Privacy policy
This This Privacy Policy describes how Tweeq International Company ("Tweeq", "we", "us", "our") collects, uses, processes, and protects your personal data when you use the Tweeq application and e-wallet services available at www.tweeq.sa (the "App").
Tweeq is incorporated and existing under the laws of the Kingdom of Saudi Arabia, with its registered address at Building 4323, Anas Ibn Malik St., Al Narjis District, Secondary No. 8861, Postal Code 13324, Kingdom of Saudi Arabia.
This Privacy Policy is issued in compliance with the SDAIA Personal Data Protection Law (PDPL) and applicable regulations of the Saudi Central Bank (SAMA). By using the App, you confirm that you have read and understood this Privacy Policy.
Click on any of the links below to go straight to one of the following sections:
Do we share your data with third parties?
Your rights as a Data Subject
Changes to this Privacy Policy
What Data we collect?
We collect the following categories of personal data:
Identity Data; full name, date of birth, gender, and national identity information.
Contact Data; address, email address, and telephone numbers.
Financial Data; bank account and payment card details.
Transaction Data; details of payments made to and from you, and other details of products and services you have used.
Technical Data; IP address, login data, browser type and version, time zone and location settings, device information, and other technology data from devices you use to access the App.
Profile Data; your username and password, transaction history, preferences, feedback, and survey responses.
Usage Data; information about how you use the App, our website, products, and services.
Communications Data; your preferences regarding receiving marketing communications from us.
Contacts Data; with your permission, we securely sync your contacts to enable features such as sending money to people in your contact list. This data is stored securely on our servers and is not used for any other purpose.
We collect and use your personal data for the following purposes:
To verify your identity and comply with our Know Your Customer (KYC) and Anti-Money Laundering / Combating the Financing of Terrorism (AML/CFT) obligations.
To create, manage, and operate your Tweeq account and e-wallet.
To process transactions and provide you with our services.
To comply with legal, regulatory, and supervisory obligations imposed on Tweeq by SAMA and other competent authorities.
To protect the security and integrity of our services and prevent fraud.
To send you administrative communications relating to your account or our services.
To respond to your enquiries, complaints, and Data Subject requests.
To improve and develop our products and services.
To promote Tweeq products and services, subject to your marketing consent preferences.
For any other purpose necessary for the lawful operation of our services or as required by applicable law.
Your personal data is processed on the basis of one or more of the following legal grounds: performance of a contract with you; compliance with a legal or regulatory obligation; protection of legitimate interests; or your consent, where applicable.
How is your data collected?
We collect your personal data in the following ways:
Directly from you when you register for an account, use the App, or contact us.
Automatically when you use the App or our website, through cookies and similar technologies.
From third parties where permitted by law, including identity verification providers and regulatory databases.
Do you have to accept this Privacy Policy?
This Privacy Policy forms an integral part of the App’s Terms and Conditions.
Data Submission Notice:
By submitting your information to us, you acknowledge that you have read and understood this Privacy Policy. If you do not accept its terms, you must stop using the App and submitting the required onboarding data.
Notice:
Certain data processing activities — including identity verification, transaction processing, and compliance with KYC/AML/CFT obligations — are required by applicable laws and regulatory obligations. Your consent for these activities is provided at onboarding and is required to operate your wallet. If you withdraw this consent, your wallet will be closed. However, Tweeq may continue to retain and process your personal data to fulfil its legal and regulatory obligations even after account closure, until all such obligations are fully satisfied.;
How long do we retain your data?
We retain your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable laws, regulatory obligations, and SAMA requirements. When you close your account or withdraw consent, your personal data will continue to be retained to the extent required by law; including KYC/AML/CFT obligations and minimum retention periods mandated by SAMA and other competent authorities. Your personal data will only be permanently destroyed once all legal, regulatory, and authority-based obligations have been fully satisfied.
Do we share your data with third parties?
We may share your personal data with the following categories of third parties:
Service providers and processors; companies that assist us in delivering our services, subject to strict data protection requirements.
Regulatory and supervisory authorities; including SAMA and other competent authorities, where required by law.
Law enforcement and courts; where we are required or permitted by law to do so.
Fraud prevention and financial crime agencies; to protect against fraud, money laundering, and other financial crimes.
We require all third parties who process personal data on our behalf to do so in accordance with applicable data protection laws and our contractual requirements. We do not sell your personal data to third parties.
Is your data transferred outside Saudi Arabia?
No. All personal data collected and processed by Tweeq is stored and processed within the Kingdom of Saudi Arabia. We do not transfer your personal data outside the Kingdom.
Is your data used for marketing?
We may send you marketing communications about Tweeq products and services that may be of interest to you. Your consent for marketing is separate from your consent for core processing, and is freely given. You can withdraw your marketing consent at any time without any impact on your wallet or core services.
Managing your marketing preferences:
You can manage your marketing preferences at any time using the opt-in/opt-out toggle available in the Tweeq app. Withdrawing your marketing consent will not affect the lawfulness of any processing carried out before the withdrawal, and will not affect your ability to use Tweeq’s core services.
How do we protect your data?
We implement appropriate technical, administrative, and organisational measures to protect your personal data against unauthorised access, loss, misuse, or disclosure. These measures include encryption of payment transactions, access controls, and regular security assessments.
While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. We encourage you to keep your login credentials confidential and to contact us immediately if you suspect any unauthorised access to your account.
When may we disclose your data?
We may disclose your personal data in the following circumstances:
To provide you with the services available through the App.
To comply with a legal obligation, court order, or request from a regulatory authority of competent jurisdiction.
To protect, defend, or enforce our rights or the rights of our users.
To prevent fraud, money laundering, or other financial crimes.
Where required by SAMA or other competent authorities.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or applicable laws and regulations. In the event of any material changes, we will notify you via your registered contact details. The notification will be sent prior to or at the time the changes take effect.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.
Your rights as a Data Subject
Under the SDAIA Personal Data Protection Law (PDPL), you have the following rights in relation to your personal data held by Tweeq:
Right to Access
You have the right to request confirmation of whether Tweeq holds personal data about you, and to obtain access to that data and a copy of it, subject to applicable legal and regulatory limitations.
Right to Correction
You have the right to request correction of any inaccurate or incomplete personal data we hold about you. We may ask you to provide supporting documentation to verify the correction requested.
Right to Destruction
You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you wish to close your Tweeq account and end your relationship with us. If you exercise this right, Tweeq will close your wallet and cease processing your personal data for service purposes. However, Tweeq may continue to retain and process your personal data to the extent required by applicable laws, regulatory obligations, and authority directives; including KYC/AML/CFT requirements and the minimum data retention periods mandated by SAMA and other competent authorities. Your personal data will only be permanently destroyed once all such legal, regulatory, and authority-based obligations have been fully satisfied.
A note on consent:
Your consent is required for all personal data processing activities carried out by Tweeq. At onboarding, you provide consent for Tweeq to process your personal data for the purposes of operating your wallet, including identity verification, transaction processing, and compliance with KYC/AML/CFT obligations. This consent is also legally mandated — meaning that if you withdraw it, Tweeq cannot continue to operate your wallet and your account will be closed. However, even after account closure, Tweeq may continue to retain and process your personal data to the extent required by applicable laws, regulatory obligations, and authority directives — including KYC/AML/CFT requirements and the minimum data retention periods mandated by SAMA and other competent authorities. Your personal data will only be permanently destroyed once all such legal, regulatory, and authority-based obligations have been fully satisfied. For marketing communications, your consent is separate and freely given. You can withdraw your marketing consent at any time using the opt-in/opt-out toggle in the Tweeq app, without any impact on your wallet or core services.
How to submit a Data Subject request:
To exercise any of the above rights, please contact our Data Protection Officer:
Email: dpr@tweeq.sa
Phone: 800 440 2030
We will respond to your request within 30 days of receipt, in accordance with the SDAIA Personal Data Protection Law (PDPL) and applicable SAMA requirements. If we are unable to action your request, we will inform you of the reason and your right to escalate your complaint to SAMA.
How to contact us
For any questions, requests, or concerns regarding this Privacy Policy or the handling of your personal data, please contact:
Data Protection Officer
Email: dpr@tweeq.sa
Customer Care (24/7)
Email: care@tweeq.sa
Phone: 800 440 2030
Phone: (+966) 9200 2 2030
Registered Address
Tweeq International Company
Building 4323, Anas Ibn Malik St., Al Narjis District, Secondary No. 8861, Postal Code
13324, Riyadh
Kingdom of Saudi Arabia