Privacy policy
Last updated 16 September 2026
HULUL is an inspection and operations platform used by event owners, event managers, inspectors and operators working on events in the Kingdom of Saudi Arabia. It is run by ASK LLC. This policy covers the HULUL phone app and the web platform it connects to.
Who can use it
HULUL accounts are created by an organisation for its own people. You cannot create an account from the app or the website.
What we collect, and why
- Your account: your name, work email address, organisation and role, set up by your organisation's administrator. We use them to sign you in and to show who did what.
- Precise location, when you record evidence: a photograph taken to raise a log or to show a fix carries where and when it was taken, so the finding can be checked against the venue boundary.
- Precise location, while the app is open: your position is sent every few seconds while the app is on screen, so authorised supervisors can see staff on the venue map. It is never sent while the app is closed or in the background. Only positions inside the venue are shown, and only to people your organisation has given that permission.
- Photographs: those you take with the app's camera, as evidence or in an event's chat. The app opens only the camera, never your photo gallery, and removes the photo's embedded metadata; where it was taken travels separately, as described above.
- What you write: logs, checklist answers, comments and chat messages.
- A device identifier: a random number the app creates when it is first opened, used to recognise the phone a piece of evidence came from. It is not your phone's hardware or advertising identifier.
What we do not do
We do not sell your data or use it for advertising. The app has no advertising and no analytics services. It does not read your contacts, your other photos, or the names of Wi-Fi networks.
Where your data is kept
Platform data is stored in the Kingdom of Saudi Arabia. It is not transferred abroad, with these exceptions: sign-in emails are delivered through Microsoft 365, the email service of ASK LLC, and if your organisation signs in with Google or Microsoft, that provider confirms your email address.
Who can see it
People in your organisation and in the other organisations working on the same event, according to the roles and permissions set on the platform.
How long we keep it
An event's records are kept for as long as your organisation's agreement with the event owner requires them to be kept, and are then deleted.
Deleting your data
Your organisation's administrator can deactivate your account. To ask for your account and personal data to be deleted, write to support@hulul.co. Evidence recorded for an event may need to be kept as part of that event's record, as your organisation's contract with the event owner requires.
Security
Everything between the app and the platform travels encrypted. On the phone, your session is kept in the phone's secure storage, and signing out removes your data from the phone.
Contact
ASK LLC, Kingdom of Saudi Arabia. support@hulul.co
Changes
We will post changes here with the date they take effect.