Who we are
Wafferly is operated by TFA, شركة تي إف إيه لتنظيم المعارض والمؤتمرات والمعسكرات, licensed by the Ministry of Commerce and Industry, Kuwait, commercial registration 2016/7354.
Address
Al Tijaria Tower, Floor 35, Unit 35/1, Al Soor Street, Block 3, Al Mirqab, Kuwait City, State of Kuwait
Privacy contact support@wafferly.com
Telephone +965 66676522
What we collect
From every customer
| Data | Why we hold it |
|---|---|
| Mobile number | It is your account identifier and how you sign in |
| Name | Shown in the app and on merchant order screens |
| Email address | Receipts and refund correspondence |
| Gender | Optional. Used to tailor which offers you are shown |
| Chosen interests and categories | Optional. Orders the deals you see |
| Language preference | Serves the app in English or Arabic |
Generated as you use the customer app
| Data | Why we hold it |
|---|---|
| Wallet balance and top-up history | The balance is the product |
| Transactions: top-ups, purchases, refunds, gifts, vouchers | Your statement, and our accounting record |
| Orders, including merchant, item, amount and pickup or delivery | So the merchant can fulfil, and you can dispute |
| Gift vouchers you send, including the recipient's mobile number | To deliver the gift to the right person |
| Refund requests and the reason you gave | To process the bank transfer and improve the service |
| Push notification token and device platform | To send order and wallet notifications |
From every merchant
| Data | Why we hold it |
|---|---|
| Business name, description, email and locations | Your public listing in the customer app |
| Uploaded registration documents | Verifying the business before approval |
| Bank details | Paying you out |
| Agreed commission rate | Calculating settlement |
| Products, prices and availability | Your deals in the customer app |
What we do not collect
We do not collect your device location, contacts, photo library, calendar, or advertising identifier. The camera is used only to read a QR code, and the image is never stored or transmitted. We do not run third-party advertising or analytics software development kits.
Legal basis and your consent
We process your data to perform the contract you enter into when you open a wallet, to meet our record-keeping obligations under Kuwaiti law, and, for optional fields such as interests, on your consent. You may withdraw consent for the optional fields at any time by editing them in the app.
Where a user is in the European Economic Area, the same rights apply under the General Data Protection Regulation, and the legal bases above are contract, legal obligation and consent respectively.
Who else sees your data
| Recipient | What they receive | Why |
|---|---|---|
| Supabase | All application data, hosted on their infrastructure | Our database, authentication and file storage provider |
| Our SMS provider | Your mobile number and the verification code | Sending the four digit sign-in code |
| Expo push service | Your push token | Delivering notifications |
| Our payment processor | The payment amount and the card details you enter with them | Taking payment for top-ups. We never see or store card numbers |
| A merchant you buy from | Your name, the order and the amount | So they can serve you |
| Our bank | Your name, amount and account details for a refund | Paying refunds out |
We do not sell personal data, and we do not share it for advertising.
Where your data is held
Application data is stored on Supabase infrastructure. Transfers outside Kuwait are covered by the standard contractual protections in our agreement with each provider.
How long we keep it
Account and profile data is kept while your account is open. Financial records, meaning transactions, orders, refunds and vouchers, are kept for ten years after the account closes, because Kuwaiti commercial record-keeping requires it. Push tokens are deleted when you sign out or uninstall.
Your rights
You may ask us to give you a copy of your data, correct it, delete it, or stop a particular use. Write to support@wafferly.com and we will answer within thirty days.
Deleting your account
You can delete your account from Profile inside the app, or from our account deletion page. Deletion removes your profile, contact details, interests and push tokens. It does not remove financial records we are required to retain; those are anonymised so they can no longer be linked to you.
If your wallet holds a balance, withdraw or spend it before deleting. Deletion does not refund it.
Children
Wafferly is not intended for anyone under eighteen, and a wallet cannot be opened by a minor. We do not knowingly collect data from children. If you believe a child has created an account, write to support@wafferly.com and we will remove it.
Security
Sessions are held in the device's secure storage, meaning the iOS Keychain or the Android Keystore. Traffic is encrypted in transit. Access to production data is limited to staff who need it.
Changes
We will post any change here and update the date at the top. If a change materially affects how we use your data, we will tell you in the app before it takes effect.
Contact
TFA — شركة تي إف إيه لتنظيم المعارض والمؤتمرات والمعسكرات
Al Tijaria Tower, Floor 35, Unit 35/1, Al Soor Street, Block 3, Al Mirqab, Kuwait City, State of Kuwait