Privacy Policy

This Privacy Policy is designed to protect MyEx / myex legally while explaining, in a clear and practical way, how we may collect, use, store, and share information related to users of our mobile application(s) and website(s). It is intentionally drafted to avoid creating obligations beyond what is required by applicable law, and to give MyEx the flexibility it needs to operate, secure, and improve the service.

By accessing or using MyEx, you confirm that you have read, understood, and agreed to this Policy. If you do not agree, you must stop using the Platform immediately.

1. Introduction & Scope

  1. This Policy applies to:
    • The MyEx / myex mobile applications.
    • The MyEx / myex website(s) and any related domains, pages, dashboards, or services controlled by us.
  2. This Policy explains, in general terms:
    • What types of information we may collect.
    • How that information may be used and shared.
    • How we approach security and data handling.
  3. This Policy is an integral part of:
    • MyEx Terms & Conditions of Use, and
    • MyEx Electronic Financial Services Terms & Conditions (if applicable).
      In case of conflict for privacy matters, this Policy applies alongside those documents.

2. Controller & Key Definitions

  1. “MyEx”, “myex”, “we”, “us”, “our”: The digital platform (app and website) owned and operated by the relevant legal entity registered in the Kingdom of Saudi Arabia.
  2. “User”, “you”, “your”: Any individual or entity accessing or using MyEx, with or without registration.
  3. “Personal Data”: Any information relating to an identified or identifiable natural person, as defined by applicable laws.
  4. “Content” / “Experience”: Any videos, photos, text, reviews, ratings, comments, or other materials submitted or published by Users.
  5. “Service Providers”: Third parties engaged to support hosting, analytics, payments, communications, security, or other operational needs.
  6. “Applicable Laws”: Laws and regulations that may apply based on our operations and/or the User’s location, including but not limited to Saudi data protection regulations (such as the PDPL), and, where triggered, principles of GDPR/CCPA-style frameworks, only to the extent legally required. CalPFA+3SDAIA+3SDAIA+3

Nothing in this Policy should be interpreted as voluntarily extending rights beyond what is mandatorily required by those laws.

3. Information We May Collect

We may collect and process the following categories of data, only as needed to operate, secure, and develop the Platform. Provision of some information is optional; other data may be necessary to use certain features.

3.1. Information You Provide Directly

  • Full name.
  • Email address.
  • Mobile number (optional or required for verification where applicable).
  • Account login details (username, encrypted password).
  • Content/Experiences you submit: videos, images, text, reviews, ratings, titles, comments.
  • Country, language preferences, and (where enabled by you) approximate or precise location.
  • Any information you choose to send to us via support channels or forms.

3.2. Information Collected Automatically

  • IP address.
  • Device identifiers, device type, operating system, browser type.
  • Session data and interaction logs (pages/screens visited, clicks, time spent, crash logs).
  • Cookies and similar technologies (pixels, SDKs, tags, ad IDs) for authentication, security, and analytics.

3.3. Information from Third Parties

  • Basic profile data from sign-in providers (e.g., Google, Apple) when you choose to use them.
  • Technical and performance data from hosting, analytics, or payment providers.
  • Aggregated performance metrics from affiliate/partner networks (e.g., clicks and conversions attributed to MyEx links, without requiring access to your sensitive financial data).

By using the Platform, you consent to the collection of such data for the purposes and under the conditions described here, to the extent permitted by applicable law.

4. How We Use Your Information

We may use Personal Data and other information for one or more of the following purposes (without creating obligations beyond legal requirements):

  1. Service Operation
    • Creating and managing User accounts.
    • Enabling login, content submission, browsing, search, and related features.
  2. Content & Experience Management
    • Reviewing, moderating, organizing, and displaying Experiences.
    • Enforcing content rules, eligibility criteria, and platform quality standards.
  3. Fraud Prevention & Platform Integrity
    • Detecting fake accounts, duplicated content, abusive behavior, and policy violations.
    • Protecting Users, partners, and the Platform against misuse.
  4. Security & Compliance
    • Monitoring for suspicious activity, enforcing technical safeguards.
    • Complying with legal obligations, regulatory inquiries, and lawful requests.
  5. Communication
    • Contacting you about your account, your content, platform updates, or policy changes.
    • Responding (at our discretion, and without fixed deadlines unless required by law) to inquiries or reports.
  6. Optimization & Analytics
    • Understanding general usage patterns.
    • Improving functionality, performance, and user experience.
  7. Promotional & Informational Messages
    • Sending you optional marketing or informational messages where permitted (you may opt out as described below).

Use of data is based on one or more lawful grounds where applicable (such as consent, legitimate interests, contractual necessity, or legal obligation), interpreted strictly in line with mandatory laws. European Commission+2GDPR+2

5. AI, Automated Processing & Moderation

  1. We may use automated tools and AI-based systems to:
    • Analyze and classify content.
    • Detect prohibited material and suspicious activity.
    • Support moderation decisions and credibility checks.
  2. Automated outputs are primarily internal tools; final actions may be automated or combined with human review.
  3. To the maximum extent permitted by law:
    • MyEx is not liable for automated assessments made in good faith for security, moderation, or compliance purposes.
    • We may decline to manually review every case, except where required by mandatory regulation.

6. Cookies & Similar Technologies

  1. The Platform may use cookies, SDKs, and similar identifiers to:
    • Keep you logged in.
    • Remember basic preferences.
    • Perform non-identifying or aggregated analytics.
  2. You may disable cookies in your browser or device settings. Certain features may not function correctly if you do so.
  3. Continued use of the Platform constitutes consent to the use of these technologies where required by law.

7. How We Share Information

We do not sell your Personal Data to third parties for their independent marketing purposes.

We may share information, to the minimum extent necessary, with:

  1. Service Providers
    • Hosting, cloud, and CDN providers.
    • Analytics providers.
    • Email, SMS, and notification providers.
    • Payment processors and financial intermediaries.
  2. Affiliate & Commercial Partners
    • Limited technical or aggregated data (e.g., click or conversion metrics) to support affiliate tracking and reporting, typically without revealing your direct identity.
  3. Corporate Transactions
    • In case of merger, acquisition, or transfer of MyEx assets, data may be transferred to the successor entity under the same protection logic.
  4. Legal & Regulatory Authorities
    • Where required to comply with applicable law, court orders, or lawful regulatory requests.
    • To investigate suspected fraud, abuse, or security incidents.

Each such recipient is expected (by contract or law) to handle data appropriately, but MyEx does not assume liability for independent violations by such parties beyond what mandatory law requires.

8. Data Location & International Transfers

  1. Data may be stored or processed inside or outside the Kingdom of Saudi Arabia, using reputable hosting and cloud providers.
  2. By using MyEx, you consent—where such consent is a valid basis—to these cross-border transfers as needed to operate the Platform.
  3. We aim, where reasonably feasible, to select providers that implement appropriate security and data protection safeguards consistent with applicable obligations. SDAIA+2DataGuidance+2

9. Data Retention

  1. We retain data only for as long as reasonably necessary for:
    • Operating the Platform.
    • Fulfilling legitimate business and security purposes.
    • Meeting legal, regulatory, tax, and accounting obligations.
  2. Approved and published Experiences may be retained and used by MyEx even if you close your account, as described in the Terms of Use.
  3. We may anonymize or aggregate data; such data is no longer considered Personal Data and may be retained indefinitely.

No specific retention period in this Policy shall be interpreted as limiting MyEx’s right to retain data where the law or legitimate protection needs so require.

10. Your Choices & Rights (Subject to Law)

Depending on where you live and what laws apply, you may have certain rights in relation to your Personal Data (e.g., access, correction, deletion, objection, restriction).

MyEx will:

  • Respect such rights to the extent they are mandatory under applicable law and technically feasible.
  • Not be deemed to grant broader rights than required.

In practice, and without prejudice to mandatory rules:

  1. You may review or update certain basic account details through in-app settings (where available).
  2. You may request account deletion; published Experiences and certain records may be retained as allowed or required by law and our Terms.
  3. You may opt out of marketing emails using provided unsubscribe options, while still receiving essential service or security notices.

We reserve the right to reject requests that are unlawful, abusive, unverifiable, technically impossible, or conflict with security, legal obligations, or rights of others.

11. Children

  1. The Platform is intended for individuals 18+ only.
  2. We do not knowingly collect Personal Data from children under 18 without appropriate authorization.
  3. If we become aware that an underage user has registered contrary to this Policy, we may:
    • Suspend or delete the account.
    • Limit further processing of related data, in accordance with applicable law.

12. Third-Party Login (Google / Apple / Others)

  1. If you choose to sign in via Google, Apple, or similar providers:
    • We receive certain basic information (e.g., name, email) from them.
  2. Your relationship with those providers is governed by their own terms and privacy policies; MyEx is not responsible for their independent actions.

13. Security Measures

  1. We implement what we consider reasonable and appropriate technical and organizational measures to protect data against unauthorized access, loss, or misuse.
  2. However:
    • No system is fully secure.
    • We do not guarantee absolute protection against all threats.
  3. MyEx is not liable for:
    • Incidents caused by your own device compromise, credential sharing, or negligence.
    • Incidents originating from third-party providers, networks, or attacks beyond our reasonable control.
  4. If a competent authority or final court judgment determines that a specific loss was caused solely and directly by MyEx’s gross negligence:
    • Any liability will be limited strictly to the direct, proven damage, excluding indirect, consequential, moral, or punitive damages, to the extent allowed by law.

14. Public Content & Experiences

  1. When you publish an Experience, certain information (e.g., video, images, review text, rating, display name, basic profile elements) may become visible to other users or the public.
  2. You are fully responsible for any personal details you choose to include in your Content.
  3. As set out in the Terms of Use:
    • Approved Experiences may remain on MyEx and be reused by MyEx even after account deletion, subject to applicable law.
    • Requests to remove such content may be declined where we have a legitimate interest or legal basis to retain it.

15. Marketing Communications

  1. We may send you:
    • Operational messages (security alerts, policy updates, system notifications).
    • Occasional marketing or informational messages about MyEx, where permitted.
  2. You can opt out of non-essential marketing messages at any time using available mechanisms. Essential service and legal notices may continue regardless.

16. Changes to This Privacy Policy

  1. We may update this Policy from time to time.
  2. Updated versions will be posted on the Platform with a new “Last Updated” date.
  3. Where required by law, we may provide advance notice of material changes. Otherwise, your continued use of MyEx after publication of an updated Policy constitutes your acceptance of it.

17. Contact

For questions about this Policy or our data practices (without any guaranteed response time beyond what applicable laws require):

  • Please contact us using the official contact details provided within the MyEx app or website (such as: support@my-ex.com or any updated address we publish).

18. Governing Law

  1. This Policy is governed by the laws of the Kingdom of Saudi Arabia, without prejudice to any mandatory data protection rights that may apply to you under other jurisdictions.
  2. Any disputes relating to this Policy are subject to the dispute resolution and jurisdiction provisions set out in the MyEx Terms & Conditions.