1. Data Controller
The data controller is Al Izn, headquartered in the United Arab Emirates. All data processing occurs on IZN AI's private servers in the UAE. For data-protection enquiries contact our Data Protection Officer: dpo@al-izn.com.
2. What We Collect
Account data
- Name, email address, phone number (for registration and verification)
- Profile photo (optional)
- Professional skills and bio (optional, for Directory listing)
- Subscription plan (billing handled by Stripe — we do not store card numbers)
Usage data
- AI conversation history (encrypted per user; provides context in future sessions)
- App feature usage logs (aggregated, for service improvement)
- Device type and OS version (for compatibility)
Content you create
- Notes, tasks, calendar events, polls — encrypted, accessible only to you
- Documents in My AI Knowledge (RAG) — isolated per-user vector store
- Ledger entries and evidence records — encrypted, owner-only access
- Chat messages — end-to-end encrypted; our servers cannot read content
Location data (optional)
- Coarse location for Nearby Connect and Social features — only when you enable these
- Background location for geofencing safety alerts — only when Life Guardian is active
3. How We Use Your Data
- Service delivery: AI responses, mediation, document generation, and all in-app features
- AI processing: All computations run on IZN AI's private Ollama-powered servers. No data is sent to any third-party AI provider
- Personalisation: Conversation history improves AI response quality for your specific context
- Safety alerts: Wellbeing and Life Guardian features send push notifications based on patterns you configure
- Legal compliance: Certain records (ledger, contracts) are retained as required by UAE commercial law
4. Data Storage and Security
- Encryption at rest (AES-256) and in transit (TLS 1.3)
- End-to-end encryption for all P2P chat messages
- JWT-based authentication (7-day access tokens, 30-day refresh tokens)
- Optional device-side biometric authentication
- Isolated per-user vector stores for RAG documents
- No cross-user data access by architecture
5. Data Retention
- Account data: retained while active; deleted within 30 days of verified deletion request
- AI conversation history: 12 months by default; you may delete at any time from Settings
- Chat messages: 90 days; you may delete individual conversations at any time
- Financial ledger: 7 years (UAE Federal Law No. 2 of 2015 on Commercial Companies)
- Evidence vault: retained until you delete records
6. Third-Party Sharing
We do not sell your data. We do not share with advertisers. Limited sharing occurs only for:
- Payment processing: Stripe handles billing (PCI-DSS compliant)
- Email delivery: Transactional emails via our authorised SMTP provider. No marketing without explicit consent
- Legal obligations: Disclosure in response to a lawful UAE court order or TDRA regulatory requirement
- Directory profiles: Information you designate as public in your Directory listing is visible to other verified IZN AI users
7. Your Rights — UAE PDPL
Under UAE Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law) you have the right to:
- Access: Request a copy of the personal data we hold
- Correction: Request correction of inaccurate data
- Deletion: Request deletion (subject to legal retention obligations)
- Portability: Receive your data in a structured, machine-readable format
- Withdrawal of consent: Withdraw any optional consent at any time via Settings → Consent
- Objection: Object to processing beyond service delivery
To exercise any right email dpo@al-izn.com. We respond within 30 days.
8. EU Users — GDPR
If you access IZN AI from the European Union, your data may be transferred to and processed in the UAE. IZN AI relies on Standard Contractual Clauses (SCCs) as the lawful transfer mechanism. EU users hold all GDPR rights in addition to UAE PDPL rights.
9. Cookies
al-izn.com uses only essential session cookies for authentication and preference storage. No advertising trackers or third-party analytics cookies. See our Cookie Policy.
10. Children
IZN AI is not directed at children under 16. If you believe a child has provided personal data, contact legal@al-izn.com for immediate deletion.
11. Policy Updates
We will email registered users at least 14 days before any material change. The current policy is always at al-izn.com/privacy.html. Continued use after the effective date constitutes acceptance.