This policy explains what data the URNT app and website collect, why we collect it, who we share it with, and how you control it. We collect only what we need to provide the service, and we do not sell your data.
Website analytics
We use Google Analytics automatically to measure public pages, search, hotel selection and booking steps, and to send server-confirmed purchase and refund events. Events include product and transaction identifiers, currency and value where relevant, and browser and session identifiers. Your browser connects to Google services, which also receive technical connection data. This integration does not send your name, email, phone number, card details or free-text searches. X advertising measurement is optional and stays off until you allow it in Marketing preferences. With permission, we share public-page events, hotel identifiers, confirmed purchase values in SAR, a durable conversion identifier and an X click identifier when available. Your browser connects to X services, which receive technical connection data and may use cookies under their policy. Email and phone matching remain off. Our X permission and click attribution expire after 30 days; withdrawing in Marketing preferences stops subsequent delivery but cannot retract data already sent.
Data we collect
Contact details: your name, mobile number, email address, and your address when it is needed. Booking and purchase data: what you book, dates, guests and amounts paid. Payment data: card details are entered directly on the payment provider's page, and we do not keep your full card number. Device location: we use your precise or approximate device location to show nearby places only after you grant location permission. Content you send: your messages, support conversations and photos you upload. Search history: the destinations and dates you search for. Identifiers and device information: your account ID, an installation ID created by the app, and your device model and system version, used for security and fraud prevention. In the iOS app, we use the advertising identifier and app-install attribution data to measure advertising effectiveness only if you approve Apple's tracking permission request. Usage and diagnostics: how you move through the app, its performance and its errors. Approximate location: your city and country may be estimated from your connection within URNT servers to understand app usage. This does not provide your precise location, and the connection address is not stored in visitor analytics or sent to a third-party location service.
How we use your data
We use your data to create your account and sign you in, complete your bookings and payments, send booking confirmations and the notifications you choose, provide support, protect your account and prevent fraud, understand how the app is used so we can improve it and fix problems, and meet our legal obligations.
Tracking permission and advertising measurement
The iOS app requests tracking permission at the beginning of the first launch, once the first screen is visible and the app is active. If you allow tracking, AppsFlyer starts measuring which ads led to the app install, using the advertising identifier and associated attribution data. We neither initialize nor start AppsFlyer before authorization. If you decline, it remains disabled, and we do not fingerprint your device or use a replacement identifier to bypass your decision. We do not send it your account, search, booking or payment data. You can use the app, book, sign in and pay without allowing tracking, and you can change your choice in your device's privacy and tracking settings. We do not sell your data.
Permissions on your device
The app asks for each permission only when it needs it: location to show nearby places, notifications for updates about your bookings, camera and photo library to attach your photos and save receipts, microphone for voice messages, calendar and reminders to add your booking dates, contacts to share a booking or invite friends, Face ID to secure your sign-in, and Bluetooth and motion to improve nearby services and protect your account from fraud. Every permission is optional, and you can change it at any time in your device settings.
Retention and security
We keep your data while your account exists. When you delete your account, we delete or anonymize your personal data, except records the law requires us to keep, such as invoices and payment records, and only for the period the law sets. We protect your data with encryption in transit, restricted access and ongoing security monitoring.
Your rights
Under Saudi Arabia's Personal Data Protection Law, you have the right to know what data we hold about you, get a copy of it, correct it, ask us to delete it, and withdraw your consent. You can delete your account in the app under Profile, then Delete account, or from the Delete account page on our website. For any other request, email us at the address below.
Children
Our services are not directed at children, and we do not knowingly collect their data.
Changes to this policy
We may update this policy when our services change. The date of the latest update appears at the top of this page, and we will tell you in the app if a change is significant.