
Privacy Policy
Last updated: August 12, 2026
Applies to karam-app.com and the Karam mobile app (iOS & Android)
Introduction
Welcome to Karam. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.
If you have any questions, contact us at support@karam-app.com. We will respond within 48 hours.
This policy applies to:
- Karam mobile app (iOS and Android)
- Karam website at karam-app.com
- All related services operated by Karam App LLC
About Karam
Karam is operated by Karam App LLC, a Qatar-based company dedicated to reducing food waste. We connect restaurants that have surplus food with budget-conscious customers through discounted food items and "Surprise Bags" available for pickup. Karam operates as a pickup-only service — we do not offer delivery.
Minimum Age
The Karam service is intended for account holders aged 13 and above. This minimum age applies to account creation and payment use — not to the content of the app, which is suitable for all ages. Users under 18 must have parental or guardian consent to create an account and to make purchases, in line with Qatari payment regulations and our payment provider's requirements. If you believe a child under 13 has created an account without consent, please contact us at support@karam-app.com and we will delete the account.
Information We Collect
Website Visitors (karam-app.com)
When you submit a restaurant partner application on our website, we collect:
- Full name
- Email address
- Phone number (Qatar mobile)
- Business name
- Business address
- Business type (restaurant, café, grocery, etc.)
Our website uses Vercel Analytics to measure aggregate page-view statistics. We do not use tracking cookies, advertising cookies, or advertising trackers on the website. We do not create customer accounts on the website.
Mobile App — When You Create an Account
- Full name
- Phone number
- Email address
- Password (stored encrypted — we never see it)
- Preferred language (Arabic or English)
Mobile App — When You Place an Order
- Order details (items, quantity, pickup time)
- Payment method (Apple Pay, Google Pay, or Cash)
- Special instructions (if provided)
Mobile App — Automatically Collected
- Device information, such as the model, operating system, and app version
- App usage events, such as which screens you view
- Crash reports, if the app encounters an error
- Your device advertising identifier
- Approximate location (such as your city), derived from your IP address by Google Analytics for Firebase
Restaurant Partners (Website and App)
- Business name (English and Arabic)
- Owner name and email
- Business address and location coordinates
- Phone number
- Restaurant logo and cover images
- Menu items, prices, and descriptions
- Operating hours
- Settlement details for payouts
What We Do NOT Collect
- Payment card details (handled entirely by Apple Pay / Google Pay)
- Browsing history outside the app
- Contacts or photos
How We Use Your Information
| Purpose | Information Used |
|---|---|
| Create and manage your account | Name, email, phone |
| Process and fulfill your orders | Name, phone, email, order details |
| Send order confirmations and updates | Email, phone (push notifications) |
| Provide customer support | Name, email, order history |
| Review restaurant partner applications | Business name, contact info, address |
| Process restaurant settlements | Business and payment details |
| Improve our app and website | Anonymous usage data |
| Prevent fraud and abuse | Account activity |
| Legal compliance | As required by Qatar law |
Location Data
With your permission, we access your device location to show restaurants near you, calculate distances, and sort results. You can refuse or revoke this permission at any time in your device settings. The app still works without it.
Your device location is stored only on your device (in the app's local storage) and is used to sort restaurant results and display distances. It is deleted from your device when you sign out. We do not send your device location to our servers, and it is not included in any analytics event.
Separately, Google Analytics for Firebase derives an approximate location (such as your city) from your IP address for aggregate analytics. This is disclosed under Information We Collect above.
Any addresses you save (Home, Work, Other) are entered by you and stored only on your device — they are never sent to our servers. They are deleted when you sign out.
Information Shared With Restaurants
When you place an order, the restaurant receives:
- Your name
- Your phone number
- Your email address
- Order details and pickup time
This information is shared solely to allow the restaurant to prepare your order and contact you when it is ready. Restaurants are not permitted to use this information for marketing without your consent.
Payment Processing
Karam supports the following payment methods:
- Apple Pay — processed securely by Apple
- Google Pay — processed securely by Google
- Cash — paid directly at pickup
We never store your card details. All digital payments go through Apple and Google's secure systems. We only receive confirmation that a payment was successfully made.
Push Notifications
We send push notifications for:
- Order status updates (confirmed, preparing, ready for pickup)
- Surprise bag booking updates
- Refund confirmations
- New food items from your favorite restaurants (optional)
You can disable push notifications at any time in your device settings.
Third-Party Services
| Service | Purpose | Privacy Policy |
|---|---|---|
| Supabase | Secure data storage | supabase.com/privacy |
| Resend | Transactional emails | resend.com/privacy |
| Apple Pay | Payment processing | apple.com/legal/privacy |
| Google Pay | Payment processing | policies.google.com/privacy |
| Expo | Push notifications | expo.dev/privacy |
| Google Analytics for Firebase | Used to understand how the app is used | firebase.google.com/support/privacy |
| Firebase Crashlytics | Used to detect and diagnose crashes | firebase.google.com/support/privacy |
| Vercel Analytics | Aggregate website page-view statistics | vercel.com/legal/privacy-policy |
We do not use advertising networks, social media trackers, or any service that targets advertising.
Cookies and Tracking
Karam does not use cookies on the website or mobile app.
We use Google Analytics for Firebase and Firebase Crashlytics to understand how the app is used and to detect crashes. These services collect device information, app usage events, and may collect your device advertising identifier. This information is used only for analytics and crash reporting.
We do not use advertising networks, social media trackers, or any service that targets advertising. We do not sell your data to advertisers.
You can reset or limit your advertising identifier in your device settings.
Data Storage and Security
- Location: Your data is stored on secure servers in the South Asia region, closest to Qatar
- Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest
- Access control: Row Level Security (RLS) ensures each user can only access their own data. Only authorized Karam staff can access user data.
- Retention: We keep your data for as long as your account is active
Data Retention
| Data Type | Retention Period |
|---|---|
| Customer accounts | Until account deletion request |
| Order history | 3 years for legal/accounting purposes |
| Partner application (declined) | 90 days |
| Partner application (approved) | Duration of partnership |
| Push notification tokens | Until app uninstall or permission revoked |
| Error logs | 30 days |
When you delete your account:
- All personal data is permanently and immediately deleted
- Your order history is deleted
- Deleted accounts cannot be recovered
Your Rights
Right to Access
You can view your profile and order history at any time within the app. Website visitors may email us to request their application data.
Right to Correction
You can update your name, phone number, and email address through app settings.
Right to Deletion
You can permanently delete your account through app settings or by emailing support@karam-app.com. Deletion is immediate and irreversible. Website applicants may request deletion of their application data at any time.
For step-by-step instructions and full details of what data is retained after deletion, see our account deletion guide.
Right to Data Export
You may request a copy of your data by emailing support@karam-app.com. We will provide it within 30 days in a commonly used format.
Right to Opt Out
- Push notifications: Disable in your device settings at any time
- Marketing emails: Use the unsubscribe link included in every email
Qatar Data Protection (PDPPL)
Karam complies with Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016). As a Qatar-based company, we are committed to:
- Processing data lawfully and transparently
- Collecting only data necessary for our service
- Protecting your data with appropriate security measures
- Respecting your rights to access, correct, and delete your data
GDPR Rights (European Users)
If you are located in the European Economic Area (EEA), you have the following additional rights under the General Data Protection Regulation (GDPR):
- Right to access, rectify, and erase your data
- Right to restrict or object to processing
- Right to data portability
- Right to lodge a complaint with your local supervisory authority
To exercise these rights, contact us at support@karam-app.com.
CCPA Rights (California Users)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected and why
- Right to delete your personal information
- Right to opt out of the sale of personal information
Karam does not sell your personal information. Contact us at support@karam-app.com. We will respond within 30 days.
Changes to This Policy
We may update this Privacy Policy from time to time. When changes are made:
- The “Last updated” date at the top will be revised
- You will be notified via app notification or email for significant changes
- Continued use of Karam after changes are posted means you accept the updated policy
Our Mission
Every order placed through Karam helps prevent perfectly good food from going to waste, supports local restaurants in Qatar, and offers customers quality meals at discounted prices. We are committed to building a more sustainable food ecosystem in Qatar.
Thank you for being part of the Karam community.
Contact Us
Karam App LLC
Email: support@karam-app.com
Website: karam-app.com
Location: Doha, Qatar
We respond to all inquiries within 48 hours.
This Privacy Policy is available in Arabic upon request.