Delete your account

1. From inside the app

If you sign in with an email address and a password, you can delete your account yourself. It takes about a minute and you do not need to contact us.

• Open BAHHR and go to the Profile tab.
• Tap Delete account.
• Read what will be removed, enter your password to confirm, and tap Delete my account.
• You are signed out on every device straight away. Nothing is erased yet, see the timeline below.

2. By email, no sign-in needed

Write to privacy@bahhr.net from the email address on the account, with the subject "Delete my account". If your account has no email address, send us the mobile number instead and we will verify it before we act.

Use this route if you signed up with your phone number or with Google, if you have uninstalled the app, or if you cannot sign in for any other reason. Accounts created through phone or Google have no password to confirm against, so the in-app button cannot verify who you are and will send you here.

We answer every request within 30 days, and in practice much sooner. We will only ever ask you for what we need to confirm the account is yours.

3. What happens, and when

4. What is erased

At the end of the grace period the following are removed outright:

• Your name, email address, mobile number, profile photo and bio.
• Your saved cards. We only ever held the brand, the cardholder name, the last four digits and the expiry.
• Every sign-in session, refresh token and push notification token, so no device stays signed in.
• Your favourites and saved searches.
• Any listing you never published.
• Any staff role or permission the account held.

Verification documents, a national ID, driving licence or passport, are deleted once the check they were submitted for has been decided, so in most cases they are already gone well before this point.

5. What we have to keep

Some records cannot be erased on request, because Saudi tax and commercial law requires us to hold them and because other people have a stake in them. These survive deletion, but with your name replaced by "Former user" and nothing left that identifies you:

• Bookings and their invoices. ZATCA requires six years of retention on tax records.
• Reviews you wrote. Removing them would distort the rating of a vehicle that other renters rely on.
• Listings that have been rented, for the same tax and dispute reasons as the bookings themselves.
• Security and audit logs, which record that an action happened without describing who you are.

6. Signing up again

For 90 days after deletion, the same email address and mobile number cannot be used to open a new account. This is a fraud control: it stops someone from clearing a poor rating or an outstanding obligation by deleting and immediately re-registering.

We do not keep the address or the number in order to do this. We keep a one way hash of each, which can confirm that a value was seen before but cannot be turned back into the value itself. After 90 days you are free to sign up again with the same details.

7. If you want less than deletion

Deletion is permanent, and it is not always what people actually want. Under the Saudi Personal Data Protection Law you can also ask to see the data we hold about you, correct anything wrong in it, or object to a particular use, all without closing your account. Write to privacy@bahhr.net and we will answer within 30 days.

If you only want the notifications to stop, you can turn each category off in the app under Profile, then Notifications, and keep the account.