Terms of Service

S4kan ("S4kan", "we", "us") is a residential-compound management platform operated by S4kan FZE LLC, registered in Saudi Arabia. We provide software to residential-compound operators ("compound admins") and the residents of those compounds ("residents").

By creating an account, signing in, or otherwise using the S4kan web app, iOS app, or Android app (together, the "Service"), you agree to these Terms of Service ("Terms") and to our Privacy Policy. If you don't agree, don't use the Service.

S4kan is invite-only. To create a resident account you need either an invite code issued by your compound admin (codes are prefixed S4KAN-) or a direct invitation sent to your phone number or email.

• You must be at least 13 years old. If you are under 18, you must use S4kan under the supervision of a parent or legal guardian who has agreed to these Terms on your behalf.
• You must have a legitimate connection to the compound (you are a resident, an authorised household member, a compound staff member, or a guest invited by one of the above).
• You must keep your account credentials confidential. You are responsible for activity under your account.
• One account per person. Don't impersonate someone else and don't sign up using a name that isn't yours.

S4kan is a B2B platform. Your compound admin is our customer; you are using the Service because your compound admin chose S4kan to run the compound's operations.

• Your compound admin controls the data scope. They decide whether identity-document upload is required, which amenities you can book, how guest passes are issued, and similar policies.
• S4kan is the data processor for the data your compound admin instructs us to handle.
• If your compound stops using S4kan (we part ways with the compound, or the compound migrates to another provider), your account access ends together with the compound's. We will give your compound admin reasonable notice and an export window before any data is archived.

You agree not to:

• Use S4kan for anything illegal, abusive, or designed to harm other residents, compound staff, or guests.
• Attempt to access another resident's, compound's, or admin's data — including by manipulating IDs in URLs, by probing API endpoints, or by sharing credentials.
• Reverse-engineer, decompile, or attempt to derive source code from the apps, except to the extent expressly permitted by applicable law.
• Run automated scrapers, bots, or load generators against our APIs without our written permission.
• Upload identity documents that aren't yours, or upload forged or altered documents.
• Use the Service to harass, threaten, defame, or send unsolicited bulk messages to other users.
• Interfere with the security, integrity, or availability of the Service (port scans, DoS attempts, exploitation of vulnerabilities without responsible disclosure).

Found a security issue? Email hello@s4kan.com with details. We treat coordinated disclosure seriously and we won't pursue legal action against good-faith research that stays within the bounds of this section.

You retain ownership of the content you submit (profile photos, identity-document images, complaint text, guest invitation details, messages). By submitting it, you grant S4kan a limited, worldwide, non-exclusive licence to host, store, and display the content strictly for the purpose of operating the Service for you and your compound — and for no other purpose.

You represent that you have the right to submit the content and that doing so doesn't violate anyone else's rights, applicable law, or these Terms.

We don't moderate compound-internal content (bookings, guest invitations, internal complaints) for editorial taste — your compound admin handles that. We reserve the right to remove content that violates these Terms or applicable law and to cooperate with law-enforcement requests where legally required.

Some compounds require identity verification (iqama, passport). When your compound admin enables that feature:

• You upload your document in-app. We extract the document fields via OCR and store the image in a private, compound-scoped Supabase Storage bucket.
• Only your compound's admins can view the image. Other residents and other compounds cannot.
• The retention period is set by your compound admin (typically 90 / 180 / 365 days) or until you request deletion — whichever comes first.
• You can delete the document at any time from Profile → Identity documents. Deletion is irreversible and may temporarily limit access to features that require verification until you re-upload.

We send notifications related to your account and your compound activity (booking approvals, gate alerts, announcements, security events). You can choose your channels — push, email, WhatsApp, Telegram, SMS — in Profile → Notification channels.

Some notifications are mandatory for service security (sign-in alerts on a new device, account-deletion confirmation) and cannot be turned off as long as you have an account.

We may suspend or terminate your account if:

• You violate these Terms or applicable law.
• Your compound admin removes you (e.g. you no longer reside at the compound, your tenancy ended).
• Your compound's contract with S4kan ends.
• We reasonably believe your account is being used to harm other users or the integrity of the Service.

You can delete your account at any time:

• In the iOS or Android app: Profile → Delete account.
• On the web: Settings → Delete account, or directly at s4kan.com/account/delete.

Deletion permanently erases your profile, cancels active bookings, revokes guest invitations, and prevents future sign-ins to the deleted account. Some records (gate events, audit logs) are retained as described in the Privacy Policy.

Compound admins cannot delete their own account through the self-service flow until they have transferred admin ownership to another admin — this prevents a compound from being orphaned.

S4kan does not charge end users (residents, security personnel, guests). Fees, if any, are billed to your compound's operator under a separate agreement. There are no in-app purchases or subscriptions inside the iOS or Android apps.

We aim for high availability but don't guarantee uninterrupted service. Maintenance windows, third-party outages (Supabase, Twilio, Telegram, push providers), and compound-network issues can affect access. Where the outage is on our side and material, we'll communicate through the in-app banner and (for compound admins) email.

S4kan is not a substitute for emergency services. If there's a real emergency at the compound — fire, medical, crime in progress — call your local emergency number first.

To the maximum extent permitted by applicable law, the Service is provided "as is" and "as available". We disclaim implied warranties of merchantability, fitness for a particular purpose, and non-infringement.

We are not liable for indirect, incidental, special, or consequential damages, or for loss of profits or data, arising from your use of the Service. Our aggregate liability for direct damages is limited to the fees paid by your compound admin to S4kan in the 12 months preceding the event giving rise to the claim — and where no fees were paid for your account, to USD 100.

Nothing in these Terms limits liability that cannot be limited under applicable law (including, where applicable, consumer-protection rights for users in the EU/EEA, the UK, and similar jurisdictions, and rights under PDPL in Saudi Arabia).

S4kan, the S4kan name, the S4kan logo, and the apps' design, code, and content are owned by S4kan FZE LLC and protected by intellectual-property laws. These Terms grant you a limited, revocable, non-exclusive, non-transferable right to use the Service for its intended purpose. They do not transfer any IP rights to you.

We will update the "Last updated" date at the top of this page when these Terms change. Material changes will be announced in the app and via email to the address on file at least 14 days before they take effect. Continuing to use the Service after a change means you accept the updated Terms.

These Terms are governed by the laws of the Kingdom of Saudi Arabia, without regard to conflict-of-law rules. Disputes are subject to the exclusive jurisdiction of the competent courts in Riyadh, except where mandatory consumer law in your country of residence requires a different forum.

Questions about these Terms: hello@s4kan.com.

Postal: S4kan FZE LLC, Riyadh, Saudi Arabia.