Privacy policy
Effective date: 10 October 2026
1. About Wain
Wain (وين), available at https://wain.lol, is a Saudi café discovery platform that helps people find cafés, explore neighborhoods, search for recommendations, and find places to meet through its Halfway (بيننا) feature.
Wain is operated by Cali Ventures (شركة مشاريع كالي) at the address below.
Contact: privacy@cali.sa
Address: Cali Ventures, Al Akaria 2, Al Olaya Street, Al Olaya, Riyadh 12244, Saudi Arabia.
2. Information We Collect and Process
Wain has no visitor accounts or logins. You don't sign up or sign in to use it, and Wain stores no visitor passwords or login data. Wain does not collect email addresses for a newsletter. The only verification step is the WhatsApp code café owners receive when they claim a listing, described below.
Depending on the features you use, the following information may be processed.
A. Location information
When you allow browser location access, Wain uses your location on your device to calculate distances to cafés. This distance feature does not send your GPS location to Wain’s server or analytics services directly.
For Halfway (بيننا):
- When two people use Halfway on the same device without an invitation link, Wain does not save a Halfway record in its database.
- When an invitation link is used, Wain stores the host’s and friend’s selected map locations, three suggested cafés, creation and expiry timestamps, and the language used.
- Stored coordinates are rounded to five decimal places, approximately metre-level precision.
- Halfway records are not directly associated with a registered account, name, email address, or telephone number.
- Halfway records are deleted automatically about 24 hours after the link expires (about 25 hours after creation if nobody joins, about 72 hours after results are shown). Deletion runs during later Halfway activity, so it can take longer.
- Invitation links contain a random code, not your location. While a link is valid, anyone who has it can see both participants’ selected locations.
- Invitations generally expire after 45 minutes if the invited participant does not join. Links with results remain available for 48 hours.
- When results are generated, an email containing both locations, map links, suggested cafés, and language information is sent to Wain’s team through an automation and email service. GPS-derived coordinates in those emails may retain full precision. Emails are retained until manually deleted.
The host’s selected location may also remain in the current browser tab until that tab is closed.
Please share Halfway links only with people you trust.
B. Search and AI interactions
When you use Wain’s search/chat functionality:
- Your search text is sent to xAI’s Grok service to generate a response.
- Wain’s server logs record the text entered, a randomly generated browser-tab identifier, and three suggested cafés.
- If you accept analytics cookies, Google Analytics receives only the length of the text you type, not the text itself.
- Shared search-result URLs may contain the search request in encoded form. The page address may be received by analytics and advertising providers.
Please avoid entering confidential, sensitive, or unnecessary personal information into search.
C. Feedback and voting
When you submit an idea through Wain’s feedback board, the submitted text is publicly displayed and retained without a configured automatic deletion period.
Voting uses a pseudonymous identifier derived from the wain_vid browser cookie. Voting records are retained without a configured automatic deletion period, subject to available removal functionality.
An IP address may be processed temporarily for spam prevention without being stored in Wain’s application database for that purpose.
Please do not include private personal information in publicly submitted feedback.
D. Café-owner verification and claims
If you claim or manage a café listing, Wain may process:
- Your mobile telephone number.
- The café associated with your claim.
- A hashed verification code.
- Hashed owner-edit links.
- Information and photographs you submit about your café.
- The selected proof-document filename, but not the document itself.
Verification codes are delivered using Meta’s WhatsApp service and are valid for 10 minutes.
Owner-edit links remain valid for seven days.
Claim records, including incomplete claims, are currently retained without automatic deletion. Expired verification and edit-link records may also remain stored.
Submitted café photographs may be stored using Vercel. Information about your café may be displayed publicly.
The submitted telephone number may also appear in server logs.
E. Website usage, cookies and technical information
Wain uses analytics and advertising technologies that may process:
- Pages visited and full page addresses.
- Interactions with cafés, searches, maps, shares, votes and Halfway.
- Browser, device, screen, language and time-zone information.
- Cookie identifiers and pseudonymous visitor identifiers.
- Advertising interactions and conversion events.
- IP addresses and request information processed by hosting or third-party infrastructure.
Unexpected URL parameters are removed before any analytics or advertising tool loads. These tools don’t load on Halfway invite pages or owner-edit pages, and Vercel Web Analytics sees invite pages only as “/h/[invite]”. Shared search-result links (/p/…) still contain the encoded request.
Wain’s application database does not currently maintain a general visitor account database containing names, emails, IP addresses or browser details. This does not mean such information is absent from hosting logs or third-party services.
3. Why We Process Information
Wain processes information for purposes including:
- Providing café discovery and recommendations.
- Calculating café distances and Halfway results.
- Generating AI-assisted search responses.
- Processing feedback and votes.
- Verifying café ownership and enabling listing management.
- Operating, securing and troubleshooting the website.
- Understanding visitor activity and improving features.
- Measuring advertising performance and conversions.
- Detecting abuse and preventing spam.
Analytics and advertising rely on your consent through the cookie banner. The other processing described above is needed to provide the features you ask for.
Optional analytics and advertising technologies are used only after you choose Accept in the cookie banner. If you choose Reject, or make no choice, they are not loaded. You can change your choice at any time through the Cookie settings link at the bottom of every page.
4. Service Providers and Sharing
Wain uses external providers to support its operations, including:
- Vercel: hosting, server logs, photo storage and visitor analytics.
- Neon: application database.
- xAI (Grok): AI-generated search responses.
- Google: Maps-related functionality, Analytics, Tag Manager and advertising.
- X: advertising measurement.
- OpenAI: advertising measurement.
- DataFast: visitor analytics and AI-crawler reporting.
- Meta: WhatsApp delivery of café-owner verification codes.
- Automation and email providers: delivery of Halfway results notifications.
Information is shared with these services according to the relevant feature and technical configuration.
Some advertising providers use automated matching or identification technologies. Those providers process this information under their own privacy policies.
Wain does not currently use a Meta/Facebook, TikTok, Snapchat or LinkedIn advertising pixel.
5. International Processing
Wain uses providers that operate internationally.
The Neon database is configured in the United States, in the US East region. Café photographs are stored in Vercel’s US East region.
Other providers may process information outside Saudi Arabia. Wain has not confirmed the exact processing locations of all of them.
Cross-border processing and transfers of personal data are subject to applicable Saudi legal requirements.
6. Retention
Current retention practices include:
- Halfway database records: Deleted automatically about 24 hours after the link expires
- Halfway result emails: Until manually deleted
- Public feedback ideas: No automatic deletion
- Feedback voting records: No automatic deletion
- Café-owner claim records: No automatic deletion
- Expired verification/edit-link records: May remain stored after expiry
- Server logs: Provider-controlled retention; the period depends on the hosting plan
- Neon database change history: Up to approximately six hours
- Analytics and advertising data: According to relevant provider settings and retention policies
- Browser cookies: Varies by cookie; see “Cookies and consent settings” in this Privacy Policy
The expiry of a verification code or edit link does not necessarily mean that the underlying record has been deleted.
Where applicable, individuals may request destruction of personal data, subject to legal requirements and the ability to locate and verify the relevant information.
7. Cookies and Tracking
Wain uses essential functionality, analytics, and advertising technologies.
When you first visit Wain, a cookie banner lets you Accept or Reject optional analytics and advertising technologies. Until you accept, only essential functionality is used. You can withdraw or change your choice at any time through Cookie settings, and withdrawing consent clears the related cookies.
Details are provided in the “Cookies and consent settings” section of this Privacy Policy.
8. Your Privacy Rights
Subject to applicable Saudi law, you may have rights to:
- Be informed about personal-data processing.
- Access your personal data.
- Request a readable copy where applicable.
- Request correction or completion of inaccurate data.
- Request destruction where legally applicable.
- Withdraw consent where processing relies on consent.
To submit a request, contact privacy@cali.sa.
Some records are not linked to a name or registered account. Wain may need sufficient information to identify the relevant record and verify that the request is authorized.
You may also have the right to submit a complaint to the competent Saudi data-protection authority.
9. Security
Wain uses technical measures such as hashed verification codes and restricted feature links for certain operations.
However, no system is completely secure. Halfway invitation links use a random code and don’t contain your location, and advertising and Google analytics tools don’t load on invite or owner-edit pages; Vercel Web Analytics sees invite pages only as “/h/[invite]”.
Do not share private edit links or Halfway links with unintended recipients.
10. Children
Wain is a general café-discovery service and is not specifically designed to collect children’s personal information.
Where information about children is processed, it is subject to the protections that apply under Saudi law.
11. Changes to This Policy
We may update this policy as Wain’s features, providers and data practices change.
The effective date will be updated when a revised policy is published.
12. Contact
Cali Ventures — Wain (وين)
Al Akaria 2, Al Olaya Street
Al Olaya, Riyadh 12244
Saudi Arabia
Email: privacy@cali.sa