Winner Privacy Policy
Winner
AUFOK ALKHILOOD CO.
Effective 18 September 2026

Privacy Policy

This explains what Winner — the Al-Sami discount card app — collects, why, and how you can see or delete it. Written to describe exactly what the app does, nothing more.

01

Information we collect

Winner is a discount card app: you activate a physical membership card, then tap or enter a code at partner stores for an instant percentage discount. The app never processes payments and never charges your card — every discount is applied by the store's own staff at their own checkout. What we collect follows directly from that.

  • Phone numberRequired
    Your sign-in credential, verified by SMS one-time code together with Google Play Integrity to prevent fraudulent accounts.
  • Display name & emailOptional
    Email is for account contact only. Your display name is what other users see if you appear on the in-app leaderboard.
  • Profile photoOptional
    Only uploaded if you choose to add one.
  • Precise locationOn-device only
    Used in the foreground, only while the app is open, to sort nearby partner stores by distance. It is never transmitted to or stored on our servers.
  • Push notification token
    Lets us deliver notifications about your transactions and offers.
  • Referral activity
    Your referral code, and who referred you, if anyone.
  • Transaction history
    Which partner store you visited, the discount applied, and when. No card numbers or payment details — we never collect any, since the app doesn't process payments.
  • Membership status
    Your tier and whether your card is currently activated.

We deliberately don't collect:

Payment or bank card data Background location Advertising identifiers Contacts, camera, or microphone access
02

How we use it

Every use above ties to something you directly asked the app to do: verifying who you are, showing you nearby discounts, recording that a discount was honored, running the referral program, and letting you control what appears on the leaderboard via the privacy toggle in Settings. We don't run advertising, and we don't build behavioral profiles beyond what's needed to operate the app itself.

03

Data sharing

We don't sell your data, and we don't share it with advertisers. It's processed using the following infrastructure, all under our own account and control:

ServicePurpose
Google Firebase (Authentication, Firestore, Storage, Functions, Cloud Messaging)Account, data storage, and notifications — hosted in the Doha (me-central1) region
Google Play Integrity APIConfirms sign-in requests come from a genuine, unmodified copy of the app
Google Maps SDKPowers the in-app store map and directions

We don't use third-party analytics, advertising, or crash-reporting SDKs.

04

Retention & deletion

Your account and its data are kept for as long as your account exists — there's no automatic expiry. You can end that at any time yourself.

Settings → Delete account permanently removes your profile, membership, uploaded photo, leaderboard entry, and referral stats, and deletes your sign-in credentials outright — you won't be able to sign back in as that account.

One exception: records of past transactions (which store, what discount, when) stay in our systems after deletion, the same way a store's own receipt log outlives a customer's account closing — but they're no longer linked to your profile once it's gone.

If you no longer have the app installed, see our Account & Data Deletion page for how to request deletion by email instead.

05

Your rights

You can delete your account and its data yourself, at any time, from inside the app — no request needed. For anything else — a question about what we hold, or a correction — reach us at the email below.

06

Children's privacy

Winner isn't directed at children, and we don't knowingly allow anyone under 13 to use it.

07

Security

All data is encrypted in transit. Access to it is limited to what each part of the app genuinely needs — for instance, a physical card's activation code is never stored in a form that could be read back, only as a one-way hash.

08

Changes to this policy

If this policy changes in a way that affects what we collect or how we use it, the date at the top of this page will change to reflect that. We'd encourage checking back occasionally.

09

Contact us

AUFOK ALKHILOOD CO. — info@Ufookalkulood.com