App Development Company in Saudi Arabia: Building for mada, PDPL and ZATCA (Prices in SAR)

Most guides to hiring app developers in Riyadh or Jeddah talk about portfolios and price. Those matter, but in Saudi Arabia there's a second test: does the team understand the rules and habits your app has to live with? Payments run on mada, personal data falls under a law that is now enforced, invoicing systems sit inside ZATCA's e-invoicing rollout, and some app categories need a license before they can operate at all.

This page is written for founders and managers commissioning an app or system for the Saudi market, including foreign companies entering the Kingdom. It covers what your developer must get right, what it costs in riyals, and when a remote studio like Q Studio is the right call.

Start with what kind of project you have

The Saudi-specific work differs a lot by project type. Find yours first.

Payments: mada is not optional

Most Saudi shoppers pay with mada debit cards and Apple Pay, which runs on top of mada for many users. A checkout that only accepts international Visa and Mastercard will lose a large share of buyers. Your app needs a Saudi gateway that supports mada, such as Moyasar, HyperPay, Tap or PayTabs, with prices in SAR.

Two practical points that often get missed:

• The gateway account is opened by your business, in its name, with its commercial registration. Approval can take days or weeks, so apply while the app is being built, not after.
• Refunds, partial payments and cash on delivery need to be designed into the order flow from the start. Bolting them on later is where many store apps break.

The PDPL is enforced, including for foreign companies

Saudi Arabia's Personal Data Protection Law became enforceable on 14 September 2024, after a one-year grace period, and is supervised by SDAIA. It applies to organizations outside the Kingdom too when they process the personal data of people in Saudi Arabia.

For an app, that translates into concrete build work:

• A clear privacy policy in Arabic, shown before data is collected.
• Consent where it's needed, and collecting only the data the feature requires.
• A way for users to see, correct and delete their data.
• Knowing where every piece of personal data is stored, and checking cross-border transfer rules if your servers are outside the Kingdom.

We build these into the app, but the legal assessment of your obligations belongs with your lawyer or compliance adviser. A good developer can tell you exactly where the data lives so that assessment is easy.

ZATCA e-invoicing for sales and invoicing systems

If you're commissioning a POS, a sales system or anything that issues tax invoices, ask about e-invoicing on day one. ZATCA is bringing businesses into Phase 2 (integration with the Fatoora platform) in waves. Wave 24 covered taxpayers with VAT-taxable turnover above SAR 375,000 by 30 June 2026, and Wave 25 extends it to turnover above SAR 187,500 by 1 February 2027. Further waves are expected.

Phase 2 involves invoice formats, cryptographic stamps, QR codes and real-time reporting to ZATCA. For most small and mid-sized businesses the sensible route is to connect your custom system to an established ZATCA-compliant e-invoicing solution or accounting system, rather than building and certifying the whole integration yourself. Any developer you hire should be able to explain which route they'd take and why. A company website, a booking app or a catalogue app doesn't need any of this.

Licensed activities: check before you build

Some app categories are regulated as activities, not just as software. Delivery apps and ride-hailing platforms in the Kingdom need licenses from the Transport General Authority, and the TGA requires licensed platforms to connect their systems to its electronic platform. The rules change, so confirm the current requirements before you spend on development. We cover this in more detail on our delivery app and ride-hailing app pages.

Arabic first, and publishing under your company

Saudi users notice at once when Arabic is an afterthought: mirrored icons pointing the wrong way, broken mixed text, machine-translated labels. Build the Arabic interface first and add English as the second language if you need it.

To publish under your company name on the App Store you need an Apple Developer organization account, which requires a D-U-N-S number for your establishment. Google Play organization accounts require one too. Fees are paid by you: $99 a year for Apple, $25 once for Google.

Prices in SAR

We price in US dollars; the riyal figures are approximate.

Third-party costs such as the payment gateway, an e-invoicing provider, SMS and hosting are paid by you directly, in your name. Our Saudi app development cost guide breaks these down.

Proof you can check

• Verkan Stone: a Saudi marble and granite company site with a project gallery, in Arabic and English.
• DriveX: a ride-hailing and delivery platform in Egypt, with rider and captain apps live on the App Store and Google Play.
• Lawh Academy: a Quran and Arabic e-learning platform with student and tutor apps and session booking.

When we fit, and when you should choose someone else

We fit well if you want an Arabic-first website, an MVP, a booking or delivery app, or a custom business system, delivered in weeks with a fixed price, milestone payments and everything registered in your name. We're in Cairo time, the same as Riyadh for much of the year and an hour behind in winter, so you reach us during your working day.

Choose another option if:

• The project is a government tender that requires a Saudi-registered company or a team inside the Kingdom.
• You need a fully certified e-invoicing product built from scratch. That's specialist work; use an established provider and let us integrate it.
• You only need a small store. Salla or Zid may serve you better at a lower monthly cost.
• The business isn't Sharia-compliant. We don't build for gambling, crypto trading or interest-based lending.

FAQ

Does my app need to comply with the PDPL if my company is outside Saudi Arabia?

If it processes personal data of people in Saudi Arabia, the law can apply to you even from abroad. Get a short legal review of your case. On the build side, we add the privacy notice, consent, data access and deletion features, and document where data is stored.

Can you integrate ZATCA e-invoicing into a custom system?

We build the sales or invoicing system and connect it to a ZATCA-compliant e-invoicing solution or accounting platform that you choose. We don't sell our own certified e-invoicing product, and we'd advise against building one from scratch for a single business.

Should my servers be in Saudi Arabia?

Not always, but it depends on your sector and the data you hold. Cross-border transfers are allowed under conditions set by SDAIA's regulations. We decide hosting with you at the scoping stage, based on your adviser's view.

Do you work with companies in Dammam, Jeddah and smaller cities?

Yes. We work remotely, so your city doesn't change the process or the price. Everything runs over WhatsApp and video calls.

How long does it take to get a first version?

You see a working preview on your phone within 72 hours of the scope being approved. An app MVP usually takes 2 to 6 weeks, plus a few days for App Store and Google Play review.

How do I get a quote?

Send a short description on WhatsApp or use the project planner. You'll get a written scope, timeline and fixed price within 24 hours, at no cost.