Privacy policy

1. Who we are

BAHHR is a peer-to-peer marketplace for renting and buying boats, jet skis, ATVs, dirt bikes, buggies and motorcycles across Saudi Arabia. We are based in Riyadh and we are the controller of the personal data described in this policy.

This policy covers the BAHHR mobile app, this website, and the emails and notifications we send you. BAHHR does not own the vehicles on the platform. Owners list and operate them, and they receive only the details described under sharing below.

2. What we collect

We collect only what the marketplace needs to work. Nothing on this list is sold, and nothing is collected for advertising.

3. How we use it

• Running the marketplace: matching renters and owners, holding slots, processing payments and payouts, and showing reviews.
• Keeping it safe: detecting fraud, preventing abuse, verifying identity and resolving disputes.
• Transactional messages: booking confirmations, pickup reminders, sign-in codes and policy updates. These are part of the service, so they keep coming while your account is open.
• Improving the product: anonymised, aggregated analytics that tell us which features earn their place.

We do not sell your personal data, we do not rent it, and we do not use it to build advertising profiles.

4. Who sees it

• The other party to a booking sees your display name, profile photo, rating and the messages you send them. Owners do not receive your email address, your phone number or your ID documents.
• Service providers who run parts of the platform for us: payment processing, SMS delivery, push notifications, cloud hosting and error monitoring. Each gets only what its job needs.
• Authorities, where a valid legal request or a genuine safety risk requires it.

A review you write, including your rating, text and display name, is public on the listing. That is the point of a review, so consider it published the moment you submit it.

5. How long we keep it

• Account data: while your account is open, then through the deletion grace period described below.
• Booking and payment records: kept as long as Saudi tax and accounting rules require, even after the account closes.
• Verification documents: deleted once the check is decided, unless a dispute or a legal obligation requires us to hold them.
• Chat messages: kept for the life of the conversation so both parties keep their record of what was agreed.

6. Your rights

Under the Saudi Personal Data Protection Law you can ask us to show you the data we hold about you, correct anything wrong, delete it, or object to a particular use. Write to the privacy inbox below and we will answer within 30 days.

You can delete your account from inside the app. Deletion is scheduled rather than instant: you keep a grace period during which signing in cancels it, and any active booking has to finish first. After that the account and its personal data are removed, except the records we are legally required to keep.

Non-essential push notifications can be turned off in your device settings at any time.

7. How we protect it

• Passwords are hashed, never stored in a readable form, and sign-in codes are hashed the same way.
• Traffic between the app and our servers is encrypted in transit.
• Verification documents sit in private storage that is never exposed publicly, and staff reach them only through an audited admin route.
• Staff access is limited by role, so nobody can see more than their job requires.

8. Children

BAHHR is not for anyone under 18. We do not knowingly collect data from children, and if we learn that we have, we delete it.

9. Changes to this policy

When this policy changes we update the date at the top of the page. If a change materially affects how we use your data, we tell you in the app before it takes effect.