Karam

Privacy Policy

Last updated: August 12, 2026

Applies to karam-app.com and the Karam mobile app (iOS & Android)

Introduction

Welcome to Karam. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have in relation to it.

If you have any questions, contact us at support@karam-app.com. We will respond within 48 hours.

This policy applies to:

  • Karam mobile app (iOS and Android)
  • Karam website at karam-app.com
  • All related services operated by Karam App LLC

About Karam

Karam is operated by Karam App LLC, a Qatar-based company dedicated to reducing food waste. We connect restaurants that have surplus food with budget-conscious customers through discounted food items and "Surprise Bags" available for pickup. Karam operates as a pickup-only service — we do not offer delivery.

Minimum Age

The Karam service is intended for account holders aged 13 and above. This minimum age applies to account creation and payment use — not to the content of the app, which is suitable for all ages. Users under 18 must have parental or guardian consent to create an account and to make purchases, in line with Qatari payment regulations and our payment provider's requirements. If you believe a child under 13 has created an account without consent, please contact us at support@karam-app.com and we will delete the account.

Information We Collect

Website Visitors (karam-app.com)

When you submit a restaurant partner application on our website, we collect:

  • Full name
  • Email address
  • Phone number (Qatar mobile)
  • Business name
  • Business address
  • Business type (restaurant, café, grocery, etc.)

Our website uses Vercel Analytics to measure aggregate page-view statistics. We do not use tracking cookies, advertising cookies, or advertising trackers on the website. We do not create customer accounts on the website.

Mobile App — When You Create an Account

  • Full name
  • Phone number
  • Email address
  • Password (stored encrypted — we never see it)
  • Preferred language (Arabic or English)

Mobile App — When You Place an Order

  • Order details (items, quantity, pickup time)
  • Payment method (Apple Pay, Google Pay, or Cash)
  • Special instructions (if provided)

Mobile App — Automatically Collected

  • Device information, such as the model, operating system, and app version
  • App usage events, such as which screens you view
  • Crash reports, if the app encounters an error
  • Your device advertising identifier
  • Approximate location (such as your city), derived from your IP address by Google Analytics for Firebase

Restaurant Partners (Website and App)

  • Business name (English and Arabic)
  • Owner name and email
  • Business address and location coordinates
  • Phone number
  • Restaurant logo and cover images
  • Menu items, prices, and descriptions
  • Operating hours
  • Settlement details for payouts

What We Do NOT Collect

  • Payment card details (handled entirely by Apple Pay / Google Pay)
  • Browsing history outside the app
  • Contacts or photos

How We Use Your Information

PurposeInformation Used
Create and manage your accountName, email, phone
Process and fulfill your ordersName, phone, email, order details
Send order confirmations and updatesEmail, phone (push notifications)
Provide customer supportName, email, order history
Review restaurant partner applicationsBusiness name, contact info, address
Process restaurant settlementsBusiness and payment details
Improve our app and websiteAnonymous usage data
Prevent fraud and abuseAccount activity
Legal complianceAs required by Qatar law

Location Data

With your permission, we access your device location to show restaurants near you, calculate distances, and sort results. You can refuse or revoke this permission at any time in your device settings. The app still works without it.

Your device location is stored only on your device (in the app's local storage) and is used to sort restaurant results and display distances. It is deleted from your device when you sign out. We do not send your device location to our servers, and it is not included in any analytics event.

Separately, Google Analytics for Firebase derives an approximate location (such as your city) from your IP address for aggregate analytics. This is disclosed under Information We Collect above.

Any addresses you save (Home, Work, Other) are entered by you and stored only on your device — they are never sent to our servers. They are deleted when you sign out.

Information Shared With Restaurants

When you place an order, the restaurant receives:

  • Your name
  • Your phone number
  • Your email address
  • Order details and pickup time

This information is shared solely to allow the restaurant to prepare your order and contact you when it is ready. Restaurants are not permitted to use this information for marketing without your consent.

Payment Processing

Karam supports the following payment methods:

  • Apple Pay — processed securely by Apple
  • Google Pay — processed securely by Google
  • Cash — paid directly at pickup

We never store your card details. All digital payments go through Apple and Google's secure systems. We only receive confirmation that a payment was successfully made.

Push Notifications

We send push notifications for:

  • Order status updates (confirmed, preparing, ready for pickup)
  • Surprise bag booking updates
  • Refund confirmations
  • New food items from your favorite restaurants (optional)

You can disable push notifications at any time in your device settings.

Third-Party Services

ServicePurposePrivacy Policy
SupabaseSecure data storagesupabase.com/privacy
ResendTransactional emailsresend.com/privacy
Apple PayPayment processingapple.com/legal/privacy
Google PayPayment processingpolicies.google.com/privacy
ExpoPush notificationsexpo.dev/privacy
Google Analytics for FirebaseUsed to understand how the app is usedfirebase.google.com/support/privacy
Firebase CrashlyticsUsed to detect and diagnose crashesfirebase.google.com/support/privacy
Vercel AnalyticsAggregate website page-view statisticsvercel.com/legal/privacy-policy

We do not use advertising networks, social media trackers, or any service that targets advertising.

Cookies and Tracking

Karam does not use cookies on the website or mobile app.

We use Google Analytics for Firebase and Firebase Crashlytics to understand how the app is used and to detect crashes. These services collect device information, app usage events, and may collect your device advertising identifier. This information is used only for analytics and crash reporting.

We do not use advertising networks, social media trackers, or any service that targets advertising. We do not sell your data to advertisers.

You can reset or limit your advertising identifier in your device settings.

Data Storage and Security

  • Location: Your data is stored on secure servers in the South Asia region, closest to Qatar
  • Encryption: All data is encrypted in transit (HTTPS/TLS) and at rest
  • Access control: Row Level Security (RLS) ensures each user can only access their own data. Only authorized Karam staff can access user data.
  • Retention: We keep your data for as long as your account is active

Data Retention

Data TypeRetention Period
Customer accountsUntil account deletion request
Order history3 years for legal/accounting purposes
Partner application (declined)90 days
Partner application (approved)Duration of partnership
Push notification tokensUntil app uninstall or permission revoked
Error logs30 days

When you delete your account:

  • All personal data is permanently and immediately deleted
  • Your order history is deleted
  • Deleted accounts cannot be recovered

Your Rights

Right to Access

You can view your profile and order history at any time within the app. Website visitors may email us to request their application data.

Right to Correction

You can update your name, phone number, and email address through app settings.

Right to Deletion

You can permanently delete your account through app settings or by emailing support@karam-app.com. Deletion is immediate and irreversible. Website applicants may request deletion of their application data at any time.

For step-by-step instructions and full details of what data is retained after deletion, see our account deletion guide.

Right to Data Export

You may request a copy of your data by emailing support@karam-app.com. We will provide it within 30 days in a commonly used format.

Right to Opt Out

  • Push notifications: Disable in your device settings at any time
  • Marketing emails: Use the unsubscribe link included in every email

Qatar Data Protection (PDPPL)

Karam complies with Qatar's Personal Data Privacy Protection Law (Law No. 13 of 2016). As a Qatar-based company, we are committed to:

  • Processing data lawfully and transparently
  • Collecting only data necessary for our service
  • Protecting your data with appropriate security measures
  • Respecting your rights to access, correct, and delete your data

GDPR Rights (European Users)

If you are located in the European Economic Area (EEA), you have the following additional rights under the General Data Protection Regulation (GDPR):

  • Right to access, rectify, and erase your data
  • Right to restrict or object to processing
  • Right to data portability
  • Right to lodge a complaint with your local supervisory authority

To exercise these rights, contact us at support@karam-app.com.

CCPA Rights (California Users)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected and why
  • Right to delete your personal information
  • Right to opt out of the sale of personal information

Karam does not sell your personal information. Contact us at support@karam-app.com. We will respond within 30 days.

Changes to This Policy

We may update this Privacy Policy from time to time. When changes are made:

  • The “Last updated” date at the top will be revised
  • You will be notified via app notification or email for significant changes
  • Continued use of Karam after changes are posted means you accept the updated policy

Our Mission

Every order placed through Karam helps prevent perfectly good food from going to waste, supports local restaurants in Qatar, and offers customers quality meals at discounted prices. We are committed to building a more sustainable food ecosystem in Qatar.

Thank you for being part of the Karam community.

Contact Us

Karam App LLC

Email: support@karam-app.com

Website: karam-app.com

Location: Doha, Qatar

We respond to all inquiries within 48 hours.

This Privacy Policy is available in Arabic upon request.