Privacy policy

About this policy

HULUL is an event readiness and inspection platform used by Event Owners, Event Managers, Event Inspectors and Operators working on events in the Kingdom of Saudi Arabia. It is run by ASK LLC. This policy covers the HULUL web platform, the HULUL phone app, and this website.

Who can use it

HULUL accounts are created by an organisation for its own people. You cannot create an account from the app or the website.

What we collect, and why

• Your account: your name, work email address, organisation and role, set up by your organisation’s administrator. We use them to sign you in and to show who did what.
• Your sign-ins: each time you sign in or are refused, we record how, whether it succeeded, when, and which browser or app was used, with the network part of your address only — the rest of the address is dropped before it is stored. We use this to keep accounts safe.
• Precise location, when you record evidence: a photograph taken to raise a log or to show a fix carries where and when it was taken, so the finding can be checked against the venue boundary.
• Precise location, while the app is open, where your platform uses live positions: when this is switched on, your position is sent at the interval the platform sets — never more often than every ten seconds — while the app is on screen, so authorised supervisors can see staff on the venue map. It is never sent while the app is closed or in the background. Only positions inside the venue are shown, and only to people your organisation has given that permission.
• Photographs: those you take with the app’s camera, as evidence or in an event’s chat. The app opens only the camera, never your photo gallery, and removes the photo’s embedded metadata; where it was taken travels separately, as described above.
• What you write: logs, checklist answers, comments, chat messages and support tickets, including any voice note you record.
• A device identifier: a random number the app creates when it is first opened, used to recognise the phone a piece of evidence came from. It is not your phone’s hardware or advertising identifier.

When an administrator acts for you

For support, an authorised administrator can act as you on the platform. You are told when it starts and when it ends, and you can refuse it in advance.

What we do not do

We do not sell your data or use it for advertising. The platform and the app have no advertising and no analytics services. The app does not read your contacts, your other photos, or the names of Wi-Fi networks.

Where your data is kept

Platform data is stored in the Kingdom of Saudi Arabia, on Google Cloud in the Dammam region. It is not transferred abroad, with these exceptions:

• emails from the platform — invitations, sign-in messages and notifications — are delivered through Microsoft 365, the email service of ASK LLC;
• if your organisation signs in with Google or Microsoft, that provider confirms your email address;
• the phone app asks Expo’s update service whether a newer version of the app exists, without sending event data.

Map imagery on the web platform is fetched from Google through HULUL’s own server, so Google does not receive your address. More detail is on the security and data page.

This website

hulul.co sets no cookies, runs no analytics and loads nothing from other sites. When you write to us, we receive what you send and use it only to reply.

Who can see it

People in your organisation and in the other organisations working on the same event, according to the roles and permissions set on the platform.

How long we keep it

An event’s records are kept for as long as your organisation’s agreement with the event owner requires them to be kept, and are then deleted.

Deleting your data

Your organisation’s administrator can deactivate your account. To ask for your account and personal data to be deleted, write to support@hulul.co. Evidence recorded for an event may need to be kept as part of that event’s record, as your organisation’s contract with the event owner requires.

Security

Everything between the app, the website and the platform travels encrypted. On the phone, your session is kept in the phone’s secure storage, and signing out removes your data from the phone.

Contact

ASK LLC, Kingdom of Saudi Arabia. support@hulul.co

Changes

We will post changes here with the date they take effect.