Privacy Policy

We respect your privacy and protect your data. This explains what we collect, why, and how we keep it safe, following the Saudi Personal Data Protection Law (PDPL).

1. What We Collect

•    Personal data: name, birth date, phone, and email (if any). We collect only what we need to run the service.

•    What you create: your posts, stories, messages, comments, and media. Private content is stored only to deliver it between users — we don't open it (see “Keeping Your Private Content Private”).

•    Usage data: internal performance and crash logs — not for marketing — to keep the app stable and safe.

•    Device data: basic technical info (device type, operating system, technical IDs) for running and securing the app.

•    Activity data (optional): steps and movement, only with your OK, to show and share with your friends in the app. You can turn it off anytime. Never used for ads or business, never shared outside.

•    Face data (for filters): when you use face filters, your face is read live on your device just to apply the effect. We don't save it, don't build any model or ID from it, and don't send it anywhere. It uses a licensed effects library on your device.

•    Location (on request): we ask for location while you use it only when you open the map or share a visit, after a prompt. No tracking unless you ask, and you can turn it off anytime.

2. Who Can Use It

VORMA is for people 18 and older. We don't accept anyone younger, and if we find a minor's account we suspend it and delete their data as the law requires.

3. Why We Use Your Data

•    To run the app and provide its features for connecting, posting, and interacting.

•    To personalize your experience and show content and people you might like.

•    To send you service alerts and updates.

•    To keep the app and its users safe, and to follow Saudi law.

Our legal basis: we use your data on one or more grounds the law allows — running the service for you, your clear consent (when the law needs it), following a legal duty, or a legitimate interest that doesn't hurt your rights. We don't use your data beyond why we collected it, except where the law allows or you agree.

4. Keeping Your Private Content Private

What you share privately stays yours alone. No employee and no smart system opens it — except Adam, and only when you call it into a chat, after which it answers and leaves without keeping anything.

•    We don't read your private chats, stories, groups, or private posts, and we don't use them for analysis or ads.

•    Moderation reads report patterns, not content. Decisions come from report signals, not from your messages.

•    The one exception: we may share data or content only if a proper order from an authority requires it, and only as much as needed.

5. Employee Access

Approved employees can only see this account data, for support, moderation, and safety:

•    Phone, email, profile picture, bio, and public content.

•    Employees never reach your private content, and private chats or posts are never read except under a proper legal order.

6. The Smart Assistant “Adam”

•    Adam helper (when you ask): when you use “Ask Adam,” your question and related public content go to our own system to answer.

•    Adam in chats: Adam only joins if someone tags it, reads the relevant messages just to answer, shows its reply to everyone, then leaves without keeping anything. No automatic access or watching.

•    No training, no keeping, no ads: Adam doesn't learn from your chats, doesn't keep them, and isn't used for marketing or ads.

•    Auto-protection: a system fully separate from Adam that only watches report patterns, never reads your private content, never learns from it, and never keeps it.

Adam runs on our own internal infrastructure. We don't share your content with any outside AI provider.

7. Your Privacy Controls

The app gives you detailed controls in privacy settings, including:

•    Setting your account (public or private) and the privacy of each post.

•    Choosing who can follow you, message you, and reply to your stories.

•    Showing or hiding parts of your profile (followers, activity, bio, picture).

•    Blocking users, reporting them, and filtering comments by banned words.

8. Your Rights

Under the Personal Data Protection Law, you can: see your data, correct it, withdraw your consent, and ask us to delete it (delete your account) in the app settings or by contacting us. You can also complain to the Saudi Data and AI Authority (SDAIA) as the responsible authority, without losing any of your legal rights.

9. Keeping Data Safe

•    We use reasonable technical and organizational safeguards, and data is stored and sent encrypted.

•    No online security is perfect, so keep your login details private and use a strong password.

•    We don't sell your data to anyone.

•    Activity and health data: extra protected, never used for ads, never shared outside. You can withdraw permission anytime, and already-processed data is deleted.

10. Sharing With Others

•    We don't share your data with anyone without your clear consent, unless the law or a proper order requires it.

•    We keep data as long as needed to run the service and follow the law, then delete it safely. You can delete your content and account in the app.

11. Where Your Data Lives

Your data is processed and stored inside Saudi Arabia on STC Cloud (a local cloud platform), meeting the data-residency rules of the Saudi Personal Data Protection Law.

12. Measurement Tools

We don't use outside ad tools. We only use internal logs to measure faults and performance, without building marketing profiles.

13. Changes to This Policy

We may update this policy to reflect legal or feature changes. A change takes effect once the new version is posted in the app or on the site, and using the app after that means you accept it.

14. Your Consent

By pressing “Register” or “Agree,” you confirm you've read and understood everything above, agree to it, and give us clear consent to use your personal data under this policy.

Contact

For questions, reports, or privacy requests, email us at support@vorma.net with enough info to identify you and handle your request.