1. Overview & Purpose

This Privacy Policy explains how Mang Welfare Association ("we", "us", or "our") collects, uses, protects, and discloses personal information when you use the Mang Welfare mobile application (the "App").

The primary objective of the Mang Welfare App is to manage a mutual financial assistance and welfare fund for members living in Saudi Arabia. In the event of a member's death or severe emergency while residing in Saudi Arabia, the App facilitates financial contributions, transparent fund collection, and disbursement of financial aid to the deceased member's designated next-of-kin.

2. Data Controller & Admin Provisioning

The App does not offer public account registration or open sign-ups. User accounts are created and assigned directly by authorized organization administrators. Administrators input initial profile information based on official member records and mutual welfare membership agreements.

3. Information We Collect

To fulfill our mutual welfare operations and comply with regulatory and operational standards, we process the following categories of data:

A. Personal Identification Data

• Full Name & Father's Name: To accurately identify members.
• Username & Account ID: Assigned for system authentication.
• Phone Number & Email Address: Used for account management, security notifications, and urgent welfare communications.
• Serial Number / Member Code: Internal organization registration identifier.
• Physical Address in Saudi Arabia: To assign members to specific operational zones (Zonal Management).

B. Saudi Identity & Regulatory Documents

• Iqama Number (Saudi Residency Identification): To confirm legal identity and residency in the Kingdom of Saudi Arabia.
• Iqama Copy / Document Image: Captured or uploaded by members/admins for official verification.
• Signed Agreement Copy: Image proof of membership agreement accepting welfare rules.

C. Beneficiary & Next-of-Kin Data

• Next-of-Kin Details: Full name, contact phone number, email address, and home address of the member's designated beneficiary, collected solely to disburse death benefits and emergency funds.

D. Financial & Contribution Data

• Payment Records & Receipt Uploads: Records of welfare contribution payments, bank deposit/transfer receipt images uploaded as payment proofs, transaction statuses, and total amounts approved by administrators.

E. Technical & Device Data

• Push Notification Token: Firebase Cloud Messaging (FCM) tokens required to deliver push notifications regarding death assistance drives, payment reminders, and administrative task updates.
• Crash Diagnostics: Non-personally identifiable crash logs collected via Firebase Crashlytics to fix application errors and improve stability.

4. App Permissions Required

The App requests the following device permissions only when necessary for core functions:

• Camera & Photo Library (`CAMERA`, `READ_EXTERNAL_STORAGE`): Required when taking or uploading images of Iqama residency identity cards, membership agreements, and bank payment receipt proofs.
• Notifications (`POST_NOTIFICATIONS`): Required to alert members about active death assistance fundraising campaigns, payment approvals, and urgent announcements.
• Internet Access (`INTERNET`, `ACCESS_NETWORK_STATE`): Required to communicate securely with our backend API servers.

5. How We Use Your Information

We process your personal information strictly for non-commercial, mutual welfare purposes, including:

• Organizing and managing death benefit assistance drives for members in Saudi Arabia.
• Verifying member identity, Saudi Iqama validity, and eligibility for welfare disbursements.
• Maintaining transparent records of welfare payments collected by Zonal Admins and System Admins.
• Notifying next-of-kin and disbursing aid funds upon a member's death.
• Sending critical operational push notifications.

6. Information Sharing & Third-Party Disclosure

We do NOT sell, rent, trade, or commercially monetize your personal data under any circumstances.

Data is shared strictly on a need-to-know basis under the following conditions:

• Internal Authorized Administrators: Designated Zonal Representatives and Main Administrators review contribution records, Iqama proofs, and next-of-kin details to manage assistance tasks.
• Infrastructure Service Providers: Google Firebase (Firebase Cloud Messaging for push alerts and Firebase Crashlytics for application stability monitoring). Data handled by Firebase is governed by Google Privacy Policies.
• Legal & Regulatory Compliance: We may disclose data if required to do so by applicable laws, regulations.

7. Data Security & Storage

We implement appropriate technical and organizational security measures to protect member data against unauthorized access, loss, alteration, or disclosure. Communications between the App and backend servers are encrypted using HTTPS (SSL/TLS).

8. Data Retention & Account Deletion Policy

Member data is retained for the duration of the member's active participation in the welfare collective. Audit records of financial contributions are retained for organizational accounting and transparency.

Requesting Data or Account Deletion (Google Play Compliance):

Members or former members have the right to request deletion of their personal data and account records. Because account creation is administrative, account deletion can be initiated by:

• Submitting a deletion request directly to the System Administrator within the App profile/support section.
• Sending an email request to our official privacy administrator email: privacy@mangwelfare.org (or contact your designated Zonal Admin).

Upon verification, the Administrator will remove personal identification records, Iqama images, and active credentials within 30 days, except where financial retention laws require keeping anonymized historical accounting ledgers.

9. Compliance with Saudi Arabia Personal Data Protection Law (PDPL)

Under the Kingdom of Saudi Arabia Personal Data Protection Law (PDPL), members hold the following rights regarding their data:

• Right to Know / Right of Access: Right to know what data we hold about you and receive a copy.
• Right to Rectification: Right to request correction or updating of inaccurate personal data.
• Right to Destruction / Erasure: Right to request erasure of your data when no longer needed for welfare purposes.
• Right to Withdraw Consent: Right to withdraw consent for voluntary processing at any time.

10. Children's Privacy

The App is strictly intended for adult individuals working and residing in Saudi Arabia (aged 18 and older). We do not knowingly collect or solicit personal information from children under the age of 18.

11. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our operational procedures or legal obligations. Updated policies will be posted in the App and on this web page with a revised effective date.