Privacy Policy

Last updated: 22 October 2026

Raha is an app for booking bus tickets between the Kingdom of Saudi Arabia and Yemen, owned and operated by Basha Technology Investments (commercial registration 7053180589), which is responsible for your data. This page explains what data we collect when you use the app or website, why, who we share it with, and how you stay in control.

What we collect

• Your phone number. It is the number a booking is made under, and your account if you choose to sign in. We use it to send a verification code over WhatsApp when you sign in, and to link your bookings to you.
• Passenger details. Full name, gender and passport or ID number for each passenger, because the operator and border posts require them on cross-border trips, which every Raha trip is.
• Booking details. The trip, the seat if chosen, the price and its currency, booking, payment and refund status, and your acceptance of cross-border travel terms.
• Your preferences. The language, dialect and display currency you choose.
• Your email address if you are platform staff or an operator's staff signing in to the operations console.

What we do not collect

• We do not request location permission and do not track where you are.
• We do not access your contacts, photos or files.
• We do not store your card details: payment happens on the payment provider's own page.
• We do not use advertising identifiers or third-party behavioural analytics, and we show no ads.

Why we use your data

• To complete your booking, issue your ticket and pass it to the operator carrying you.
• To send your sign-in code over WhatsApp.
• To meet the cross-border carriage requirements set by operators and authorities.
• To take payment, make refunds and keep accounts.
• To run the service, prevent fraud and fix faults.

We do not sell your data and do not share it for marketing.

Who we share it with

• The operator you book with receives the passenger and booking details needed to carry you, and nothing else.
• The payment provider that processes your card or Apple Pay payment receives the amount and what it needs to complete the payment on its own page, under its own privacy policy.
• Supabase hosts our database and sign-in service in a data centre in Frankfurt, Germany.
• WhatsApp (Meta) delivers the verification code to your number, under WhatsApp's own privacy policy.
• Apple and Google distribute the app through their stores and may collect diagnostics under their own policies; we do not receive that data in a form that identifies you.
• Competent authorities where the law requires it.

The ticket on your device

Your ticket, including its QR code and short code, is saved on your device the moment you buy it so it works without a connection at boarding. That copy stays on your device under your control; deleting the app deletes it.

How long we keep data

We keep booking records for as long as accounting and legal obligations require, then delete or anonymise them. Your account we delete whenever you ask.

Deleting your account

In the app: My trips → Delete account. Your sign-in and profile are deleted at once. Records of bookings you made stay for as long as the law requires, detached from any account, and tickets saved on your device stay until you delete the app. If you no longer have the app, ask from the account deletion page.

Your rights

You may access and correct your data, ask for it to be deleted, and object to its processing. Contact us and we will respond within thirty days.

Children

Accounts are for people aged eighteen and over. An adult may add children as passengers on a booking; we process their details for that trip only.

Changes

If we change this policy we publish the new version here with its date, and tell you in the app if the change is material.

Contact

The privacy contact address will be published here shortly.