ع
Home
Features
About
Partner with us
Contact Us
Download App
Privacy policy
Privacy policy
Privacy policy
1. Controller and scope
1. Controller and scope
Sahm AlMustaqbal Company For Information Technology (“Lugmety”, “we”, “us”) is the controller of personal data described in this Privacy Policy. This Policy applies to the Lugmety customer app, website and connected customer services. It does not govern separate restaurant, driver or employee apps unless expressly stated.
tection authority through its official channels.
Sahm AlMustaqbal Company For Information Technology (“Lugmety”, “we”, “us”) is the controller of personal data described in this Privacy Policy. This Policy applies to the Lugmety customer app, website and connected customer services. It does not govern separate restaurant, driver or employee apps unless expressly stated.
tection authority through its official channels.
Sahm AlMustaqbal Company For Information Technology (“Lugmety”, “we”, “us”) is the controller of personal data described in this Privacy Policy. This Policy applies to the Lugmety customer app, website and connected customer services. It does not govern separate restaurant, driver or employee apps unless expressly stated.
tection authority through its official channels.
2. Personal data we collect
2. Personal data we collect
Account and identity data: name, date of birth, mobile number, email address, account identifiers, login method and authentication records. We do not receive your Apple password.
Location and address data: precise or approximate location when permitted, saved addresses, map coordinates, delivery instructions and service-area information.
Transaction data: cart, order, Merchant, delivery, reservation if launched, corporate-order, payment status, invoices, Wallet top-ups, credits, refunds, promotions and support history. Full card details are handled or tokenized by the payment provider rather than stored by Lugmety.
Content and communications: order notes, ratings, reviews, surveys, support chats, complaint photos/videos, call recordings and messages. Allergy or health information voluntarily placed in notes is sensitive personal data.
Device, usage and diagnostic data: IP address, device and advertising identifiers, operating system, app version, language, session and interaction data, crash reports, performance and security logs.
Account and identity data: name, date of birth, mobile number, email address, account identifiers, login method and authentication records. We do not receive your Apple password.
Location and address data: precise or approximate location when permitted, saved addresses, map coordinates, delivery instructions and service-area information.
Transaction data: cart, order, Merchant, delivery, reservation if launched, corporate-order, payment status, invoices, Wallet top-ups, credits, refunds, promotions and support history. Full card details are handled or tokenized by the payment provider rather than stored by Lugmety.
Content and communications: order notes, ratings, reviews, surveys, support chats, complaint photos/videos, call recordings and messages. Allergy or health information voluntarily placed in notes is sensitive personal data.
Device, usage and diagnostic data: IP address, device and advertising identifiers, operating system, app version, language, session and interaction data, crash reports, performance and security logs.
Account and identity data: name, date of birth, mobile number, email address, account identifiers, login method and authentication records. We do not receive your Apple password.
Location and address data: precise or approximate location when permitted, saved addresses, map coordinates, delivery instructions and service-area information.
Transaction data: cart, order, Merchant, delivery, reservation if launched, corporate-order, payment status, invoices, Wallet top-ups, credits, refunds, promotions and support history. Full card details are handled or tokenized by the payment provider rather than stored by Lugmety.
Content and communications: order notes, ratings, reviews, surveys, support chats, complaint photos/videos, call recordings and messages. Allergy or health information voluntarily placed in notes is sensitive personal data.
Device, usage and diagnostic data: IP address, device and advertising identifiers, operating system, app version, language, session and interaction data, crash reports, performance and security logs.
3. Sources
3. Sources
We obtain data directly from you; automatically from your device and use of the Platform; from Merchants and delivery providers involved in an order; from corporate-account administrators; and from service providers such as Apple Sign-In, payment, maps, communications, analytics, attribution and technical-support providers.
We obtain data directly from you; automatically from your device and use of the Platform; from Merchants and delivery providers involved in an order; from corporate-account administrators; and from service providers such as Apple Sign-In, payment, maps, communications, analytics, attribution and technical-support providers.
We obtain data directly from you; automatically from your device and use of the Platform; from Merchants and delivery providers involved in an order; from corporate-account administrators; and from service providers such as Apple Sign-In, payment, maps, communications, analytics, attribution and technical-support providers.
4. Why we process data and legal bases
4. Why we process data and legal bases
We process data to create and secure accounts; verify age and contact details; show service availability; calculate distance and delivery; accept, fulfill, track, support and refund orders; operate the Wallet; process payments; provide corporate, event, gift and scheduled-order features; communicate operational updates; investigate complaints; prevent fraud and abuse; maintain and improve performance; comply with tax, accounting, transport, consumer, security and lawful-authority requirements; establish or defend legal claims; and send marketing where consented.
Depending on the activity, processing is based on performance of a contract or steps requested before it; compliance with legal obligations; your consent (including direct marketing and sensitive health/allergy data where required); protection of vital interests in an emergency; or Lugmety’s legitimate interests where permitted and balanced against your rights. We do not use sensitive data for marketing.
We process data to create and secure accounts; verify age and contact details; show service availability; calculate distance and delivery; accept, fulfill, track, support and refund orders; operate the Wallet; process payments; provide corporate, event, gift and scheduled-order features; communicate operational updates; investigate complaints; prevent fraud and abuse; maintain and improve performance; comply with tax, accounting, transport, consumer, security and lawful-authority requirements; establish or defend legal claims; and send marketing where consented.
Depending on the activity, processing is based on performance of a contract or steps requested before it; compliance with legal obligations; your consent (including direct marketing and sensitive health/allergy data where required); protection of vital interests in an emergency; or Lugmety’s legitimate interests where permitted and balanced against your rights. We do not use sensitive data for marketing.
We process data to create and secure accounts; verify age and contact details; show service availability; calculate distance and delivery; accept, fulfill, track, support and refund orders; operate the Wallet; process payments; provide corporate, event, gift and scheduled-order features; communicate operational updates; investigate complaints; prevent fraud and abuse; maintain and improve performance; comply with tax, accounting, transport, consumer, security and lawful-authority requirements; establish or defend legal claims; and send marketing where consented.
Depending on the activity, processing is based on performance of a contract or steps requested before it; compliance with legal obligations; your consent (including direct marketing and sensitive health/allergy data where required); protection of vital interests in an emergency; or Lugmety’s legitimate interests where permitted and balanced against your rights. We do not use sensitive data for marketing.
5. Location
5. Location
With device permission, location helps identify service availability, nearby Merchants, distance and an accurate delivery address. The customer app is not described as collecting background location. You may deny location permission and, where supported, enter an address manually, but some location-dependent functions may be less accurate or unavailable. Device permissions can be changed in operating-system settings.
With device permission, location helps identify service availability, nearby Merchants, distance and an accurate delivery address. The customer app is not described as collecting background location. You may deny location permission and, where supported, enter an address manually, but some location-dependent functions may be less accurate or unavailable. Device permissions can be changed in operating-system settings.
With device permission, location helps identify service availability, nearby Merchants, distance and an accurate delivery address. The customer app is not described as collecting background location. You may deny location permission and, where supported, enter an address manually, but some location-dependent functions may be less accurate or unavailable. Device permissions can be changed in operating-system settings.
6. Sensitive allergy and health information
6. Sensitive allergy and health information
With device permission, location helps identify service availability, nearby Merchants, distance and an accurate delivery address. The customer app is not described as collecting background location. You may deny location permission and, where supported, enter an address manually, but some location-dependent functions may be less accurate or unavailable. Device permissions can be changed in operating-system settings.
With device permission, location helps identify service availability, nearby Merchants, distance and an accurate delivery address. The customer app is not described as collecting background location. You may deny location permission and, where supported, enter an address manually, but some location-dependent functions may be less accurate or unavailable. Device permissions can be changed in operating-system settings.
With device permission, location helps identify service availability, nearby Merchants, distance and an accurate delivery address. The customer app is not described as collecting background location. You may deny location permission and, where supported, enter an address manually, but some location-dependent functions may be less accurate or unavailable. Device permissions can be changed in operating-system settings.
7. Calls, messages and support
7. Calls, messages and support
Customer-support calls may be recorded for quality, training, security and dispute handling. A notice is provided at the start of a recorded call. Support messages and submitted evidence are retained only as needed for the request, quality, security, legal claims and applicable retention duties.
Customer-support calls may be recorded for quality, training, security and dispute handling. A notice is provided at the start of a recorded call. Support messages and submitted evidence are retained only as needed for the request, quality, security, legal claims and applicable retention duties.
Customer-support calls may be recorded for quality, training, security and dispute handling. A notice is provided at the start of a recorded call. Support messages and submitted evidence are retained only as needed for the request, quality, security, legal claims and applicable retention duties.
8. Analytics, attribution and advertising identifiers
8. Analytics, attribution and advertising identifiers
We use technical and analytics tools to understand app usage, diagnose crashes, measure campaigns and protect the service. These tools may process device, advertising, usage and diagnostic data. Where an operating system or law requires permission for tracking or advertising measurement, we request it before that processing. Declining optional tracking must not prevent core ordering functionality.
Lugmety does not currently use order history and location to make individualized offer recommendations as a primary feature. General offers may still be shown based on service area or campaign eligibility. If materially personalized marketing is introduced, this Policy and the relevant consent choices must be updated first.
We use technical and analytics tools to understand app usage, diagnose crashes, measure campaigns and protect the service. These tools may process device, advertising, usage and diagnostic data. Where an operating system or law requires permission for tracking or advertising measurement, we request it before that processing. Declining optional tracking must not prevent core ordering functionality.
Lugmety does not currently use order history and location to make individualized offer recommendations as a primary feature. General offers may still be shown based on service area or campaign eligibility. If materially personalized marketing is introduced, this Policy and the relevant consent choices must be updated first.
We use technical and analytics tools to understand app usage, diagnose crashes, measure campaigns and protect the service. These tools may process device, advertising, usage and diagnostic data. Where an operating system or law requires permission for tracking or advertising measurement, we request it before that processing. Declining optional tracking must not prevent core ordering functionality.
Lugmety does not currently use order history and location to make individualized offer recommendations as a primary feature. General offers may still be shown based on service area or campaign eligibility. If materially personalized marketing is introduced, this Policy and the relevant consent choices must be updated first.
9. Who receives personal data
9. Who receives personal data
We disclose only what is reasonably necessary to: the Merchant preparing or supplying an order; Lugmety or third-party delivery providers; the corporate customer or administrator for sponsored corporate orders; payment and Wallet service providers; cloud-hosting and infrastructure providers; maps and location providers; authentication providers; SMS, push, WhatsApp and call-center providers; analytics, attribution, diagnostics, security and technical-support providers; professional advisers, auditors and insurers; competent government, regulatory, law-enforcement or judicial bodies where legally required; and parties to a corporate transaction subject to appropriate confidentiality and law.
Current technology providers may include AWS, DigitalOcean, Google Maps, Firebase, Adjust, Sentry, Unifonic, Genesys/Arkan, Apple Sign-In, Amazon Payment Services, WhatsApp/Meta services and the Meta/Facebook SDK. Their role and data access depend on the enabled feature. We require processors to protect data and act only for agreed purposes.
We disclose only what is reasonably necessary to: the Merchant preparing or supplying an order; Lugmety or third-party delivery providers; the corporate customer or administrator for sponsored corporate orders; payment and Wallet service providers; cloud-hosting and infrastructure providers; maps and location providers; authentication providers; SMS, push, WhatsApp and call-center providers; analytics, attribution, diagnostics, security and technical-support providers; professional advisers, auditors and insurers; competent government, regulatory, law-enforcement or judicial bodies where legally required; and parties to a corporate transaction subject to appropriate confidentiality and law.
Current technology providers may include AWS, DigitalOcean, Google Maps, Firebase, Adjust, Sentry, Unifonic, Genesys/Arkan, Apple Sign-In, Amazon Payment Services, WhatsApp/Meta services and the Meta/Facebook SDK. Their role and data access depend on the enabled feature. We require processors to protect data and act only for agreed purposes.
We disclose only what is reasonably necessary to: the Merchant preparing or supplying an order; Lugmety or third-party delivery providers; the corporate customer or administrator for sponsored corporate orders; payment and Wallet service providers; cloud-hosting and infrastructure providers; maps and location providers; authentication providers; SMS, push, WhatsApp and call-center providers; analytics, attribution, diagnostics, security and technical-support providers; professional advisers, auditors and insurers; competent government, regulatory, law-enforcement or judicial bodies where legally required; and parties to a corporate transaction subject to appropriate confidentiality and law.
Current technology providers may include AWS, DigitalOcean, Google Maps, Firebase, Adjust, Sentry, Unifonic, Genesys/Arkan, Apple Sign-In, Amazon Payment Services, WhatsApp/Meta services and the Meta/Facebook SDK. Their role and data access depend on the enabled feature. We require processors to protect data and act only for agreed purposes.
10. International transfers
10. International transfers
Some cloud, payments, communications, analytics, diagnostics or support providers process or store data outside Saudi Arabia. Before transferring or disclosing personal data outside the Kingdom, Lugmety must apply the Saudi Personal Data Protection Law and its transfer regulation, limit the data, assess the transfer where required, and use an approved legal mechanism and appropriate safeguards such as an adequacy basis, standard contractual clauses or another permitted exception.
Some cloud, payments, communications, analytics, diagnostics or support providers process or store data outside Saudi Arabia. Before transferring or disclosing personal data outside the Kingdom, Lugmety must apply the Saudi Personal Data Protection Law and its transfer regulation, limit the data, assess the transfer where required, and use an approved legal mechanism and appropriate safeguards such as an adequacy basis, standard contractual clauses or another permitted exception.
Some cloud, payments, communications, analytics, diagnostics or support providers process or store data outside Saudi Arabia. Before transferring or disclosing personal data outside the Kingdom, Lugmety must apply the Saudi Personal Data Protection Law and its transfer regulation, limit the data, assess the transfer where required, and use an approved legal mechanism and appropriate safeguards such as an adequacy basis, standard contractual clauses or another permitted exception.
11. Retention and destruction
11. Retention and destruction
We retain personal data only for as long as necessary for the purpose collected and to meet legal, tax, accounting, transport, security, fraud-prevention, dispute and recordkeeping requirements. Retention differs by data type and transaction status. When retention is no longer required, data is securely deleted, destroyed or irreversibly anonymized, including through controlled deletion cycles for backups where applicable.
Account deletion removes or de-identifies data not required to be retained. Certain transaction, invoice, payment, fraud or dispute records may remain restricted for the legally required period and will not be used for unrelated marketing.
We retain personal data only for as long as necessary for the purpose collected and to meet legal, tax, accounting, transport, security, fraud-prevention, dispute and recordkeeping requirements. Retention differs by data type and transaction status. When retention is no longer required, data is securely deleted, destroyed or irreversibly anonymized, including through controlled deletion cycles for backups where applicable.
Account deletion removes or de-identifies data not required to be retained. Certain transaction, invoice, payment, fraud or dispute records may remain restricted for the legally required period and will not be used for unrelated marketing.
We retain personal data only for as long as necessary for the purpose collected and to meet legal, tax, accounting, transport, security, fraud-prevention, dispute and recordkeeping requirements. Retention differs by data type and transaction status. When retention is no longer required, data is securely deleted, destroyed or irreversibly anonymized, including through controlled deletion cycles for backups where applicable.
Account deletion removes or de-identifies data not required to be retained. Certain transaction, invoice, payment, fraud or dispute records may remain restricted for the legally required period and will not be used for unrelated marketing.
12. Security
12. Security
We use proportionate technical, organizational and administrative controls designed to protect confidentiality, integrity and availability, including access controls, authentication, encryption in transit, monitoring, backups, vendor controls and incident response. No system is completely secure. If a personal-data breach may harm you or conflict with your rights, we will notify the competent authority and affected individuals as required.
We use proportionate technical, organizational and administrative controls designed to protect confidentiality, integrity and availability, including access controls, authentication, encryption in transit, monitoring, backups, vendor controls and incident response. No system is completely secure. If a personal-data breach may harm you or conflict with your rights, we will notify the competent authority and affected individuals as required.
We use proportionate technical, organizational and administrative controls designed to protect confidentiality, integrity and availability, including access controls, authentication, encryption in transit, monitoring, backups, vendor controls and incident response. No system is completely secure. If a personal-data breach may harm you or conflict with your rights, we will notify the competent authority and affected individuals as required.
13. Your rights
13. Your rights
Subject to the Saudi Personal Data Protection Law and its exceptions, you may have the right to be informed; access personal data; obtain a readable and clear copy; request correction, completion or updating; request destruction when applicable; withdraw consent without affecting earlier lawful processing; and complain to the competent authority.
You may update certain details in the app or submit a request to info@lugmety.com. We may verify identity and request information necessary to locate the data. We will respond within the period required by law and explain any lawful restriction. Requests are ordinarily free unless the law permits otherwise.
Subject to the Saudi Personal Data Protection Law and its exceptions, you may have the right to be informed; access personal data; obtain a readable and clear copy; request correction, completion or updating; request destruction when applicable; withdraw consent without affecting earlier lawful processing; and complain to the competent authority.
You may update certain details in the app or submit a request to info@lugmety.com. We may verify identity and request information necessary to locate the data. We will respond within the period required by law and explain any lawful restriction. Requests are ordinarily free unless the law permits otherwise.
Subject to the Saudi Personal Data Protection Law and its exceptions, you may have the right to be informed; access personal data; obtain a readable and clear copy; request correction, completion or updating; request destruction when applicable; withdraw consent without affecting earlier lawful processing; and complain to the competent authority.
You may update certain details in the app or submit a request to info@lugmety.com. We may verify identity and request information necessary to locate the data. We will respond within the period required by law and explain any lawful restriction. Requests are ordinarily free unless the law permits otherwise.
14. Marketing choices
14. Marketing choices
Promotional push notifications, SMS and WhatsApp messages require a valid consent or another lawful permission where applicable. Marketing consent is optional, documented and separate from essential service notifications. Each available channel must provide a e and straightforward way to stop marketing. You may withdraw through Profile > Privacy/Marketing Preferences, an unsubscribe control, or info@lugmety.com. We will stop the affected marketing without undue delay.
OTPs, security alerts, receipts, order status, driver contact, support responses and policy notices are operational communications and may continue where necessary even if marketing is disabled.
Promotional push notifications, SMS and WhatsApp messages require a valid consent or another lawful permission where applicable. Marketing consent is optional, documented and separate from essential service notifications. Each available channel must provide a e and straightforward way to stop marketing. You may withdraw through Profile > Privacy/Marketing Preferences, an unsubscribe control, or info@lugmety.com. We will stop the affected marketing without undue delay.
OTPs, security alerts, receipts, order status, driver contact, support responses and policy notices are operational communications and may continue where necessary even if marketing is disabled.
Promotional push notifications, SMS and WhatsApp messages require a valid consent or another lawful permission where applicable. Marketing consent is optional, documented and separate from essential service notifications. Each available channel must provide a e and straightforward way to stop marketing. You may withdraw through Profile > Privacy/Marketing Preferences, an unsubscribe control, or info@lugmety.com. We will stop the affected marketing without undue delay.
OTPs, security alerts, receipts, order status, driver contact, support responses and policy notices are operational communications and may continue where necessary even if marketing is disabled.
15. Account deletion
15. Account deletion
You may initiate deletion in Profile > Account Settings > Delete Account. We may re-authenticate you and explain data that must be retained. A paid or refundable Wallet balance must first be used or submitted for eligible refund; promotional credit may be forfeited after clear notice. We will revoke or unlink Sign in with Apple credentials as applicable and confirm completion.
Google Play also requires an external web resource through which account deletion can be requested. Lugmety should maintain a public deletion page linked from the Play listing in addition to the in-app path.
You may initiate deletion in Profile > Account Settings > Delete Account. We may re-authenticate you and explain data that must be retained. A paid or refundable Wallet balance must first be used or submitted for eligible refund; promotional credit may be forfeited after clear notice. We will revoke or unlink Sign in with Apple credentials as applicable and confirm completion.
Google Play also requires an external web resource through which account deletion can be requested. Lugmety should maintain a public deletion page linked from the Play listing in addition to the in-app path.
You may initiate deletion in Profile > Account Settings > Delete Account. We may re-authenticate you and explain data that must be retained. A paid or refundable Wallet balance must first be used or submitted for eligible refund; promotional credit may be forfeited after clear notice. We will revoke or unlink Sign in with Apple credentials as applicable and confirm completion.
Google Play also requires an external web resource through which account deletion can be requested. Lugmety should maintain a public deletion page linked from the Play listing in addition to the in-app path.
16. Age
16. Age
The customer service is intended for persons aged 18 or older. We do not knowingly create customer accounts for children. If you believe a person under 18 has provided data, contact us so we can review and take appropriate action.
The customer service is intended for persons aged 18 or older. We do not knowingly create customer accounts for children. If you believe a person under 18 has provided data, contact us so we can review and take appropriate action.
The customer service is intended for persons aged 18 or older. We do not knowingly create customer accounts for children. If you believe a person under 18 has provided data, contact us so we can review and take appropriate action.
17. Fraud review and automated decisions
17. Fraud review and automated decisions
Lugmety may review suspicious orders, payments, claims, chargebacks or account activity. Current blocking and enforcement decisions are reviewed manually. We do not currently make decisions based solely on automated processing that produce legal or similarly significant effects. We will update this Policy and provide required safeguards before introducing such processing.
Lugmety may review suspicious orders, payments, claims, chargebacks or account activity. Current blocking and enforcement decisions are reviewed manually. We do not currently make decisions based solely on automated processing that produce legal or similarly significant effects. We will update this Policy and provide required safeguards before introducing such processing.
Lugmety may review suspicious orders, payments, claims, chargebacks or account activity. Current blocking and enforcement decisions are reviewed manually. We do not currently make decisions based solely on automated processing that produce legal or similarly significant effects. We will update this Policy and provide required safeguards before introducing such processing.
18. Changes and complaints
18. Changes and complaints
We may update this Policy to reflect legal, vendor, security or service changes. We will show the updated date and provide prominent notice of material changes; consent will be obtained where required.
Questions or complaints may be sent to info@lugmety.com or the registered address above. If you remain
dissatisfied, you may complain to the competent Saudi data-protection authority through its official channels.
We may update this Policy to reflect legal, vendor, security or service changes. We will show the updated date and provide prominent notice of material changes; consent will be obtained where required.
Questions or complaints may be sent to info@lugmety.com or the registered address above. If you remain
dissatisfied, you may complain to the competent Saudi data-protection authority through its official channels.
We may update this Policy to reflect legal, vendor, security or service changes. We will show the updated date and provide prominent notice of material changes; consent will be obtained where required.
Questions or complaints may be sent to info@lugmety.com or the registered address above. If you remain
dissatisfied, you may complain to the competent Saudi data-protection authority through its official channels.
Lugmety
Join Lugmety
Help Center
Download The App
© Lugmety 2025 -
شركة سهم المستقبل لتقنية المعلومات
-
Designed by[34ML
Lugmety
Join Lugmety
Help Center
Download The App
© Lugmety 2025 -
شركة سهم المستقبل لتقنية المعلومات
-
Designed by[34ML
Lugmety
Join Lugmety
Help Center
Download The App
© Lugmety 2025 -
شركة سهم المستقبل لتقنية المعلومات
-
Designed by[34ML