Privacy Policy

01 Two kinds of data, two different roles

When you sign up for Yameen, we decide what to collect and why — your name, email, mobile number, workshop details and billing information. For that data, we are the controller.

When you enter your own customers into Yameen — their names, phone numbers, national ID or CPR numbers, vehicles and invoices — you decide what to collect and why. We only hold and process it on your behalf. For that data, you are the controller and we are the processor. It is your workshop's data; we do not sell it, mine it, or use it for anything other than running the service for you.

02 What we collect about you

Account information: your name, email address, mobile number, password (stored only as an argon2id hash), workshop name and country.

Usage information: basic technical records such as sign-in events, IP address and browser type, kept for security and troubleshooting.

Billing information: what plan you are on and your payment history. Card details are handled by our payment processor and are never stored on our systems.

Anything you send us: messages, support requests and the contents of forms you submit.

03 What your workshop stores in Yameen

Yameen is designed to hold customer names, contact numbers, national ID or CPR numbers, vehicle and equipment details, service history, invoices and payment records. National ID numbers in particular are sensitive, and you should only record them where you have a genuine reason to.

You control this data. You can correct it, export it, or delete it at any time from inside the product, and we will act on a deletion request that you pass on from one of your own customers.

04 Why we use it

To provide the service you signed up for, to keep it secure, to bill you, to contact you about your account, and to comply with legal obligations. That is the whole list.

We do not sell personal data. We do not share it with advertisers. We do not use your workshop's customer records to train anything.

05 Who else touches it

We use a small number of service providers to run Yameen — cloud hosting for the application and database, an email provider for transactional messages such as verification and password resets, and a payment processor for subscriptions. Each receives only what it needs to do its job and is bound to protect it.

We will publish the current list of these providers and the country each operates in. We will tell you before adding a new one that handles personal data.

06 Where it is stored and for how long

Your data is stored on managed cloud infrastructure. We will state the specific hosting region here before general launch.

We keep your data for as long as your account is active. If you close your account, we delete your workshop's data after a short grace period — long enough for you to realise if it was a mistake, not long enough to be a liability — except where we are legally required to retain financial records for longer.

07 Your rights

You can ask us to give you a copy of your data, correct it, delete it, or stop a particular use of it. You can export your workshop's records yourself at any time without asking.

These rights reflect Bahrain's Personal Data Protection Law, and are written to be compatible with GDPR-style expectations as Yameen expands. To exercise any of them, contact us — we will respond within 30 days.

08 If something goes wrong

If a breach affects your personal data, we will tell you and the relevant authority, within the timeframes the law requires, and we will tell you what actually happened rather than the vaguest description we can defend.

09 Contact

For any privacy question or request, contact us through the details on our contact page. [Registered entity name, commercial registration number and registered address to be inserted before public launch.]