Privacy Policy

This Privacy Policy explains how personal information is collected, used, stored, processed and protected when users access or interact with the Platform, including its website, applications, interactive maps, destination information and associated features (collectively referred to as the “Service”). The Platform is committed to respecting user privacy and handling personal information responsibly, transparently and in accordance with applicable data protection legislation. By accessing or using the Service, users acknowledge the data processing practices described in this Privacy Policy. Where consent is required by applicable law, the Platform will request such consent separately. Use of the Service does not, by itself, constitute consent to every form of personal data processing.

Information Collected

The Platform may collect and process personal information necessary to provide, maintain, secure and improve the Service. The categories of information processed may include the following.

Account Information

When users register for or access an account, the Platform may collect:

Name and email address.
Profile information and preferences.
Account identifiers.
Authentication provider information.
Account creation and modification dates.

Where users authenticate through third-party providers, such as Google or Microsoft, the Platform may receive account information authorised through the relevant authentication service. The Platform does not require access to users’ third-party account passwords.

Location Information

The Service may request access to a device’s geographical location to support interactive maps, nearby destination discovery and location-based functionality. Location information may include:

Geographical coordinates.
Device positioning information.
Location accuracy indicators.
Information necessary to display the user’s position on a map.

Access to device location services is subject to the permissions granted by the user. Users may withdraw location permissions through their device or browser settings. Disabling location access may limit certain features but does not necessarily prevent access to the remainder of the Service. The Platform does not require continuous background location tracking for its core destination discovery functionality.

Destination and Activity Information

The Platform may process information associated with users’ interactions with destinations and other Service features, including:

Favourite destinations.
Completed destinations.
Personal destination lists.
Notes and ratings.
Saved preferences and filters.
Records of destination-related actions.

This information is used to provide personalised account functionality and maintain users’ saved records. A destination marked as completed represents information recorded through the Service and does not necessarily constitute independently verified evidence of a physical visit.

Subscription and Payment Information

Where users purchase subscriptions, the Platform may process:

Subscription identifiers.
Subscription status and billing periods.
Payment-related transaction references.
Renewal and cancellation preferences.
Information necessary to administer subscription access.

Payments may be processed through independent third-party payment providers. The Platform does not ordinarily store complete payment card numbers or card security codes. Payment providers may process additional financial and transaction information in accordance with their own privacy policies and applicable legal requirements.

Technical and Usage Information

When users access the Service, certain technical information may be collected automatically, including:

Internet Protocol addresses.
Browser and device characteristics.
Operating system information.
Access dates and times.
Requested pages and features.
Application errors and diagnostic information.
Authentication and security events.
Service interaction records.

Such information may be used to maintain functionality, diagnose technical issues, prevent misuse and improve the reliability of the Service.

Communications

Where users contact the Platform through official support channels, the Platform may process the information voluntarily provided, including contact details, enquiries, feedback and related correspondence. This information is used to respond to requests, provide assistance and maintain appropriate communication records.

Purposes of Processing

Personal information may be processed for the following purposes:

Creating, authenticating and managing user accounts.
Providing access to destinations, maps and Service features.
Maintaining favourites, completed destinations and personal lists.
Displaying location-based information where permission has been granted.
Managing subscriptions, renewals, cancellations and payments.
Remembering language, appearance and other preferences.
Maintaining the security and integrity of the Service.
Preventing fraud, unauthorised access and misuse.
Diagnosing errors and improving performance.
Responding to enquiries and support requests.
Complying with applicable legal and regulatory obligations.

Personal information will not be processed for materially unrelated purposes without an appropriate lawful basis and any notice or consent required by applicable law.

Legal Basis for Processing

The Platform processes personal information only where an appropriate legal basis exists under applicable data protection legislation. Depending on the circumstances and the relevant legal requirements, processing may be necessary for:

Providing the Service or fulfilling contractual obligations.
Complying with legal and regulatory requirements.
Protecting the security and integrity of accounts and systems.
Pursuing legitimate operational interests where recognised and permitted by applicable law.
Processing information with the user’s valid consent.
Establishing, exercising or defending legal rights where permitted.

Where processing relies upon consent, users may withdraw that consent through the relevant settings or available communication channels. Withdrawal of consent does not affect the lawfulness of processing undertaken before withdrawal.

Location Data and Geographical Privacy

Location information is particularly relevant to the Service because its functionality involves interactive maps and geographical destinations. Where users grant location permission, the Service may use device coordinates to display their position, centre the map or support relevant geographical features. The Platform does not treat the granting of location permission as authorisation to collect location information for unrelated purposes. Precise location information will not be sold to advertisers. The Platform does not disclose an individual user’s live location publicly as part of its standard destination discovery functionality. Users should be aware that saving destinations, recording completed visits or creating personal lists may reveal information about their interests, activities or movements. Such records are associated with the relevant account and are processed in accordance with this Privacy Policy.

Cookies & Similar Technologies

The Service may use cookies and similar technologies to maintain functionality and remember user preferences. These technologies may support:

Authentication and session management.
Language preferences.
Appearance and theme settings.
Security and fraud prevention.
Essential application functionality.

Where optional analytics or other non-essential technologies are introduced, the Platform will provide any notices and consent controls required by applicable law. Users may manage cookies through their browser settings. Disabling essential cookies may prevent certain features, including account authentication, from functioning correctly.

Third-Party Services and Providers

The Platform may rely upon third-party service providers to support its operations. Such providers may include:

Mapping and geographical data providers.
Authentication services.
Payment processors.
Cloud hosting and storage providers.
Infrastructure and security providers.
Technical support and diagnostic services.

These providers may process personal information where necessary to deliver their respective services. The Platform seeks to limit information shared with service providers to what is reasonably necessary for the relevant purpose. Where required, appropriate contractual, organisational and technical safeguards will be implemented. Third-party providers may also process information independently under their own privacy policies where they act as separate data controllers.

Disclosure of Personal Information

The Platform does not sell personal information. Personal information may be disclosed in the following circumstances:

To authorised service providers supporting the operation of the Service.
To payment processors for subscription administration.
To authentication providers where necessary for account access.
To competent authorities where disclosure is required by applicable law.
To protect legal rights, investigate fraud or address security incidents where legally permitted.
In connection with a lawful corporate restructuring, merger or transfer of business assets, subject to applicable data protection requirements.

The Platform does not make users’ private destination lists, personal notes or account information publicly accessible as part of its standard functionality.

International Data Transfers

The Service may rely upon infrastructure or third-party providers operating outside the United Arab Emirates. Consequently, personal information may be processed or stored in jurisdictions other than the user’s country of residence. Where international transfers occur, the Platform will seek to ensure that appropriate safeguards and lawful transfer mechanisms are applied in accordance with applicable data protection legislation. Such safeguards may include contractual protections, recognised transfer mechanisms or other measures permitted by law.

Data Storage and Retention

Personal information is retained only for as long as reasonably necessary to fulfil the purposes described in this Privacy Policy or to comply with applicable legal obligations. Retention periods may vary depending on the nature of the information, the purpose of processing and relevant regulatory requirements. Account information and saved destination records may be retained while an account remains active. Subscription and transaction records may be retained where necessary for accounting, financial reporting, dispute resolution or legal compliance. Security and diagnostic records may be retained for periods reasonably necessary to investigate incidents, maintain system integrity and prevent misuse. When information is no longer required, it will be deleted, anonymised or otherwise handled in accordance with applicable law.

Data Security

The Platform implements reasonable technical and organisational measures intended to protect personal information against unauthorised access, disclosure, alteration, loss or destruction. Such measures may include:

Secure authentication mechanisms.
Access controls and permission restrictions.
Encrypted communications.
Security monitoring and diagnostic procedures.
Appropriate safeguards for stored information.
Restrictions on access to personal data.

Although reasonable precautions are taken, no internet-based service or electronic storage system can guarantee absolute security. Users are responsible for maintaining the confidentiality of their account credentials and reporting suspected unauthorised access through the available support channels.

User Rights

Subject to applicable data protection legislation, users may have the right to:

Request information about the processing of their personal data.
Obtain access to personal information held about them.
Request correction of inaccurate or incomplete information.
Request deletion of personal information in qualifying circumstances.
Request restriction or cessation of certain processing activities.
Withdraw consent where processing relies upon consent.
Object to certain processing activities where applicable.
Request the transfer of personal information where legally supported.
Submit complaints to the relevant data protection authorities.

These rights may be subject to lawful exceptions, verification requirements and applicable retention obligations. Requests may be submitted through the official support and contact channels provided within the Service.

Account Deletion

Users may request deletion of their accounts through the available account management or support procedures. Following a valid deletion request, the Platform will take appropriate steps to delete or anonymise personal information associated with the account, subject to applicable legal requirements. Certain information may need to be retained for legitimate purposes, including compliance with financial regulations, prevention of fraud, resolution of disputes or fulfilment of legal obligations. Account deletion may permanently remove access to saved destinations, personal lists, preferences and subscription-related functionality. Deleting an account does not automatically entitle a user to a refund of subscription payments, except where required by applicable law or the relevant subscription terms.

Children's Privacy

The Service is intended for individuals who possess the legal capacity to use it in accordance with applicable law. The Platform does not knowingly collect personal information from children in circumstances where such collection would be unlawful or require parental authorisation that has not been obtained. Where the Platform becomes aware that personal information has been collected contrary to applicable child protection or data protection requirements, appropriate steps will be taken to restrict processing or delete the information. Parents or legal guardians may raise concerns through the official support channels.

Marketing Communications

The Platform may provide information about Service updates, new features, destinations or promotional offerings. Marketing communications requiring consent will be sent only where an appropriate lawful basis exists and applicable requirements have been satisfied. Users may withdraw consent or opt out of optional marketing communications through the available preferences or unsubscribe mechanisms. Essential communications relating to account security, subscription administration, legal notices or important Service changes may continue where necessary and lawful.

Automated Processing and Personalisation

The Service may use automated processes to organise destination information, apply user-selected filters, display relevant geographical content and maintain personalised account features. Such processing is intended to support the functionality of the Service. The Platform does not use these features to make solely automated decisions producing legal or similarly significant effects upon users as part of its standard functionality. Where materially different automated decision-making practices are introduced, appropriate information and safeguards will be provided in accordance with applicable law.

External Websites and Services

The Service may contain links to external websites, mapping resources or third-party services. The Platform does not control the privacy practices, security measures or content of independently operated external websites. Users are encouraged to review the privacy policies of external services before providing personal information. This Privacy Policy does not govern independent processing activities conducted by third parties outside the Platform’s control.

Changes to This Privacy Policy

The Platform may revise this Privacy Policy to reflect changes in its operations, technologies, information processing practices or applicable legislation. The current version will be made available through the Service, together with the date of its most recent revision. Where required by applicable law, users will receive appropriate notice of material changes. If a change introduces processing that requires additional consent, the Platform will seek that consent before undertaking the relevant processing.

Applicable Law

This Privacy Policy shall be interpreted in accordance with applicable data protection and privacy legislation of the United Arab Emirates. Where other mandatory data protection laws apply to particular users or processing activities, the Platform will comply with the relevant legal requirements. Nothing in this Privacy Policy is intended to restrict rights or protections that cannot lawfully be excluded.