Privacy Policy

Welcome to IJAAR ("we", "us", or "our"). IJAAR is a UAE-based real estate platform that connects tenants, landlords, and real estate agents to list properties, place bids, find roommates, and communicate in one place.

This Privacy Policy explains what personal data we collect, why we collect it, the legal basis under which we process it, and what rights you have under applicable UAE law. By using the IJAAR mobile application you agree to the practices described below.

1 Minimum Data We Collect

In line with the data minimisation principle of the UAE PDPL (Article 9), we limit collection to what is directly required for each feature. Here is exactly what we collect and why each field is needed:

Full breakdown by category:

Phone number is optional and only requested if you choose to display it publicly on a listing. We do not require it to create an account.

2 How We Use Your Data

We use the information we collect exclusively to:

• Create and manage your account and authenticate you securely.
• Display your property listings on the map and in search results.
• Process and notify parties about bids, bid status changes, and property claims.
• Enable in-app chat between tenants, landlords, agents, and potential roommates so they can contact each other directly.
• Send push notifications about new messages, bid updates, and matching alerts.
• Match roommate requests based on location, budget, and preferences.
• Deliver broadcast requests from customers to nearby agents.
• Improve app performance, fix bugs, and develop new features.
• Comply with applicable UAE laws and regulations and resolve disputes.

We do not use your data for advertising, profiling for marketing purposes, or any automated decision-making that produces legal effects on you.

3 Legal Basis for Processing (UAE PDPL)

Under the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, we process your personal data on the following legal grounds:

Where we rely on your consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4 Data Sharing

We do not sell your personal information. We share data only in these limited and necessary situations:

• Between users on the platform: Your display name, profile photo, and listing details are visible to other users as strictly required to enable contact and complete transactions (e.g. a landlord sees the bidder's name; an agent sees a broadcast request from a tenant).
• Firebase / Google: Our backend infrastructure (authentication, database, storage, push notifications) is powered by Google Firebase. Data is processed under Google's data processing terms and Google's commitments under applicable data protection law.
• Legal requirements: We may disclose data when required by UAE law, a court order issued by a UAE court, or a directive from a UAE regulatory authority; or to protect the safety of users and the public.

5 Firebase & Third-Party Services

IJAAR is built on the following Google Firebase services:

• Firebase Auth — secure email/password authentication; we never store raw passwords
• Cloud Firestore — real-time database for listings, bids, chats
• Firebase Storage — storing property and profile images
• Firebase Cloud Messaging — push notifications
• Firebase App Check — protecting our backend from abuse
• Google Maps SDK — interactive property map

Each service is governed by Google's Privacy Policy and Firebase Data Processing Terms.

Google maintains data centre infrastructure in multiple regions. Where data is processed outside the UAE, we rely on Google's standard contractual commitments which provide an equivalent level of protection consistent with UAE PDPL requirements.

6 Data Retention

We retain your data for the minimum period necessary to fulfil the purpose for which it was collected, and no longer:

You may request deletion of your account and all associated personal data at any time by contacting us (see Section 12). We will complete deletion within 30 days unless retention is required by UAE law.

7 Security

We apply appropriate technical and organisational measures to protect your personal data as required by Article 16 of the UAE PDPL:

• All data in transit is encrypted via HTTPS / TLS.
• Firebase Authentication manages credentials — we never store raw passwords.
• Firestore Security Rules enforce that users can only read and write their own data.
• Firebase Storage Rules restrict image access to authorised users.
• Firebase App Check blocks unauthorised API access from non-genuine app instances.
• Access to production data is restricted to authorised personnel only.

8 Your Rights Under UAE PDPL

Under the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection, you have the following rights regarding your personal data:

• Right of Access (Article 7) — request a copy of the personal data we hold about you.
• Right to Correction (Article 9) — request correction of inaccurate or incomplete data.
• Right to Erasure (Article 10) — request deletion of your personal data where it is no longer necessary for the purpose it was collected.
• Right to Restrict Processing (Article 11) — request that we limit processing of your data in certain circumstances.
• Right to Data Portability (Article 12) — receive your data in a structured, commonly used, machine-readable format.
• Right to Object (Article 13) — object to processing based on legitimate interest.
• Right to Withdraw Consent — revoke location or notification permissions at any time via your device settings without affecting prior processing.

9 Children's Privacy

IJAAR is a real estate platform intended for adults. In accordance with UAE law, we do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us immediately at privacy@ijaar.app and we will promptly delete it.

10 Cross-Border Data Transfers

Our backend infrastructure (Google Firebase) may process data on servers located outside the UAE. In accordance with Article 22 of the UAE PDPL, we ensure that any cross-border transfer of personal data is subject to appropriate safeguards, including:

• Google's standard contractual clauses and data processing addendums.
• Transfers only to countries or processors providing an equivalent level of data protection as required by the UAE PDPL and the UAE Data Office.

By using IJAAR, you acknowledge that your data may be transferred to and processed in countries other than the UAE, subject to these safeguards.

11 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable UAE law. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Send an in-app notification to active users at least 14 days before the change takes effect.
• Where required by the UAE PDPL, obtain fresh consent for any new processing activities.

Continued use of the app after changes take effect constitutes acceptance of the updated policy.

12 Contact & Data Controller

IJAAR acts as the Data Controller for personal data processed through the platform as defined under the UAE PDPL.

If you have questions, concerns, or requests about this Privacy Policy, your personal data, or wish to exercise your rights under the UAE PDPL, please contact our Privacy team: