X Tag Privacy Policy

Effective Date: 7/9/2025

Company: AL-ROWAD FOR TELECOMMUNICATION AND INFORMATION TECHNOLOGY

Company (One Partner), CR No. 1010264936, headquartered in Riyadh, Kingdom of Saudi Arabia.

1. Introduction

X Tag (“we,” “our,” or “the Company”) respects your privacy and is committed to protecting your personal data in accordance with the Saudi Personal Data Protection Law (PDPL) and other applicable regulations.

This Privacy Policy explains how we collect, process, store, and protect your personal data when you use our website, mobile app, passes services, NFC services, and related offerings (collectively, the “Platform”).

By using the Platform, you consent to the collection and processing of your personal data as described in this Policy.

2. Data We Collect

• Personal Information

We may collect the following personal data directly from you:

• Name, username, and profile details
• Email address and phone number
• User-generated content (business cards, QR codes, messages, uploaded files)

Payment information (credit/debit card or Apple Pay) is processed directly through secure third-party payment gateways and is not stored on the Platform.

2.2 Technical Data

We may collect technical data automatically through the Platform:

• Device information (type, operating system, version)
• IP address and connection data
• App usage and interaction logs
• Cookies and similar tracking technologies

2.3 Location Data

• Location data may be collected only when explicitly required for specific app features, such as mapping or
• Location data is not collected for NFC or passes services.

2.4  Third-Party Data

We may receive data about you from third-party services you use with the Platform, including:

• Google Maps (location services)
• Apple Wallet, Google Wallet, and PassKit (for passes services)
• SMS/email OTP providers (authentication)
• Payment gateways (transactions)

3. Purpose of Data Processing

We process your personal data for the following purposes:

• To provide and improve our Platform and services
• To authenticate users and secure accounts
• To process payments, subscriptions, and passes services through third-party providers
• To communicate with users, including notifications, updates, and promotions
• To comply with legal obligations under Saudi law
• To prevent fraud, abuse, or illegal activities
• For analytics, research, and service optimization

4. Legal Basis for Processing

Under PDPL, we process personal data based on:

• Consent: For features requiring explicit user permission (location, payments, notifications)
• Contractual necessity: To provide services and fulfill subscriptions
• Legal obligation: To comply with Saudi laws and regulations
• Legitimate interests: For security, analytics, and service improvement, provided it does not override user rights

5. Data Sharing

We may share your data with:

• Service providers: Third-party providers such as Google Maps, Apple Wallet, Google Wallet, PassKit, SMS/email OTP providers, and payment gateways, strictly for service delivery
• Legal authorities: When required by Saudi law or in response to legal requests
• Business partners: Only with your consent and for service purposes
• Internal departments: For administrative, security, and analytical purposes

We never sell your personal data to third parties.

6. Cross-Border Data Transfers

If your personal data is transferred outside Saudi Arabia (e.g., cloud storage, third-party services), we ensure:

• User consent is obtained
• Adequate safeguards are in place as required by PDPL and other regulations

7. Data Retention

• Personal data is retained only as long as necessary for service provision, legal compliance, or legitimate business
• Upon request, users may delete their data, subject to retention obligations required by

8. User Rights

Under PDPL, you have the right to:

• Access: Request a copy of your personal data
• Correction: Correct or update inaccurate or incomplete data
• Deletion: Request deletion of personal data, subject to legal obligations
• Restriction: Limit processing for specific purposes
• Withdraw consent: For processing that relies on consent
• Data portability: Request a copy in a usable electronic format

To exercise your rights, contact privacy@X-Tag.tech or through the Platform’s support channels.

9. Security of Personal Data

We implement technical and organizational measures to protect your data from:

• Unauthorized access or disclosure
• Accidental loss, destruction, or damage
• Cyber threats in compliance with NCA cybersecurity standards

However, no system is completely secure. Users should also take precautions, including safeguarding login credentials.

10. Cookies and Tracking

• The Platform may use cookies, analytics tools, and other tracking technologies to improve user experience, analyze traffic, and measure
• Users may manage cookie preferences through device settings or the

11. Mobile App Permissions

• Users must grant permissions for features such as:
• Location (only when needed for mapping/analytics)
• Camera (for QR code scanning)
• Notifications (service updates, security alerts, promotions)
• Users may revoke permissions at any time, but some features may be

12. Age Requirement

• Users must be at least 18 years old to access paid services, subscription plans, Apple Wallet passes, or payment
• Users aged 13–17 may access free features and use paid services

only with verified parental or guardian consent.

13. Third-Party Services Privacy

• Third-party services used in the Platform are subject to their own privacy policies:
• Google Maps: https://policies.google.com/privacy
• Apple Wallet / Google Wallet / PassKit: Refer to provider policies
• Payment gateways: Refer to provider policies
• SMS/email OTP providers: Refer to provider policies X Tag is not responsible for third-party data

14. Updates to This Policy

• X Tag may update this Privacy Policy at any
• Updated versions will be published on the Platform with the effective
• Continued use after updates constitutes

15. Contact Information

For questions, complaints, or privacy requests, contact us at:

Email: privacy@x-tag.tech

Address: AL-ROWAD FOR TELECOMMUNICATION AND INFORMATION

TECHNOLOGY Company (One Partner), Riyadh, Saudi Arabia