Effective date: 5 November 2026

WaZii ("WaZii", "we", "our" or "us") is committed to protecting your privacy. WaZii is operated by ⁨مؤسسة وازي للاستشارات المالية⁩ (unified national number 7037651283, Al Qatif, Al Madaris District, Imam Ali Ibn Abi Talib, Saudi Arabia, email info@wazii.net), which is responsible for your personal data. This Privacy Policy explains how we collect, use, share and safeguard your personal data when you use the WaZii website, mobile applications and related stock research and analysis services (together, the "Services").

We handle personal data in line with the principles of the Personal Data Protection Law of the Kingdom of Saudi Arabia and other laws that apply to us. Please read this Privacy Policy carefully. By using the Services, you acknowledge that you have read and understood it.

1. Information We Collect

1.1 Information You Provide

We collect the information you give us when you create an account, use the Services or contact us, including:

Your name and email address.
Your phone number, if you choose to provide it.
Identifiers from the sign-in provider you choose (Google or Apple), such as the account identifier and the email address that provider shares with us.
Portfolio holdings, watchlists and trade journal entries that you enter yourself.
Your Rational Mode answers, including the emotional state you report.
Your price alert and notification preferences, language and other settings.
The content of messages you send to our support team.

1.2 Payment Information

Card payments made on our website are processed by Geidea, and in-app subscriptions are processed by Apple (App Store) or Google (Google Play). These providers collect and process your payment details under their own privacy policies.

WaZii does not receive or store your full card number or security code. When you pay on our website, Geidea saves your card securely so that you can renew in one tap or, if you choose it, automatically; we keep only a reference to that saved card (a token) and its last four digits. If you turn on automatic renewal we also keep a record of your agreement: its date, plan, amount and wording. You can remove the saved card at any time from Settings > My Plans. We also receive limited payment metadata, such as your subscription plan, payment and subscription status, amounts, dates and transaction references, so that we can provide and manage your subscription.

1.3 Device and Usage Information

When you use the Services, we automatically collect certain technical information, such as:

Technical details your browser or app sends with each request, such as IP address, browser or device type, operating system and app platform. We use them in server logs and to limit abuse. We do not use your IP address to work out your location.
Push notification device tokens, so that we can deliver the alerts you request through Google Firebase Cloud Messaging and the Apple Push Notification service.
The stocks you follow and open, your alerts and when you last used the Services, so that we keep data current for the stocks people use.
Server and error logs that help us keep the Services working.

1.4 Cookies and Similar Technologies

We use cookies and similar browser storage to keep you signed in and remember your language and settings. Google reCAPTCHA may set cookies on website forms that use it. We do not use advertising or analytics cookies, and we do not use advertising or analytics tools in the website or the apps. You can manage cookies through your browser settings, although some features may not work properly without them.

1.5 Invitations

If you use invitations, where a friend who joins with your link and pays gives each of you a free month of WaZii Pro, we keep the following so that each free month is given once, to two different people, and so that abuse can be found:

Who invited whom, the dates, whether the friend's first payment counted, and the free months given.
A one-way scrambled code made from the invited friend's email address, so that one mailbox counts once, even if an account is deleted and created again.
One-way scrambled codes made from the network (IP) addresses used to open the invite page and to accept an invitation, so that an invitation that looks like one person with two accounts can be reviewed.
Whether the friend's saved card is the same as the inviter's, checked with the card token we already keep for renewals when the payment is checked. Nothing new is stored for this.

We never ask for your friends' email addresses and never contact them: you share your own link. A member of our staff reviews an invitation the programme sends to review, and approves or rejects it.

2. How We Use Your Information

We use your information for the following purposes:

To provide the Services, including creating and managing your account, displaying stock research, valuations and ratings, and analyzing the portfolio holdings you enter.
To send the price alerts, push notifications and emails you have asked for, as well as important service and account messages.
To process and manage your subscription and free trial, and to verify payments with Geidea, Apple or Google.
To provide customer support and respond to your requests.
To maintain the security of the Services and to prevent fraud, abuse and unauthorized access.
To find and fix problems and keep the Services working, using server and error logs.
To send you marketing communications where permitted, which you can opt out of at any time.
To comply with legal and regulatory obligations and to enforce our Terms and Conditions.

We process account, portfolio, subscription and alert data to perform our agreement with you. We process security and technical data for our legitimate interests in keeping the Services safe and working. We send marketing messages and push notifications only with your consent, which you can withdraw at any time. Name, email and acceptance of the Terms are required to create an account, and phone number is optional. We respond to rights requests within 30 days.

3. How We Share Your Information

We do not sell or rent your personal data. We share it only as described below:

Service providers that process data on our behalf to run the Services, including payment processors (Geidea, Apple and Google). Section 7 names them and says what each one receives. These providers may use your data only to perform services for us.
Sign-in providers (Google or Apple), to the extent needed to authenticate you when you choose to sign in with them.
Competent authorities, when required by law, regulation or a valid legal request, or when necessary to enforce our policies or to protect the rights, safety and property of WaZii, our users or others.
A successor entity, if WaZii is involved in a merger, acquisition or sale of assets, in which case your data will remain subject to protections consistent with this Privacy Policy.

4. Data Security

We use appropriate technical and organizational measures to protect your personal data, including encrypted connections and access controls. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

You are responsible for keeping your sign-in credentials confidential and for notifying us promptly if you believe your account has been accessed without your permission.

5. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

Access: to be informed about how we process your personal data and to request a copy of it.
Correction: to correct inaccurate or incomplete data. You can update much of your information directly in your account settings.
Deletion: to request deletion of your personal data. You can delete your account at any time from Settings > Account in the app or on the website.
Withdrawal of consent: to withdraw consent where we rely on it, such as for marketing messages or push notifications, without affecting processing carried out before the withdrawal.
Restriction and objection: to ask us to limit or stop certain processing in the circumstances provided by law.

Deleting your WaZii account does not cancel an in-app subscription purchased through the App Store or Google Play. Please cancel such a subscription from your Apple or Google account.

To exercise any of these rights, contact us through the Contact Us page or at info@wazii.net. We may need to verify your identity before acting on your request. If you are not satisfied with our response, you may lodge a complaint with the Saudi Data and Artificial Intelligence Authority (SDAIA).

6. Data Retention

We keep your personal data only for as long as necessary to provide the Services and to fulfil the purposes described in this Privacy Policy.

When you delete your account, the deletion takes effect as soon as you confirm it and cannot be undone. We delete your profile, linked sign-ins, portfolio, journals, followed stocks, alerts, notifications, daily briefs, settings, support requests, registered devices, and your subscription records and saved payment profile in WaZii.

Some records stay after deletion and WaZii does not remove them automatically. They are no longer linked to an account: App Store and Google Play purchase events received from RevenueCat, which contain your former account number, the product and the store's transaction numbers, and records of your ended sign-in sessions, which contain your former account number.

To keep free trials to one per person, we keep a one-way scrambled code made from your email address after your account is deleted, with its date. It cannot be turned back into your address and is not linked to any other data.

For invitations, the one-way scrambled codes made from email and network addresses are erased 24 months after they were recorded, whether or not the account still exists. The record of who invited whom and of the free months given is kept with your subscription records.

Deleting your account does not change what sits outside it: messages you sent us and emails we already sent you, technical logs kept by our servers and email provider under those systems' own settings, and payment and purchase records held by the app stores, RevenueCat and our payment processors under their own policies.

7. Service Providers and International Data Transfers

We use these service providers, which may process your data outside the Kingdom of Saudi Arabia. We send each one only the data it needs to do its job:

Microsoft Azure: hosting and storage of all account data (United States).
Amazon Web Services (Amazon SES): sending emails, including your email address, name and alert content (Ireland).
Google Firebase Cloud Messaging and the Apple Push Notification service: delivering notifications, including device tokens and alert text.
RevenueCat: managing in-app subscription status, including your WaZii user identifier and purchase records (United States).
Geidea (card payments on the website, Saudi Arabia), and Apple and Google (in-app billing). You give your card details to Geidea directly, and we receive only a reference to the saved card and its last four digits.
Google and Apple sign-in: signing you in if you choose them.
Twilio: sending phone verification codes, if you provide a phone number (United States).
Google reCAPTCHA: protecting website forms from abuse, including IP address and browser data.
Mailchimp: sending the newsletter, including your email address, only if you subscribe on our website (United States).
DeepSeek: an artificial intelligence provider based in China, used to write and translate stock analysis and summarize news. We send it company, market and news information only, including the names of stocks that users ask us to analyze. We do not send it your name, email address, portfolio holdings, journal entries, Rational Mode answers or anything else you type, and nothing we send it identifies you.
Financial Modeling Prep and Sahmk: suppliers of market data. We ask them for data by stock, and they do not receive your personal data.

When data is processed outside the Kingdom, we take reasonable steps to ensure that it receives an adequate level of protection and that the transfer complies with applicable data protection laws.

8. Children

The Services are intended for users who are at least 18 years old. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services or legal requirements. The effective date at the top of this page shows when it was last updated. If we make material changes, we will notify you through the Services or by email where appropriate.

10. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us through the Contact Us page or by email at info@wazii.net.