Privacy Policy

1. Introduction

This Privacy Policy describes how PayDay (KSA) ("we", "our", or "us") collects, uses, discloses, and protects your information when you use the PayDay mobile application and related services (the "Service"), specifically within the Employee Module.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

We collect the following categories of information:

2.1 Personal Information

• Full name
• National ID / Iqama number
• Date of birth
• Mobile number
• Email address
• Employment details (employer, salary, work status)

2.2 Financial Information

• Salary and earned wage data
• Bank account / IBAN details
• Transaction history (EWA requests, repayments)

2.3 Verification Data

• Identity and employment status confirmation provided by your employer and/or authorized government services
• Device and authentication data (OTP, login activity)

2.4 Technical & Usage Data

• Device type, OS, app version
• Log data (IP address, session activity)
• What the Service needs to operate: your requests and transactions, and security events such as sign-ins. We use no trackers or analytics.

3. How We Use Your Information

We use your data to:

• Provide and operate the Service
• Process earned wage access (EWA) transactions
• Validate your identity and eligibility through employer and/or authorized government sources
• Communicate with you (notifications, OTPs, support)
• Improve platform performance, reliability, and user experience
• Detect and prevent fraud, abuse, or security incidents

4. Legal Basis for Processing

We process your information based on:

• Contractual necessity — to provide the Service
• Legal and regulatory obligations — including financial compliance in the Kingdom of Saudi Arabia
• Legitimate interests — to improve and secure our platform
• Your consent — where explicitly required

5. Data Sharing and Disclosure

We may share your information with:

• Your Employer / HR representative — for payroll integration and eligibility validation
• Authorized government or regulatory services — for identity and compliance validation
• Financial partners — banks, payment processors, and disbursement providers
• Technology providers — cloud hosting and communication services
• Regulators or authorities — where required by law in KSA

We do not sell your personal data.

6. Data Storage and Security

• Your data is stored securely using industry-standard encryption and access controls
• Data may be hosted in regional data centers, including within the Kingdom of Saudi Arabia, in line with applicable regulations (e.g., PDPL)
• We implement safeguards to protect against unauthorized access, loss, or misuse

7. Data Retention

We retain your information only as long as necessary to:

• Provide the Service
• Comply with legal and regulatory requirements
• Resolve disputes and enforce agreements

Retention periods may vary depending on the type of data and applicable laws.

8. Your Rights

Under applicable laws (including KSA PDPL where applicable), you may have the right to:

• Access your personal data
• Correct inaccurate or incomplete data
• Request deletion of your data
• Object to or restrict certain processing
• Withdraw consent (where applicable)

To exercise your rights, you may contact us via the PayDay legal and support team at support@payday.sa. You may also request assistance through your HR/Employer representative.

9. Cookies and Browser Storage

We keep only what the Service needs to work. We use no analytics, advertising or tracking cookies, no trackers and no third-party scripts. The Service records only what it needs to operate: your requests and transactions, and security events such as sign-ins (see 2.4).

What we store in your browser:

• Your session: keeps you signed in for up to 30 days, and is removed when you sign out.
• Sign-in security: protects the sign-in form and remembers which page to open next, until you close the browser.
• Your language: until you close the browser.
• Your cookie choice and a random code for it: 12 months. If you sign in, your choice is saved against your account so it follows you to your other devices.
• The steps of signing in and the company you pick, in the tab's own storage while you sign in, cleared when you close the tab.
• A note that you have seen a one-time message, kept until you clear it in your browser.

The full list, with every name and how long each is kept, is on the cookie policy page.

Analytics and marketing cookies are separate choices. We use none today. If we ever add any, they stay off until you allow them, and we will ask you again first.

You can accept, refuse or choose by type when the cookie notice appears, and change your choice at any time from Cookie settings, at the foot of the public and sign-in pages and in your profile menu once signed in. We ask again after 12 months, or whenever the list changes. We keep a record of each choice (the version of the list, what you chose and when, without your IP address) so we can show what you agreed to.

Cookie settingsCookie policy

10. Third-Party Services

Our Service relies on third-party providers (e.g., cloud hosting, SMS providers, payment gateways). These providers process data on our behalf under strict confidentiality and security obligations.

11. International Transfers

Where data is transferred outside the Kingdom of Saudi Arabia, we ensure appropriate safeguards are implemented in accordance with applicable laws and regulations.

12. Updates to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via the app or other communication channels.

13. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact the PayDay legal and support team at support@payday.sa. You may also reach out through your HR/Employer representative.

14. Consent

By using the Service, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.