Last updated: 23 October 2026
1. Who we are and scope
Riva operates a booking platform for resorts, chalets and halls in the Kingdom of Saudi Arabia, through the Riva customer app (iPhone and Android), the website riva-app.com, and the direct booking links that property owners share. This policy explains what personal data we collect, why, who we share it with, and the choices you have.
By using the service you acknowledge that you have read this policy. We handle your personal data in line with the Saudi Personal Data Protection Law and its regulations.
2. Data we collect
Data you provide:
- Your name, mobile number and email, plus gender and date of birth (both optional).
- Booking details: the property, dates, number of guests, amount, coupons and loyalty points, and your ratings and comments.
- Your messages to us when you contact support.
Payment data: your card details are processed by the payment provider (Amazon Payment Services / Payfort, Tabby and Apple Pay). We do not keep your full card number.
Data collected automatically:
- Device and app data: device type, operating system, app version, notification identifier, IP address and error logs.
- Your device advertising identifier (IDFA on iPhone, GAID on Android). On iPhone we access it only if you allow tracking.
- How you use the app and website: the screens and pages you open, searches, add to cart, starting and completing payment.
- Location: only when you grant permission and while you use the app, to show you on the map and sort properties by distance.
- Visit source when you book through direct booking links: advertising campaign parameters (UTM), click identifiers and the referring site, so we know which ad brought you.
3. How we use your data
- To process bookings and payments and send confirmations and reminders by notification, WhatsApp, email and SMS.
- To verify your identity with a code sent to your mobile or email, and to protect accounts and prevent fraud.
- For customer support and resolving complaints and disputes.
- To run the loyalty programme, coupons and ratings.
- To improve the app and website, fix errors and understand how they are used.
- Advertising and measuring its performance, as described in the next section.
- To meet legal, accounting and tax requirements.
4. Advertising and measurement
We advertise Riva on platforms such as Snapchat, TikTok, Meta (Facebook and Instagram) and Google. To measure the results of these ads we use measurement tools: Branch, Meta SDK, Snap Pixel and the Snap Conversions API, TikTok (through Branch), and Google Ads, Google Analytics and Google Tag Manager.
What we share with these platforms:
- Your usage events: app install, app open, search, add to cart, starting payment and completing a paid booking.
- The value of a paid booking (amount and currency SAR) and the booking number.
- Your device advertising identifier and ad click identifiers.
- Your internal Riva account number (a number that does not reveal your name), to tie events to your device.
- Your email or mobile number, when available, converted into an irreversible hashed fingerprint (SHA-256), so the ad you saw can be matched to the booking you made. We do not send your name or card details.
Purpose: to learn which campaign brought you to us, to improve our ads, and to show ads that fit your interests and fewer that do not. These platforms may use that data under their own policies.
Your choices:
- On iPhone: decline or withdraw the “Allow Tracking” permission in Settings → Privacy & Security → Tracking.
- On Android: delete your advertising ID or turn off ad personalisation in Settings → Privacy → Ads.
- On the website: delete or refuse cookies in your browser.
- You can ask us to stop using your data for advertising by emailing us at the address below.
5. Who we share it with
We do not sell your personal data. We share it only as needed with:
- The owner of the property you book: your name, mobile number and booking details, to fulfil the booking.
- Payment providers: Amazon Payment Services / Payfort, Tabby and Apple Pay.
- Communication providers: WhatsApp (Meta), Twilio, and email and SMS services.
- Google services: Firebase for notifications and analytics, and Google Maps.
- The advertising and measurement platforms listed in section 4.
- Authorities when a binding legal request requires it.
6. Transfers outside the Kingdom
Some of the providers above may be located outside Saudi Arabia, so your data may be processed there. We transfer it as the Saudi regulations allow and require our providers to protect it appropriately.
7. How long we keep it
We keep your data while your account is active, and for as long as needed to fulfil bookings, resolve disputes and meet accounting and tax rules. We may keep booking and payment records after account deletion for the period the law requires.
8. Your rights
You have the right to access and correct your data, request a copy, request deletion, withdraw consent, and object to its use for marketing and advertising, as the law provides. To delete your account use https://resortana.com/delete-account; we send you a verification code first. For other requests, email us at the address below.
When you delete your account, access to it stops immediately.
9. Data security
We apply technical and organisational measures to protect your data, including encrypted connections, access limited to those who need it, and payment processing by approved providers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children
Our service is for people aged 18 and over, and we do not knowingly collect data from anyone younger.
11. Cookies on the website and booking links
- Session cookies needed to sign in and complete a booking.
- The visit-source cookie
riva_attr(30 days), which stores the advertising campaign parameters you arrived with. - Cookies set by the advertising measurement tools listed in section 4.
12. Changes to this policy
We may update this policy. The date of the latest update appears at the top, and we will tell you about material changes in the app or on the website.
13. Contact us
For questions and privacy requests: info@riva-app.com — phone and WhatsApp: +966 13 533 2227
← Back to Riva