Privacy notice
Draft for review by UAE counsel. Last updated: [date].
This notice explains what personal data MyFareej collects, why, who can see it, where it is stored and the rights you have under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).
Who we are
MyFareej is operated by [Operator legal name], [trade licence number], [registered address] ("we"). For anything about your data, contact [privacy contact email].
What we collect
| Data | When | Why |
|---|---|---|
| Your name in English and Arabic, email, mobile number and password | When you sign up | To create your account and let your community's team confirm who you are |
| Your home sub-community and, where your community asks for it, your unit or villa number | When you sign up or move home | To place you in the right community and let its team check you live there |
| Posts, comments, photos, likes, saved posts, follows and event RSVPs | When you use the app | To run the service you asked for |
| What you add to your profile page: a photo, a few words about you, interests and a LinkedIn profile, and who sees each detail | When you add them | To let neighbours you choose know you; contact details and your unit stay private unless you share them |
| The people you mention with @ in posts and comments | When you mention them | To link their names to their profiles and tell them |
| An address for each browser where you turn notifications on | When you turn them on | To show your notifications on that phone or computer; it is forgotten when you turn them off, sign out there or delete your account |
| The forum groups you join | When you join one | To show you their posts and let you write in them; other residents see how many members a group has, not who they are |
| Notifications and what you have read | As things happen | To show you what is new |
| Questions you ask the concierge | When you use it | To answer them; we keep only the time, length and cost of each question, not the text |
| What an AI app you connected asks for (FS-49) | When it asks | To answer it, as you; we keep only the tool used, the time and whether it worked, not the content |
| The text of posts and events you write in only one language | When you publish or edit them | To translate them into the other language, marked as a translation; your community can switch this off |
| Sign-in times, device and browser type, pages visited and errors | When you use the app | To keep the service secure and working, and to measure how it is used (first-party only; no third-party trackers or advertising) |
We do not sell your data and we do not use it for advertising.
AI apps you connect
You can connect an AI app that supports MCP, such as Claude, to your account. It reads what you can see in MyFareej, as you: your feed, events, groups and notifications, and if you are an admin or community manager, the console for your places. It cannot post or change anything, and it never receives anyone's email address, phone number or unit number, yours included. What it reads goes to that app's provider, under your agreement with them, not ours. You can disconnect it at any time under Profile → AI assistants.
Who can see what
- Everyone in places you share sees your name, your home sub-community, and what you post or comment.
- Your profile page shows every member your name, your home, your community and any admin or community manager role. Your photo, about, interests, LinkedIn profile, mobile number, email and unit number appear only to the audience you choose for each: only you, your sub-community, your community or everyone on MyFareej. Your mobile number, email and unit number start as only you.
- Your community's admins and community managers also see your email, mobile number and unit number, so they can confirm requests and contact you about your account. They see your data only for the places they look after.
- The MyFareej team can access data to run, secure and support the service.
- Private events are seen only by the people the organiser chose.
Where your data is processed
| Service provider | What it does | Where |
|---|---|---|
| Supabase | Database, sign-in, file storage and live updates | India (Mumbai) |
| Vercel | Hosting of the app | India (Mumbai), with static files served from locations worldwide |
| [email provider] | Sending account emails | [location] |
| Anthropic | Answering concierge questions and translating posts and events | Outside the UAE |
| Your browser's push service (Google, Apple, Mozilla or Microsoft) | Delivering the browser notifications you turned on; each is encrypted, so the service cannot read it | Depends on your browser |
These transfers rely on [contractual safeguards / other basis, to be confirmed by counsel]. Each provider processes data only on our instructions under a data processing agreement.
How long we keep it
- While your account is active, we keep your profile and content.
- If your request to join is refused, we delete the details you gave us.
- If you delete your account, or a community admin removes you, we delete your profile, profile page and photo, posts, comments, likes, saved posts and RSVPs within 30 days. Your name is replaced with "Deleted user" in records of staff decisions.
- Notifications are deleted after 90 days.
- Records of staff decisions (the audit log) are kept for [audit log retention].
- Backups are kept for [backup retention].
Your rights
You can:
- see and download your data at any time from Profile › Download a copy of my data;
- correct your names, phone number and unit number in your profile;
- delete your account from Profile › Delete my account;
- withdraw consent where we rely on it, and object to processing;
- complain to the UAE Data Office.
We answer requests made to [privacy contact email] within 30 days.
Security
Passwords are stored only in hashed form; every request is checked against your access rights by the database; data is encrypted in transit; and staff actions are logged.
Age
You must be at least [minimum age] years old to create an account.
Changes
If we change this notice in a way that matters, we will tell you in the app before the change takes effect.