MyEx Privacy Policy

Last updated: 4 October 2026

This Privacy Policy explains what information MyEx collects, how we use and share it, and the choices you have. It applies to the MyEx mobile apps and website.

By accessing or using MyEx, you confirm that you have read, understood, and agreed to this Policy. If you do not agree, you must stop using the Platform immediately.

1. Introduction & Scope

1. MyEx respects users’ privacy and handles personal data within a structured and clear framework, as required by applicable law.
2. This Policy applies to:
   • The MyEx mobile applications.
   • The MyEx website and any related domains, pages, dashboards, or services controlled by us.
3. This Policy explains, in general terms:
   • What types of information we may collect.
   • How that information may be used and processed.
   • Who it may be shared with.
   • How we approach security and data handling.
   • The limits of the Platform’s responsibility for that data.
4. This Policy is an integral part of the MyEx Terms & Conditions of Use and the MyEx Electronic Financial Services Terms & Conditions (if applicable), and is read together with them. For privacy matters, this Policy applies alongside those documents.

2. Owner & Key Definitions

1. “MyEx”, “we”, “us”, “our”: The digital platform (app and website) that lets users share their experiences with products and services and link them to purchase links or discount codes. MyEx is owned and operated by Khibra Plus Information Technology Company, registered in the Kingdom of Saudi Arabia (Unified National Number 7049172799).
2. “User”, “you”, “your”: Any individual or entity accessing, browsing or using MyEx, with or without registration.
3. “Personal Data”: Any information relating to an identified or identifiable natural person, collected through or in connection with the Platform, as defined by applicable laws.
4. “Content” / “Experience”: Any videos, photos, text, reviews, ratings, comments, titles, or other materials submitted or published by Users.
5. “Service Providers”: Third parties engaged to help operate the Platform (hosting, analytics, payments, email and communications, storage, security, and similar).
6. “Applicable Laws”: The laws of the Kingdom of Saudi Arabia, including the Saudi Personal Data Protection Law (PDPL), and other mandatory laws that apply based on our operations or the User’s location (including, where triggered, GDPR/CCPA-style frameworks), only to the extent legally required. Saudi Personal Data Protection Law (SDAIA)

Nothing in this Policy should be interpreted as voluntarily extending rights beyond what is mandatorily required by those laws.

3. Information We May Collect

We may collect and process the following categories of data, directly or indirectly, only as needed to operate, secure, and develop the Platform. Provision of some information is optional; other data may be necessary to use certain features.

3.1. Information You Provide Directly

• Full name.
• Email address.
• Mobile number (optional, or required for verification where applicable).
• Account login details (username, encrypted password).
• Content/Experiences you submit: videos, images, text, reviews, ratings, titles, comments.
• Country, language preferences, and approximate or precise location (where you allow it through device permissions).
• Any other information you choose to provide in forms, correspondence, support channels, or account settings.

3.2. Information Collected Automatically

• IP address.
• Device or advertising identifiers, device type, operating system, browser type.
• Session data and interaction logs within the app or website (pages/screens visited, clicks, time spent, general usage patterns, crash logs).
• Cookies and similar technologies (pixels, SDKs, tags, ad IDs) for authentication, security, and analytics.

3.3. Information from Third Parties

• Basic profile data from sign-in providers such as Google and Apple (for example name and email) when you choose to use them.
• Aggregated performance metrics from affiliate/partner networks (e.g., clicks and purchases attributed to MyEx links), without requiring access to your sensitive financial data.
• Technical, security, or performance data from hosting, analytics, or payment providers, for fraud detection or regulatory compliance.

By using the Platform, you consent to the collection of such data for the purposes and under the conditions described here, to the extent permitted by applicable law. Analytics and advertising cookies are the exception: they are used only with your consent (see section 6).

4. How We Use Your Information

We may use Personal Data and other information for one or more of the following purposes, without creating obligations beyond legal requirements:

1. Service Operation
   • Creating and managing User accounts and settings.
   • Enabling login, content submission, browsing, search, and related features.
2. Content & Experience Management
   • Receiving, reviewing, accepting or rejecting, organizing, and displaying Experiences.
   • Enforcing content rules, eligibility criteria, and platform quality standards.
3. Fraud Prevention & Platform Integrity
   • Detecting fake or duplicate accounts, duplicated content, manipulation, abusive behavior, and policy violations.
   • Protecting Users, partners, and the Platform against misuse.
4. Security & Compliance
   • Monitoring for suspicious activity, securing login, detecting intrusions, and protecting the Platform and its infrastructure.
   • Complying with legal obligations, regulatory inquiries, and lawful requests.
5. Communication
   • Contacting you about your account, your content, platform updates, or policy changes.
   • Responding to inquiries or reports (at our discretion, and without fixed deadlines unless required by law).
6. Optimization & Analytics
   • Understanding general usage patterns.
   • Improving performance, user experience, and feature design.
7. Promotional & Informational Messages
   • Sending optional marketing or informational messages where permitted (with your consent or under a legitimate interest recognized by law); you may opt out as described in section 15.

Use of data is based on one or more lawful grounds where applicable (such as consent, legitimate interests, contractual necessity, or legal obligation), interpreted in line with mandatory laws. GDPR principles (European Commission)

Nothing above shall be interpreted as a permanent or absolute obligation on MyEx; the Platform acts as it deems appropriate at any time, within what the law allows.

5. AI, Automated Processing & Moderation

1. We may use automated systems and AI-based tools to:
   • Analyze and classify content.
   • Detect prohibited material, violations, and suspicious accounts, patterns, or activity.
   • Rank or categorize Experiences.
   • Support moderation decisions and credibility checks.
2. Every review is checked by a trained person before it is published. Automated tools help us detect prohibited content. Other automated outputs, such as fraud or suspicious-activity signals, are internal tools; actions based on them may be automated or combined with human review.
3. To the maximum extent permitted by law, MyEx is not liable for automated assessments made reasonably, in good faith and without arbitrariness, for security, moderation, or compliance purposes, without prejudice to any mandatory law.
4. You may ask us to review a specific case. We may accept or decline the request at our discretion, except where mandatory law requires a manual review.

6. Cookies & Similar Technologies

1. The Platform may use cookies, SDKs, and similar identifiers to:
   • Run sessions and keep you logged in.
   • Remember basic preferences.
   • Perform general, non-identifying or aggregated analytics.
2. We ask for your consent before we set analytics and advertising cookies. You can change your choice at any time in Cookie settings.
3. You may also disable cookies in your browser or device settings. Certain features may not function correctly if you do so.

7. How We Share Information

We do not sell your Personal Data to third parties for their independent marketing purposes.

We may share information, to the minimum extent necessary, with:

1. Service Providers
   • Hosting, cloud storage, and CDN providers.
   • Analytics providers.
   • Email, SMS, and notification providers.
   • Payment processors and financial intermediaries.
2. Affiliate & Commercial Partners
   • Limited technical or aggregated data (e.g., click or conversion metrics) to support affiliate tracking and reporting, without revealing your direct identity where possible.
3. Corporate Transactions
   • In case of a sale, merger, acquisition, or transfer of part of MyEx’s assets, data may be transferred to the successor entity under the same legal protection framework.
4. Legal & Regulatory Authorities
   • Where an official request, court order, or legal obligation requires it.
   • To investigate suspected fraud, abuse, or security incidents.

This is done on a minimum-necessary basis for legitimate purposes. Each recipient is expected (by contract or law) to handle data appropriately, but MyEx does not assume liability for independent violations by such parties beyond what mandatory law requires.

8. Data Location & International Transfers

1. Data may be stored or processed inside or outside the Kingdom of Saudi Arabia, using reputable hosting and cloud providers.
2. By using MyEx, you consent—where such consent is a valid basis—to these cross-border transfers as needed to operate the Platform.
3. We aim, where reasonably feasible, to select providers that implement appropriate security and data protection safeguards consistent with applicable obligations, without this constituting an absolute guarantee. SDAIA data protection page

9. Data Retention

1. We retain data only for as long as reasonably necessary for:
   • Operating the Platform.
   • Fulfilling legitimate business and security purposes.
   • Meeting legal, regulatory, tax, and accounting obligations.
2. Closing your account does not by itself remove approved and published Experiences; we may retain and use them as described in the Terms of Use and section 10 of this Policy.
3. We may anonymize or aggregate data; such data is no longer considered Personal Data and may be retained indefinitely.

No specific retention period in this Policy shall be interpreted as limiting MyEx’s right to retain data where the law or legitimate protection needs so require.

10. Your Choices & Rights (Subject to Law)

Depending on where you live and what laws apply, you may have certain rights in relation to your Personal Data (e.g., access, correction, deletion, objection, restriction).

MyEx will:

• Respect such rights to the extent they are mandatory under applicable law and technically feasible.
• Not be deemed to grant broader rights than required.

In practice, and without prejudice to mandatory rules, you may:

1. Access some of your basic data, and review or update certain account details through in-app settings (where available), except data tied to fixed legal or operational records.
2. Request deletion of your account. Published Experiences and records needed for legal, security, and financial purposes may be retained as allowed or required by law and our Terms. You may ask us to remove your review or delete your personal data, and we will do so where the law gives you that right.
3. Opt out of marketing messages, while still receiving essential service and security notices.

We reserve the right to reject requests that are unlawful, abusive, unverifiable, technically impossible, or conflict with security, legal obligations, or the rights of others.

11. Children

1. The Platform is intended for individuals 18+ only.
2. We do not knowingly collect Personal Data from individuals under 18.
3. If we become aware that an underage user has registered contrary to this Policy, we may:
   • Suspend or delete the account.
   • Delete the related data or limit its processing, in accordance with applicable law.

12. Third-Party Login (Google / Apple / Others)

1. MyEx may allow you to register or sign in via Google, Apple, or other providers in the future. If you use these options, we receive certain basic information from them (e.g., name, email).
2. Your relationship with those providers is governed by their own terms and privacy policies; MyEx is not responsible for their independent actions or for any malfunction or breach on their side.

13. Security Measures & Limits of Liability

1. We implement technical and organizational measures we consider reasonable and appropriate to protect data against unauthorized access, loss, or misuse.
2. However:
   • No system is fully secure, and the internet is not fully secure.
   • We do not guarantee absolute protection against all threats and breaches.
3. MyEx is not liable for:
   • Incidents caused by your own device compromise, credential sharing, or negligence.
   • Incidents or misuse originating from service providers, networks, or attacks beyond our reasonable control, except within the mandatory limits set by law.
4. If a competent authority or final court judgment determines that a specific loss was caused solely and directly by MyEx’s gross negligence:
   • Any liability will be limited strictly to the direct, proven damage, excluding indirect, consequential, moral, future, or punitive damages, to the extent allowed by law.

14. Public Content & Experiences

1. When you publish an Experience, certain information (e.g., video, images, review text, rating, display name, basic profile elements) may become visible to the public or to certain categories of users, depending on Platform settings.
2. You alone are responsible for any personal details you choose to include in your Content (such as your face, voice, location, or other details).
3. As set out in the Terms of Use:
   • Approved Experiences may remain on MyEx and be reused by MyEx even after account deletion, subject to applicable law.
   • You may ask us to remove your review or delete your personal data, and we will do so where the law gives you that right.

15. Marketing Communications

1. We may send you:
   • Operational messages (security alerts, policy updates, system notifications).
   • Occasional marketing or informational messages or offers, with your prior consent where the law requires it, or under a legitimate interest recognized by law.
2. You can opt out of non-essential marketing messages at any time using the links or settings provided. Essential service, account security, and legal notices may continue regardless.

16. Changes to This Privacy Policy

1. We may update this Policy from time to time.
2. Updated versions will be posted on the Platform with a new “Last updated” date.
3. Where the law requires advance notice of material changes, we will provide it within those legal limits, without assuming additional obligations that are not required. Otherwise, your continued use of MyEx after publication of an updated Policy constitutes your acceptance of it.

17. Contact

For questions about this Policy or our data practices (without any guaranteed response time beyond what applicable laws require):

• Please contact us using the official contact details provided within the MyEx app or website (such as support@my-ex.app or any updated address we officially publish).

18. Governing Law & Final Provisions

1. This Policy is governed by the laws of the Kingdom of Saudi Arabia, without prejudice to any mandatory data protection rights that may apply to you under other jurisdictions.
2. Any disputes relating to this Policy are subject to the dispute resolution and jurisdiction provisions set out in the MyEx Terms & Conditions of Use.
3. This Policy does not create any direct contractual rights for the User beyond what it expressly states and what mandatory laws impose.
4. In case of any conflict between the Arabic version and any translation, the Arabic version prevails within the Kingdom of Saudi Arabia.
5. If any provision of this Policy is held invalid or unenforceable, the remaining provisions remain in effect to the maximum extent permitted.
6. Your continued use of the Platform means you accept:
   • The way data is collected and used as described,
   • MyEx’s limits of liability and the disclaimers above,
   • Within what does not contradict the mandatory rules of applicable laws.