Terms of Service (State of Kuwait)

DRAFT NOTICE: These Terms of Service are a draft. They are being prepared for review by qualified legal counsel in the State of Kuwait and are not yet in force. They do not create any rights or obligations until a final version is published with an effective date. Nothing in this draft is legal advice. Text in [square brackets] is a placeholder or a point still open for counsel.

1. About these terms

These Terms of Service ("Terms") are an agreement between you and [TokenNo Gulf entity legal name], a [type of entity] registered in [country of registration] under [registration number], with its registered office at [registered address] ("TokenNo", "we", "us"). [Name, commercial registration number and address of any Kuwait entity, branch or local agent, if one is appointed.] Contact: info@tokenno.com.

They apply when you use, in the State of Kuwait ("Kuwait"):

the TokenNo customer app;
the TokenNo Business app, web front desk and TV "Now Serving" board;
the website at tokenno.com; and
the TokenNo Integration API and webhooks.

Together these are the "Service".

These Terms have three parts:

Part A applies to everyone.
Part B applies to customers: people who book tokens ("hosts") and the people they invite ("guests").
Part C applies to vendors: businesses that issue tokens through TokenNo, and their staff.

Please also read our Privacy Policy for Kuwait (available in the apps and on tokenno.com), which explains how we handle personal data.

By creating an account or using the Service, you agree to these Terms. You accept them electronically, which is valid under Law No. 20 of 2014 on Electronic Transactions. If you do not agree, please do not use the Service.

PART A — TERMS FOR EVERYONE

2. What TokenNo is (and is not)

TokenNo is a technology platform that helps businesses manage queues. Vendors publish their sessions and service points, customers get a token number, and everyone is told when it is their turn.

TokenNo does not provide the vendor's services. The clinic, doctor, hospital, restaurant, salon, office or event organiser you book with ("vendor") decides what service it provides and is solely responsible for it, including medical care, food, quality, safety, prices and conduct. TokenNo is not a healthcare provider and does not give medical advice. In an emergency, call 112 or go to the nearest hospital emergency department. Do not rely on a TokenNo token in an emergency.

[Counsel to confirm: how TokenNo should be classified under Kuwaiti law (for example as an online platform or intermediary), whether TokenNo needs a commercial licence, a local agent or another local presence, or any licence from the Ministry of Commerce and Industry for online commercial activity, to offer the Service in Kuwait, and the consumer disclosures that follow.]

3. Your account

One mobile number = one identity. Your TokenNo account is linked to your mobile number, which we verify by one-time password (OTP). The same account can be used as a customer and, if a vendor adds you, as vendor staff.
You must give true information and keep your mobile number up to date. If you change or give up your number, update or delete your account, because whoever gets that number next could otherwise receive OTPs for it.
Keep your phone and OTPs secure. You are responsible for activity on your account unless it happened because of our fault.
Age. You must be at least 21 years old to create an account, the age of majority understood under the Kuwaiti Civil Code (Decree-Law No. 67 of 1980) [counsel to confirm; use 18 only if counsel confirms that users aged 18 to 20 may hold an account]. A parent or legal guardian may book a token for a child.

4. Acceptable use

You must not:

give false information, impersonate anyone or book tokens using someone else's mobile number without their permission;
book tokens you do not intend to use in order to block others, resell tokens, or manipulate a queue;
invite people as guests without their permission, or use the guest feature to send spam;
upload or send content that is unlawful, harmful, misleading, defamatory, obscene, offensive to public morals or religion, infringes someone's rights or privacy, or is otherwise prohibited under Kuwaiti law, including Law No. 63 of 2015 on Combating Information Technology Crimes;
upload medical records or other health details into TokenNo (the Service does not currently support them);
interfere with or try to break the Service, its security or other users' accounts, including by scraping, reverse engineering (except as allowed by law), or overloading our systems; or
use the Service in breach of any Kuwaiti law.

We may remove content, cancel tokens obtained through misuse, or suspend or close accounts that break these rules (see sections 19 and 29).

5. Messages

To run your token, we send service messages by push notification, SMS and WhatsApp (booking confirmations, call alerts, token number changes, cancellations, refunds and "booking is now open" alerts you asked for). SMS messages are sent through licensed Kuwaiti telecom operators in line with the rules of the Communication and Information Technology Regulatory Authority (CITRA) [counsel to confirm the current CITRA requirements, including sender ID registration and rules on unsolicited messages]. We do not send marketing messages without your consent. Message delivery depends on telecom operators, Meta (WhatsApp), Google and Apple, so we cannot guarantee that every message arrives on time.

6. Language and translation

You can use the Service in the language you choose. Vendor content (such as business and room names) is written by the vendor in one language and may be shown to you in an automatic translation. Translations may not be perfect; the vendor's original text is the reference.

These Terms are available in English and Urdu. The [Arabic/English] version prevails if there is any difference; the Urdu version is a translation provided for convenience. Until an Arabic version is published, the English version prevails. [Counsel to confirm: an Arabic version of these Terms is very likely required for consumers in Kuwait (Law No. 39 of 2014 on Consumer Protection), and the courts in Kuwait work in Arabic; when it is added it is expected to be the prevailing consumer text.]

7. Intellectual property

TokenNo owns the Service, its software, design, the TokenNo name and logo. We give you a limited, personal, non-exclusive, non-transferable right to use the Service under these Terms. You keep any rights you have in content you submit, and you give us a licence to use it as needed to run and improve the Service.

8. Availability and changes to the Service

We work to keep the Service available, but it may sometimes be interrupted for maintenance, updates or reasons beyond our control (for example network or provider outages). We may change, add or remove features. If we remove a feature that you have paid for, we will give a fair refund or alternative.

9. Limitation of liability

Nothing in these Terms limits any liability that cannot be limited under Kuwaiti law, including your rights as a consumer under Law No. 39 of 2014 on Consumer Protection and its Executive Regulations, and any liability for fraud or gross error that the Kuwaiti Civil Code (Decree-Law No. 67 of 1980) does not allow to be excluded.

Subject to that:

Waiting times, "your turn is near" alerts, distances and arrival estimates are estimates. Queues move faster or slower, and vendors can call, skip, push back or cancel tokens. TokenNo is not liable for losses caused by a vendor's decisions, by a vendor's services, or by delays you could not have avoided by using the Service.
TokenNo is not liable for indirect or consequential losses, such as loss of profit or opportunity.
For customers, our total liability to you for any claim related to the Service is limited to the amount you paid through TokenNo for the booking concerned, or [KWD amount] if you paid nothing [counsel to confirm the cap is enforceable against consumers under Kuwaiti law].
For vendors, the cap in section 31 applies.

10. Changes to these Terms

We may update these Terms. We will tell you about important changes in the app or by message at least [15] days before they take effect (or [30] days for changes to vendor fees), unless a change is required urgently by law. If you keep using the Service after a change takes effect, the new Terms apply. If you do not agree, you may stop using the Service and delete your account.

11. Governing law and disputes

These Terms are governed by the laws of the State of Kuwait.
Talk to us first. Please contact us (section 12) so we can try to resolve the issue.
Customers (consumers): you may also complain to the Ministry of Commerce and Industry (Consumer Protection) under Law No. 39 of 2014. Subject to your rights as a consumer, the competent courts of the State of Kuwait have jurisdiction [counsel to confirm the competent court].
Vendors: disputes are resolved as set out in section 33.

12. Customer support and complaints

Contact: [Customer complaints contact name]
Address: [TokenNo Gulf entity legal name], [registered address]
Email: info@tokenno.com (subject: "Complaint")
Phone: [contact phone]

You can also raise a complaint in the app under Help. We aim to acknowledge complaints within [2] working days and to resolve them within [14] days [counsel to confirm any timelines required under Law No. 39 of 2014 and its Executive Regulations]. Privacy questions go to the Privacy Officer named in the Privacy Policy.

PART B — TERMS FOR CUSTOMERS (HOSTS AND GUESTS)

13. Booking a token

When you book, you get a token number for a vendor's service point (for example a doctor's room, a counter or a table desk) and session. Token numbers restart at 1 each day for each service point.
One token covers your whole party. The host books one token for the party, up to the maximum party size the vendor allows.
Before you confirm, we show you the vendor, service point, session, party size, any amount payable (in Kuwaiti Dinars, including any fees) and the vendor's refund rule.
A token is a place in a queue. It is not a fixed appointment time unless the vendor says so. The vendor decides the order in which it serves people.
No-show. Your token counts as a no-show only if it was called, the "your number is called" alert was sent to you, and you did not arrive within the vendor's grace period (set by the vendor, at least [X] minutes). The vendor or you (as host) may then cancel the token, and the vendor's no-show rule applies (section 16).

14. Changes by the vendor: push back, cancellations and holidays

Push back. A vendor may move a token later in the queue. For example, if token 28 is pushed back to 31, then tokens 29, 30 and 31 each move up by one and the original 28 becomes 31. Everyone whose token number changes, and their guests, is told of their new number.
Limits on push back. A vendor can move a token at most [N] times, and never more than [N] places in total without your consent. The vendor's push-back policy is shown to you before you book.
Your right to cancel. If the vendor pushes your token back by more than [N places / X minutes], or materially changes your session or expected time, you may cancel with a 100% refund.
Cancellations and holidays. A vendor or doctor may cancel a single session, a whole slot or a day (for example a holiday at a location). All tokens in it are cancelled and every token holder and their guests are told.
If you paid in advance and the vendor cancels, you get a 100% refund (section 16).

15. Advance payments

Some vendors require payment when you book (in full, as a deposit, or per person). If so:

TokenNo collects the payment as merchant of record through a licensed payment gateway (in Kuwait, currently [Tap Payments — to be confirmed]), using methods such as KNET and credit or debit cards. The token is issued only after the payment succeeds.
Amounts are charged in Kuwaiti Dinars (KWD), shown to three decimal places (fils). The price shown is the total you pay, and any fees are shown before you pay. Kuwait does not currently apply value added tax (VAT); if a VAT or other consumption tax is introduced, prices will show it as the law requires [tax advisor to confirm].
The payment is for the vendor's service. The vendor is responsible for its service and for issuing any invoice or receipt it must issue for that service under Law No. 39 of 2014 [counsel to confirm who must issue the invoice to the customer when TokenNo is merchant of record, and whether it must be in Arabic].
Where a deposit is "adjusted in the bill", the vendor deducts it from your final bill.
Your card or KNET details are entered with the payment gateway; TokenNo does not see or store them.
If money is debited but your booking fails, the amount will be reversed automatically within [X working days] [counsel to confirm against the consumer law of Kuwait].

[Counsel to confirm: that the "TokenNo collects and pays out" model complies with the Central Bank of Kuwait's rules on electronic payment services (for example by using the gateway's marketplace or split-settlement product), and whether TokenNo needs its own licence or registration.]

16. Refunds

Vendor or doctor cancels (including a location holiday): 100% refund of what you paid for that token.
You cancel: the vendor's refund rule that applied when you booked is used. Vendors set their own rules (for example free cancellation until a certain number of hours before, a partial refund after that). Each rule has a version, and your token keeps the version you agreed to, so a later change by the vendor does not affect you.
No-show (as defined in section 13): the vendor's no-show rule that applied when you booked is used (for example the deposit may be kept). Any no-show charge is shown before you pay.
Large push back or session change: if you cancel because the vendor pushed your token back by more than [N places / X minutes] or materially changed your session, you get a 100% refund (section 14).
Guests: if you paid per person and a guest cancels, any refund for that person follows the same rule.
Refunds go back to the original payment method. We start the refund within [X working days] of the cancellation; your bank or card issuer may take [5–14] more working days to credit it [counsel to confirm timelines].

[Counsel to confirm: that vendor cancellation and no-show rules comply with Law No. 39 of 2014 on Consumer Protection and its Executive Regulations, including any consumer right to cancel or to a refund that cannot be limited.]

If you think a refund is wrong, contact us (section 12).

17. Guests

A host may invite guests by entering their mobile numbers or choosing them from the phone's contacts. The host must invite only people who know them and expect to hear about the visit. A host's confirmation is not by itself our legal basis for messaging a guest: our first message to each guest names TokenNo and the host, links our Privacy Policy and offers a one-tap "stop inviting me" option (see the Privacy Policy, section 3.5).
Guests receive the invitation by push, SMS or WhatsApp, with a link to see the token in the app or in a simple web page. Guests do not have to install the app.
A guest can say whether they are coming, and can leave the party at any time. The host can remove guests or hand over the host role.

18. Location sharing

Location sharing is optional and off by default. If you turn it on for an active token, the vendor and your host can see your distance or estimated arrival time, and you may be marked as "arrived" automatically when you reach the location. It stops automatically. See the Privacy Policy for details.

19. Suspension of customer accounts

We may suspend or close an account, or cancel tokens, if we reasonably believe it is being misused (section 4), if required by law, or to protect other users. Where possible we will tell you why and give you a chance to respond. If we cancel a prepaid token because of misuse, we tell you the reason and refund the amount you paid less any documented loss the misuse caused to the vendor, which will not exceed the vendor's no-show charge under the rule version you booked under [counsel to confirm against the consumer law of Kuwait, or refund 100%]. If we cancel for any reason that is not your fault, including by mistake or a system error, you get a 100% refund.

You can delete your account at any time in Profile.

PART C — TERMS FOR VENDORS (BUSINESSES)

These vendor terms apply in addition to Parts A and B (where relevant). "You" in Part C means the business that registers as a vendor, and the person accepting these Terms confirms they are authorised to bind it.

20. Onboarding, KYC verification and approval

You register in TokenNo Business and submit the identity and business documents we ask for in Kuwait (for example a valid commercial licence and commercial registration issued by the Ministry of Commerce and Industry, the authorised signatory certificate, the Kuwaiti Civil ID or passport of the owners and authorised signatories, proof of business address, bank account details (IBAN) with a Kuwaiti bank, tax details where you have them and, for clinics and hospitals, the relevant health facility licence from the Ministry of Health) ("KYC") [counsel and operations to confirm the Kuwait KYC document list].
We (and our verification providers) review your documents. We may approve or reject an application, or ask for more information. We do not have to give reasons where the law does not require it.
Once approved, you receive a payment link for your plan (or a free trial, if offered to you). Your business goes live after that.
You must keep your KYC, licence and bank details accurate and tell us of changes, including if your licence expires or is suspended. We may re-verify at any time, and may pause payouts until verification is complete.

21. Your account and your staff

You decide who in your business has access (for example owner, manager, receptionist, doctor) and what they can do. You are responsible for your staff's use of the Service.
You must remove access for staff who leave.
Numbers you enter. When your staff create a phone, walk-in, QR or kiosk token, or your system creates one through the Integration API, you must tell the person, at the time, that TokenNo will process their name and mobile number to manage their token and send them messages about it, and you must have a lawful basis for giving us their details.
You set up your locations, service points, schedules (including several slots in one day), holidays, maximum party sizes, payment requirements and refund rules. You are responsible for keeping them correct.

22. Plans, fees, commission and token packs

Pricing is set per country in the TokenNo admin and shown to you before you subscribe or buy. In Kuwait, fees are charged in Kuwaiti Dinars (KWD). Kuwait does not currently apply VAT; if a VAT or similar tax is introduced, it will be added at the applicable rate [tax advisor to confirm].
Fees may include:
- a subscription for your plan;
- a commission on advance payments collected through TokenNo (a percentage set for Kuwait or agreed with you);
- token packs: bundles of tokens with an expiry date. When a token is issued, it uses the oldest valid pack first. Unused tokens in an expired pack are not refundable [counsel to confirm]; and
- SMS and WhatsApp charges, which are billed separately to your messaging ledger at the prices shown in TokenNo Business.
Payment gateway fees are either charged to you or absorbed by TokenNo, as shown in your plan.
Free trials are offered at our discretion per vendor.
We may change fees with at least [30] days' notice. Changes apply from your next billing period.
Subscription fees already paid are not refundable, except where these Terms or the law say otherwise [counsel to confirm].
Retention and withholding. If Kuwaiti law requires you to retain or withhold any part of amounts you pay to TokenNo (for example under the Kuwaiti tax retention rules for payments to contractors), you must tell us before doing so and give us the official proof, and the parties will cooperate so that it is not applied twice [tax advisor to confirm whether any Kuwaiti retention or withholding applies to TokenNo's fees and commission].

23. Advance payments collected by TokenNo

If you require advance payment, TokenNo collects it from the customer as merchant of record through our payment gateway. We are responsible for the collection; you remain responsible for providing the service the customer paid for.
Funds are held and settled in line with the rules that apply to our payment gateway and the Central Bank of Kuwait [counsel to confirm].
You authorise TokenNo to collect payments for your services, deduct the amounts in section 24, and pay you the rest.

24. Weekly payouts

We pay out your balance weekly to your verified bank account in Kuwait, on the payout day for Kuwait (or the day agreed for your business), once your balance is above the minimum payout amount. Smaller balances roll over to the next week.
From each payout we deduct: our commission; refunds to customers; chargebacks and disputed payments; gateway fees (if you bear them); unpaid fees or messaging charges; and any taxes we must account for by law.
Taxes. You are responsible for your own taxes, Zakat and other levies on your services and income under Kuwaiti law. We will give you statements of the amounts collected, deducted and paid out. [Tax advisor to confirm: the tax treatment in Kuwait of advance payments collected by TokenNo as merchant of record and of TokenNo's commission, including Kuwaiti corporate income tax on foreign entities, and any invoicing requirements.]
If your balance becomes negative (for example after refunds or chargebacks), you must pay the shortfall, and we may recover it from future payouts.
We may hold payouts if we reasonably suspect fraud, if there is an unusually high level of refunds or disputes, if your KYC is incomplete, or if required by law.

25. Refund obligations

You must set a clear refund rule for customer cancellations and no-shows for each service point that takes advance payments. Each change creates a new version; tokens keep the version they were booked under, and you must honour it.
If you or your doctors cancel a session, slot or token, or a location holiday cancels it, the customer gets a 100% refund. Our commission on that payment is still payable and is recovered from your balance [counsel to confirm this is enforceable and fair].
Your rules must be fair, clearly stated and lawful, including under Law No. 39 of 2014 on Consumer Protection and its Executive Regulations. We may refuse or remove rules we consider unfair.
You must honour the push-back limits and the customer's right to a 100% refund after a large push back or session change (section 14), and you may apply a no-show rule only after the call alert was sent and your grace period of at least [X] minutes has passed (section 13). TokenNo's refund engine applies these rules automatically [product to confirm].
You must not ask customers to pay again outside TokenNo for a token already paid through TokenNo.

26. Your responsibilities for your services

You are solely responsible for the services you provide, including their quality, safety, pricing, licences and compliance with law (for example, for clinics and hospitals, the rules of the Ministry of Health and Law No. 70 of 2020 on the practice of the medical professions and patients' rights; for restaurants, the food safety rules of the Public Authority for Food and Nutrition and Kuwait Municipality) [counsel to confirm the citations].
You must treat customers fairly, use push back and cancellations in good faith, and not discriminate unlawfully.
Your content (business name, descriptions, room names, photos) must be accurate and lawful. You may correct automatic translations of your content.
You must handle complaints about your services and cooperate with us to resolve customer complaints.

27. Personal data and the Integration API

Data protection roles. TokenNo is the independent party responsible for the account and booking records held on the platform. You are a separate party responsible for your own service records and for any data you export through the Integration API or webhooks. The [Vendor Data-Sharing Addendum] (placeholder: link) forms part of these Terms and sets out each party's duties, including the limits on how you may use booking data you see in TokenNo. [Counsel to draft the addendum and confirm this model under the CITRA Regulation.]
Data protection. You and TokenNo each comply with the CITRA Data Privacy Protection Regulation (Resolution No. 26 of 2024), to the extent it applies, and Law No. 20 of 2014 on Electronic Transactions for the personal data each of you handles. Your customers' booking data is used to run your queue. You must use it only for providing your services and must not use it for marketing without the customer's consent. [Counsel to confirm whether a separate data processing agreement is needed and the roles of each party.]
No health data. In the current phase, you must not enter medical records, symptoms, diagnoses or other health details into TokenNo.
Integration API. If you connect your own systems (such as clinic software or a point-of-sale system) using API keys and webhooks:
- you must keep your API keys secret, give them only the scopes needed, and rotate or revoke them if they may have leaked. Keys are shown once; TokenNo stores only a hash;
- you are responsible for all calls made with your keys and for actions they perform (for example creating, calling or cancelling tokens);
- data sent to your systems is your responsibility. Once data leaves TokenNo through the API or webhooks, you are the one who must protect it, keep it secure, give any required notices and respect people's rights over it, including under the CITRA Regulation and any Ministry of Health rules if your system holds health records;
- you must verify webhook signatures, respect rate limits, and use test keys and sandbox data for testing; and
- we may revoke keys, limit access or change the API (with reasonable notice for breaking changes, except for security reasons).
Messages. SMS and WhatsApp messages for your bookings are sent through TokenNo's providers in line with CITRA rules and WhatsApp's policies [counsel and operations to confirm whose sender ID is registered with the Kuwaiti operators]. You must not use TokenNo to send marketing messages to customers without their consent.

28. Acceptable use for vendors

In addition to section 4, you must not:

create fake tokens or fake reviews, or manipulate queues to mislead customers;
charge customers for tokens outside the fees shown in TokenNo for the same token;
collect advance payments through TokenNo for services you do not intend to provide;
use customers' mobile numbers or other data for purposes not related to their booking; or
share your account or API keys with anyone outside your business.

29. Suspension and termination

We may suspend your account, your listings, API keys or payouts, with notice where possible, if you breach these Terms, fail KYC, your licence expires or is suspended, you have unpaid fees, you receive serious or repeated complaints, there are signs of fraud, or if the law requires.
We may terminate your account for serious or repeated breaches, or with [30] days' notice for any other reason.
You may terminate at any time in TokenNo Business or by writing to info@tokenno.com. Termination takes effect at the end of your current billing period.
On termination: you must still honour, or refund, tokens already booked and paid; we will pay out your remaining balance after deducting refunds, chargebacks and amounts owed (and after a reasonable holding period for disputes [counsel to confirm period]); and you can export your data for [30] days, after which we delete it as described in the Privacy Policy, except records we must keep by law.

30. Confidentiality

Each party will keep the other's non-public business information confidential and use it only for the Service, except where disclosure is required by law.

31. Vendor liability and indemnity

To the extent allowed by Kuwaiti law, TokenNo's total liability to you in any 12-month period is limited to the fees you paid to TokenNo in that period (excluding amounts collected for your services and paid out to you).
TokenNo is not liable for your lost profits, lost business or indirect losses, or for failures of telecom operators, payment gateways, app stores or other third parties beyond our reasonable control.
You will indemnify TokenNo against claims, penalties and losses arising from your services, your content, your breach of these Terms or of law, and your handling of personal data (including data sent to your systems through the Integration API).

[Counsel to confirm the enforceability of these limitations and the indemnity under the Kuwaiti Civil Code (Decree-Law No. 67 of 1980) and the Commercial Code (Decree-Law No. 68 of 1980).]

32. Publicity

We may name your business as a TokenNo customer in our marketing unless you tell us not to. We will not use your logo without your permission.

33. Disputes between vendors and TokenNo

These Terms are governed by the laws of the State of Kuwait.
The parties will first try to resolve a dispute by good-faith discussion for [30] days.
If not resolved, the dispute will be finally settled by arbitration under the rules of the Kuwait Commercial Arbitration Centre of the Kuwait Chamber of Commerce and Industry, by a sole arbitrator, in line with the arbitration provisions of the Code of Civil and Commercial Procedure (Decree-Law No. 38 of 1980). The seat will be Kuwait City, Kuwait, and the language will be English [counsel to confirm the arbitral institution, the applicable arbitration law, the seat and the language, and the formalities needed for a valid arbitration agreement with a company].
Subject to this, the competent courts of the State of Kuwait have jurisdiction, including for interim relief and enforcement [counsel to confirm the competent court].

34. Contact

[TokenNo Gulf entity legal name] [registered address] Email: info@tokenno.com