Jahez

Is Jahez safe?

Jahez is safe enough for ordering food in Saudi Arabia and the Gulf: we found no breach, no privacy fine and no consumer-protection order against it, and its Apple label lists only usage data as used to track you. The catch is paperwork. The privacy policy linked from its App Store page is a 2021 text that talks about weight, height and dietitians, and the one linked from Google Play describes a restaurant device app. We score Jahez 55/100, next to HungerStation (54) and Keeta (53).

Who runs Jahez

Jahez International Company for Information System Technology is based in Riyadh and listed on the Saudi Exchange main market under code 6017, after moving up from the Nomu parallel market in 2024. Its 2025 annual report says it works in Saudi Arabia, Bahrain, Kuwait and Qatar, where it bought 76.56% of Snoonu in 2025. The app has been on the App Store since 2016 and has about 610,000 ratings in Saudi Arabia.

A stock market listing helps readers. Saudi-listed companies must publish the fines they paid each year, so there is a public record to check, which private rivals do not have.

Which privacy policy applies?

Three documents claim to be the Jahez privacy policy, and they disagree.

The App Store links to "Jahez Privacy Policy V2.2", dated 9-3-2021. It says registration asks for "your name, e-mail address, date of birth, gender, weight and height", mentions before-and-after photos stored unencrypted on the phone, and describes message boards moderated by dietitians. None of that describes a delivery app. It names a company called Alamat Int and refers to "federal regulations".

Google Play links to a page called "e Restaurant Privacy Policy". Its data section says the app "does not allow users to create an account" and collects device IDs to detect Sunmi devices for receipt printing, which points to a restaurant tablet app, not the customer app.

The policy that fits is on the investor website, jahezgroup.com. It names Jahez as the data controller, is written around Saudi Arabia's Personal Data Protection Law and lists your rights to access, correct and delete data and to withdraw consent. It says most data stays in Saudi Arabia, with one service provider in Germany. It has no date and no retention periods: data is kept while your account is active "as well as for an additional period afterwards".

For a company of this size, sending readers to the wrong policy is a real failure of transparency, and it is why we score transparency and control at 40.

What the app collects

The store labels are light. Apple lists usage data as used to track you, and usage data, diagnostics and other data as collected but not linked to you. Nothing is listed as linked to your identity. Google Play says Jahez shares device IDs for app functionality and analytics, and that it collects no user data at all.

Neither matches the group policy, which lists your name, contact details, address, date of birth, gender, payment details, location, device identifiers, IP address and recordings of customer service calls, as well as call and WhatsApp contact with riders. Marketing by SMS, email and targeted ads needs your consent, but the policy also relies on legitimate interest to market its services and study buying trends. When a policy discloses more than the label, we score the broader one, so privacy sits at 48 rather than in the 60s.

Security

We found no reported breach of Jahez customer data. The 2025 annual report names cyberattacks as a high risk and says the company uses intrusion detection and regular penetration testing. It also says Jahez became "the first company in Saudi Arabia to receive ISO 27001 certification", while its risk section still calls certification an ongoing project; the report does not say which systems the certificate covers. Google Play says data is encrypted in transit. We found no bug bounty on HackerOne, Bugcrowd or Intigriti, and no security.txt file on the group website.

Fines and regulators

The 2025 annual report lists SAR 1,802,976 (about US$480,000) in fines from the Ministry of Interior, the Ministry of Justice and municipalities, without saying what they were for. None is from the data regulator SDAIA or the Ministry of Commerce, so we treat them as context and take a little off the regulatory score. In March 2025 Saudi Arabia's competition authority published draft rules on abuse of dominance by delivery apps, such as exclusive deals with restaurants; the draft names no company.

Snoonu, the group's app in Qatar

In July 2025 Jahez agreed to buy a 76.56% stake in Snoonu, a Qatari delivery app founded in 2019, at a valuation of US$320 million, MENAbytes reported. Snoonu kept its own brand and app. On the Qatar App Store it is published by Oryxnet and has about 51,000 ratings. We have not scored Snoonu, and the scores on this page cover the Jahez app only.

How to use Jahez more safely

1. On iPhone, tap "Ask App Not to Track" and allow location only while using the app.
2. Read the group policy at jahezgroup.com, not the one linked from the store page.
3. Refuse marketing consent if asked, and switch off push offers in your phone's settings.
4. Never give a one-time code or card number to anyone who calls or messages about an order; use in-app help.
5. To delete your data, write to the data team named in the group policy and keep the reply.

How we scored it

Regulatory record (83) is Jahez's strongest factor: no privacy or consumer fine in a public penalties record, though no regulator has examined the app. Transparency and control (40) is the weakest, because the policies linked from both app stores describe other apps. Privacy (48) reflects a broad group policy behind a light store label.