Privacy Policy

Sayyad is a travel metasearch platform serving the Middle East and North Africa (MENA), with its headquarters and initial operational base in Saudi Arabia, available in five languages (Arabic, English, French, Turkish, Urdu). The product is designed with relevant privacy principles in mind (including concepts associated with PDPL, GDPR, and KVKK). Legal compliance requires applicable legal review; this page is not an independent certification.

• Account data: email and name when you sign up.
• Search data: destinations, dates, and filters you selected.
• Technical data: IP, device ID, browser type, performance metrics.
• Traveler data (optional): name, nationality, passport — stored in your Sayyad account for your reference. Sayyad does not transmit this traveler data to the partner on handoff; you enter details on the partner site when completing the booking if required.

• Run your account, save your searches and traveler list.
• Improve result ranking and prevent fraud.
• Contact you about price alerts and password resets.
• Meet legal and regulatory obligations.

We rely on service vendors to run the platform. Any partner link is opened only after you explicitly click 'Go to partner'. Naming a data provider is not by itself evidence of a direct brand partnership unless stated with supporting evidence.

• Supabase — database hosting and auth.
• Cloudflare — edge hosting and network protection.
• Travelpayouts / LiteAPI / SerpAPI — price-comparison data providers. SerpAPI is a search-data provider and is not evidence of a partnership with Google Flights.
• Sayyad first-party analytics (Supabase) — aggregated product usage events.
• Affiliate partner scripts (e.g. Travelpayouts / Awin) — loaded after idle or interaction for referral attribution only.

Sayyad does not track you across other companies' apps or websites for advertising purposes, so the iOS ATT permission prompt typically does not appear. Affiliate attribution scripts may still load on Sayyad for commission measurement with networks such as Travelpayouts. Internal platform identifiers are not shared with advertising networks for cross-app retargeting.

• Account data: as long as your account is active.
• Search data: up to 24 months.
• On account deletion (requested by email below): we work to remove associated data within 30 days where feasible.

• Access and export your data (including traveler profiles from account tools).
• Correct or delete traveler records from account settings.
• Withdraw consent at any time.
• Request full account deletion by emailing hello@sayyad.travel (in-app account deletion is not available yet).

Data is encrypted in transit over HTTPS. Database access is enforced through Row-Level Security so no user can read another user's data. Session tokens are stored in the browser; keep your device secure.

Sayyad is designed for adults. The app is rated 4+ and we do not knowingly collect personal data from children under 13.

We may update this policy. Material changes will be announced by email or an in-app notice.