Last Updated: October 2026

Privacy Policy

Paylo is a product owned and developed by Fanal, a Saudi-based digital transformation company specializing in business systems and custom software solutions. At Fanal, we are committed to protecting your privacy and ensuring the security of your data in accordance with the highest standards and the applicable regulations in the Kingdom of Saudi Arabia.

By using Paylo or any of its services, you agree to the terms of this Privacy Policy.

1. Information We Collect

We collect only the information needed to provide a secure and reliable service, including:

  • Account information: phone number, name or business name, email (if provided), address, commercial registration or freelance document number, VAT number, and the IBAN you choose to print on your invoices.

  • Sign in with Apple or Google: the name and email you choose to share when signing in.

  • Invoice and client data: client name, contact details and VAT number, plus invoice details, amounts and notes.

  • Files and attachments: invoice PDFs and logos.

  • Subscription data: your Paylo Pro subscription status and purchase history as provided by Apple. We never see your card details; payment is handled entirely by Apple.

  • Push notification token: an identifier that lets us send notifications to your device.

  • Usage and analytics data: the screens you open in the app, your Paylo account ID, device type, operating system, app version, and approximate country and city inferred from your IP address.

  • Crash reports: when the app crashes, we collect technical details about the crash, such as where in the code it happened, the device state and the app version, linked to your account ID.

We never send your phone number, email, invoices or client data to our analytics and crash reporting tools.

We do not collect or store sensitive financial data such as bank card numbers.

2. How We Use the Data

Your data is used only for the following purposes:

  • Creating and managing invoices.

  • Running and verifying your Paylo Pro subscription.

  • Sending notifications about your invoices and account.

  • Understanding how the app is used, so we can improve it and the user experience.

  • Detecting and fixing crashes and technical issues.

  • Communicating with you about updates or support.

  • Complying with local invoicing and tax regulations (ZATCA).

We don’t sell your data, use it for advertising, track you across other apps or websites, or use your device’s advertising identifier.

3. Data Protection

Paylo protects your information as follows:

  • All data is encrypted in transit and at rest.

  • Files and information are stored in a secure, certified cloud environment.

  • We make regular backups so your data isn’t lost.

  • Employees can access your data only when strictly necessary, with defined permissions.

4. Data Sharing

We do not share your data with third parties except in the following cases:

  • When required by law or regulation.

  • With competent government authorities (such as the Zakat, Tax and Customs Authority (ZATCA) or the Saudi Data & AI Authority (SDAIA)) upon official request.

  • With the service providers we rely on to run the app, only to the extent they need to provide their services:

Provider

Purpose

Data

Supabase (Germany)

Database, file hosting and sign-in

Account, invoice and client data, and logos

Google Firebase Analytics

Usage analytics

Screens opened, account ID, device data, approximate location

Google Firebase Crashlytics

Crash reporting

Crash details, account ID, device data

Apple and RevenueCat

Subscriptions and in-app purchases

Account ID and purchase history

Taqnyat

Sending verification codes by SMS

Phone number

Expo and Apple

Sending push notifications

Push token and notification text

Apple and Google

Sign-in (if you choose it)

Name and email

Resend

Internal emails to our team, such as alerts about account deletion requests

Business name, phone number and email

5. Compliance with Local Laws and Data Transfers

Paylo complies with the Saudi Personal Data Protection Law (PDPL), issued by the Saudi Data & Artificial Intelligence Authority (SDAIA).

Our database and files are stored with Supabase in Germany (EU), and some of the other service providers listed above process data on servers outside Saudi Arabia, including Google, RevenueCat, Expo and Resend. We limit this to the data each service needs, and we follow the Regulation on Personal Data Transfer outside the Kingdom and the safeguards it requires.

6. User Rights

You have the right to:

  • Request a copy of your personal data.

  • Edit your data from within the app.

  • Request deletion of your account from within the app (see section 8).

  • Withdraw your consent to processing at any time.

To make any of these requests, email us at: support@paylo.sa

7. Cookies

Our website uses cookies to enhance performance and personalize the user experience. You may disable cookies through your browser settings at any time.

8. Data Retention and Account Deletion

Requesting deletion: you can request deletion of your account at any time in the app (Settings → Delete account), or by emailing support@paylo.sa.

Within 30 days of your request: we permanently delete your account and personal data, including your sign-in details, profile, clients, notifications, logo and your subscription data at RevenueCat. You can keep using the app until then.

Tax invoices: ZATCA regulations require us to keep tax invoices for six (6) years. We therefore keep your invoices, with the seller and buyer details printed on them, in a locked archive that can’t be accessed from the app and isn’t used for any other purpose, and permanently delete them when that period ends. During that time, you can request a copy of your invoices from support@paylo.sa after verifying your identity.

We recommend saving a copy of your invoices before requesting deletion, because a deleted account can’t be restored.

Analytics and crash reports: Google keeps analytics data for two months and crash reports for 90 days, after which they’re deleted automatically.

Backups: data is removed from backups within their normal cycle.

Pro subscription: deleting your account doesn’t cancel your Apple subscription. To stop renewal, cancel it in your Apple ID settings on your device.

9. Policy Updates

We may update this policy from time to time. Users will be notified of any major changes through the app or by email before they take effect.

10. Contact Us

For any questions or concerns about this Privacy Policy, please contact us at: support@paylo.sa or through the Help section within the Paylo app.