Privacy Policy

1Who we are

EV+ is an electric-vehicle charging platform in Saudi Arabia operated by legal company name, Commercial Registration No. CR number, national address national address ("EV+", "we", "us"). We are the controller of your personal data under the Saudi Personal Data Protection Law (PDPL) and its implementing regulations.

2Scope of this policy

This policy covers the EV+ app on iOS and Android and the website evplusc.com. It explains what data we collect, why, who we share it with, and your rights. The operator and partner portals are covered by separate agreements.

3Data we collect

Data you give us

• Account data: your mobile number (for sign-up and one-time-code verification), and your name and email if you add them to your profile.
• Vehicle data: your vehicle model and connector type, so we can show compatible stations.
• Requests and support: what you send us through the "Request" form or support.
• Charging assistant conversations: the questions you type to the AI assistant, so it can answer them.

Data collected when you use the service

• Precise location: only if you grant permission, to show nearby stations and give directions. You can turn this off at any time in your device settings and still search for stations manually.
• Charging sessions and bookings: station and charge point, time and duration, energy delivered (kWh), cost, and booking status.
• Payment data: amount, status and transaction reference. Card details are processed by a licensed payment provider, payment provider name; we do not store your full card number on our servers.
• Technical data: device type, operating system, app version, account ID and crash logs, to keep the service working and fix problems.

We do not sell your personal data, use it for targeted advertising, or track you across other companies' apps or websites.

4How we use your data

5Who we share your data with

We share only what is necessary with:

• Charging station operators: when you charge at a station run by another operator (through roaming networks such as OCPI), we share the session data needed to run the charger and calculate the cost, not your mobile number or name unless strictly required.
• Our payment provider, payment provider name, to process payments securely.
• Technical service providers acting on our behalf under data-protection agreements, including hosting hosting provider, maps e.g. Google Maps, verification SMS SMS provider, crash reporting e.g. Firebase Crashlytics, and the AI assistant AI service provider.
• Competent authorities where the law requires it.
• A buyer or successor in a merger or acquisition, with prior notice to you.

6Where your data is stored

User data and charging-session records are stored in data centres in Saudi Arabia. Some services (such as maps or the AI assistant) may need to process a limited part of your data outside the Kingdom. When that happens, we transfer only the minimum necessary and follow the PDPL and its regulation on transferring personal data outside the Kingdom.

7How long we keep it

• Account and vehicle data: while your account is active, then deleted or anonymised within 30 days of account deletion.
• Charging, payment and invoice records: for the period required by accounting and tax rules e.g. 10 years.
• Charging assistant conversations: retention period.
• Crash logs and technical data: e.g. 90 days.

8Security

Data is encrypted in transit (TLS) and at rest, and access is limited to authorised staff who need it. No method of protection is perfect; if a breach affects your data, we will notify you and the competent authority as the law requires.

9Your rights

Under the PDPL, you have the right to:

• Be informed about how your data is collected and processed (as this policy does).
• Access your data and receive a copy in a readable format.
• Correct, update or complete your data.
• Ask us to destroy your data when it is no longer needed, unless the law requires us to keep it.
• Withdraw your consent at any time, for example by turning off location access, without affecting processing done before you withdrew it.

To use any of these rights, email privacy@evplusc.com. We will reply within 30 days and may ask you to verify your identity.

10Deleting your account

You can delete your account at any time in the app: My Account → Edit Profile → Delete Account, or by emailing privacy@evplusc.com. When you delete your account, we destroy or anonymise your account data, except what the law requires us to keep, such as invoices.

11Children

The service is intended for vehicle owners and drivers and is not directed at anyone under 18. We do not knowingly collect data from people under that age, and we will delete it if we learn that we have.

12Changes to this policy

We may update this policy from time to time and will change the "Last updated" date above. If a change is significant, we will tell you in the app before it takes effect.

13Contact and complaints

• Email: privacy@evplusc.com
• Phone: +966 …
• Address: national address

If you are not satisfied with our response, you may complain to the Saudi Data & AI Authority (SDAIA), the authority that oversees the PDPL.