkah Al Mukarramah Road, Al Mathar Ash Shamali District, Riyadh 12312, Kingdom of Saudi Arabia.
Privacy and support email: info@liajlehum.org.
Contact page: https://www.liajlehum.org.sa/contact