Privacy Policy

Last updated: 5 November 2026

This policy explains how hoota (hoota.om and the Android and iOS apps) collects, uses and protects your data, in line with the Personal Data Protection Law of the Sultanate of Oman (Royal Decree 6/2022).

Data we collect

• Booking data: name, phone number, email (optional), trip date, number of people and any notes you write.
• Account data (optional): name, email, phone and a password stored only as a secure hash.
• Tour company data: company, licence and contact details, and bank details for settlements.
• Payments: processed by a licensed payment gateway (Thawani). We never see or store your card details.
• No advertising, no ad tracking; we do not collect your location or contacts.

How we use it

• To complete your booking, send it to the tour company and confirm it.
• To email you booking and payment messages.
• To collect payments and settle them with tour companies.
• To protect the platform against fraud and abuse.

Who we share it with

• The tour company you booked with, only to run the trip and contact you.
• The payment gateway, to process your payment.
• Authorities, when legally required.

We never sell your data.

Retention and deletion

Booking records are kept as long as needed to deliver the trip and for accounting and legal requirements. You can delete your account at any time in the app (Account → Delete account) or on the account deletion page.

Your rights

You may request access to, correction or deletion of your data by writing to .

Security

We use encrypted connections (HTTPS) and hashed passwords, and limit data access to those who need it.

Children

hoota is intended for adults; children’s trips are booked by their parents or guardians.

Contact

hoota — Sultanate of Oman ·