# Privacy Policy for Alaan AI

**Last Updated: May 7, 2026**

## 1. Introduction

Alaan AI ("we," "our," "us," or "Company") operates the Alaan AI mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and otherwise handle your information when you use our mobile application available on iOS and Android platforms, as well as our related websites and online services (collectively, the "Service").

We are committed to protecting your privacy and ensuring you have a positive experience on our App. Please read this Privacy Policy carefully. If you do not agree with our practices, please do not use our Service.

## 2. Information We Collect

### 2.1 Information You Provide Directly

**User Account Information**: When you create an account, we collect information such as:
- Email address
- Password (encrypted)
- Username or profile name
- Phone number
- Profile picture or avatar (optional)
- Language preference

**Communication Data**: We collect and process:
- Messages and prompts you send to our AI service
- Conversation history stored on our servers
- Feedback, reviews, and support requests you submit

**Image and Media Data**: When you use image-related features:
- Images you upload or capture through the App
- Photos you choose to process or analyze
- Media files you share for processing

**Payment Information**: For subscription purchases:
- Transaction details and receipt information
- Payment method information (processed by third-party payment providers)
- Subscription status and billing history

**Support Communications**: When you contact our support team:
- Your email address and messages
- Device information you provide
- Screenshots or error logs you share

### 2.2 Information Collected Automatically

**Device Information**: We automatically collect:
- Device type and model
- Operating system and version
- Unique device identifiers (IDFA on iOS, Android Advertising ID)
- Mobile network information
- Device language and timezone settings

**Usage Information**: We collect data about how you use the App:
- Features accessed and frequency of use
- Time spent on different features
- Crash reports and error logs
- App performance metrics
- Search queries and preferences

**Location Information**: With your permission:
- Approximate location (city/region level) for service personalization
- We do not collect precise GPS coordinates

**Network Information**:
- IP address
- Internet service provider
- Pages or features accessed
- Referring/exit pages

## 3. How We Use Your Information

We use the collected information for the following purposes:

### 3.1 Service Delivery
- To provide, maintain, and improve the App and Services
- To process and fulfill your requests
- To deliver AI-powered features and functionality
- To generate responses to your queries

### 3.2 Communication
- To send you service-related announcements
- To respond to your inquiries and support requests
- To send updates about new features or policy changes
- To send promotional materials (only with your consent)

### 3.3 Account Management
- To create and maintain your user account
- To authenticate your identity
- To manage your subscription and billing
- To recover lost passwords

### 3.4 Analytics and Improvement
- To analyze usage patterns and trends
- To improve our Services and user experience
- To develop new features and services
- To conduct research and generate insights

### 3.5 Security and Legal Compliance
- To detect, prevent, and address fraud and abuse
- To protect against malicious activities
- To enforce our Terms of Service and other agreements
- To comply with legal obligations and law enforcement requests
- To protect the rights, privacy, safety, and property of our users and public

### 3.6 Personalization
- To customize your experience
- To provide relevant recommendations
- To remember your preferences

## 4. How We Share Your Information

### 4.1 Third-Party Service Providers

We share information with third-party service providers who assist us in:
- Payment processing and billing (payment gateways)
- Cloud hosting and data storage
- Analytics services
- Customer support platforms
- Email delivery services
- Crash reporting and monitoring tools

These service providers are contractually obligated to use your information only as necessary to provide services to us and are required to maintain the confidentiality and security of your information.

### 4.2 Legal Requirements

We may disclose your information when required by law or when we believe in good faith that such disclosure is necessary to:
- Comply with applicable laws, regulations, or legal processes
- Respond to lawful requests from government authorities
- Enforce our Terms of Service and other agreements
- Protect the security or integrity of our Service
- Protect the safety, rights, and property of our users or the public

### 4.3 Business Transfers

If we are involved in a merger, acquisition, bankruptcy, dissolution, reorganization, similar transaction or proceeding, your information may be transferred as part of that transaction. We will provide notice before your information becomes subject to a different privacy policy.

### 4.4 Aggregated and De-identified Information

We may share aggregated or de-identified information that cannot reasonably be used to identify you with third parties for research, marketing, analytics, and other purposes without restriction.

### 4.5 With Your Consent

We may share your information with third parties when you explicitly consent to such sharing.

## 5. Data Security

### 5.1 Security Measures

We implement comprehensive security measures to protect your information, including:
- Encryption of data in transit using SSL/TLS protocols
- Encryption of sensitive data at rest
- Secure password storage using industry-standard hashing
- Regular security audits and penetration testing
- Firewall protection and intrusion detection systems
- Access controls and authentication mechanisms
- Employee training on data protection and privacy

### 5.2 Limitations

While we strive to protect your information using reasonable security measures, no system is completely secure. We cannot guarantee absolute security of your information. Any transmission of data is at your own risk. You are responsible for maintaining the confidentiality of your account credentials.

## 6. Your Privacy Rights and Choices

### 6.1 Access and Correction

You have the right to:
- Access your personal information stored in our systems
- Correct inaccurate or incomplete information
- Request a copy of your data

To exercise these rights, please contact us using the information provided in Section 13.

### 6.2 Deletion and Data Portability

You have the right to:
- Request deletion of your personal information
- Receive your information in a portable format

Please note that some information may be retained for legal, compliance, or legitimate business purposes even after deletion requests.

### 6.3 Opt-Out Options

You can control certain information collection and use:
- **Email Communications**: Unsubscribe from promotional emails using the link provided in each email
- **Location Services**: Disable location permissions in your device settings
- **Advertising**: Configure your device's advertising preferences for personalized advertising
- **Cookies**: Clear cookies through your device's browser settings

### 6.4 Withdrawal of Consent

Where we process your information based on your consent, you may withdraw that consent at any time by contacting us or adjusting your settings within the App.

## 7. Data Retention

We retain your personal information for as long as necessary to:
- Provide our Services to you
- Fulfill the purposes outlined in this Privacy Policy
- Comply with legal obligations
- Resolve disputes

The retention period varies depending on the context of the processing and applicable legal requirements. Typically:
- Account information is retained while your account is active
- Conversation history may be retained for 1-2 years for service improvement
- Payment records are retained for 7 years for tax and accounting purposes
- Analytics data is retained for up to 12 months

When information is no longer needed, we securely delete or anonymize it.

## 8. Children's Privacy

Our App is not intended for users under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal information from children under 13. If we become aware that we have collected information from a child under 13, we will promptly delete such information and terminate the child's account.

For users between 13 and 18 (or the age of majority in their jurisdiction), we apply additional safeguards and limit data processing.

If you believe we have collected information from a child under 13, please contact us immediately.

## 9. International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from your home country. When we transfer information internationally, we implement appropriate safeguards, including:
- Standard contractual clauses
- Adequacy decisions by relevant authorities
- Your explicit consent to the transfer

By using our Service, you consent to the transfer of your information to countries outside your country of residence for the purposes described in this Privacy Policy.

## 10. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

- **Right to Know**: You can request what personal information we collect, use, share, and sell
- **Right to Delete**: You can request deletion of personal information we have collected
- **Right to Opt-Out**: You can opt-out of the sale or sharing of your personal information
- **Right to Non-Discrimination**: We will not discriminate against you for exercising your privacy rights

To submit a request, please contact us at the address in Section 13. We will verify your identity and respond within 45 days.

## 11. European Privacy Rights (GDPR)

If you are located in the European Economic Area, you have rights under the General Data Protection Regulation (GDPR):

- **Right to Access**: Request a copy of your personal data
- **Right to Rectification**: Correct inaccurate information
- **Right to Erasure**: Request deletion of your data (right to be forgotten)
- **Right to Restrict Processing**: Limit how we use your data
- **Right to Data Portability**: Receive your data in a portable format
- **Right to Object**: Object to processing of your data
- **Right to Withdraw Consent**: Withdraw previously given consent
- **Right to Lodge a Complaint**: File a complaint with your local data protection authority

Our legal basis for processing your information includes:
- Your consent
- Performance of a contract with you
- Compliance with legal obligations
- Protection of your vital interests
- Our legitimate interests

To exercise any of these rights, please contact us using the information in Section 13.

## 12. Third-Party Links and Services

Our App may contain links to third-party websites, applications, and services that are not operated by us. This Privacy Policy does not apply to third-party services, and we are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party services before providing your information or using their services.

## 13. Contact Us

If you have questions about this Privacy Policy, concerns about our privacy practices, or wish to exercise your privacy rights, please contact us:

**By Email:**
zakione.dev@gmail.com

**By Mail:**
Alaan AI Support
Privacy Department
Sana'a, Yemen

**By Phone:**
+967735987831

**Through the App:**
Use the "Contact Us" or "Help" feature within the App

We will respond to your inquiry within 30 days. If you are not satisfied with our response, you may have the right to lodge a complaint with your local data protection authority.

## 14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, and other factors. We will notify you of any material changes by:
- Posting the updated Privacy Policy on our App and websites
- Sending you an email notification
- Requiring your acceptance of the new terms before continued use of the App

Your continued use of the App following the posting of updates constitutes your acceptance of those updates. We recommend reviewing this Privacy Policy regularly to stay informed about how we protect your information.

## 15. Supplemental Information by Jurisdiction

### 15.1 Residents of the Middle East
For users in the Middle East region, we comply with local data protection regulations and ensure that your personal information is processed in accordance with applicable laws in your jurisdiction.

### 15.2 Residents of Other Countries
For users in countries not specifically mentioned above, we comply with the applicable data protection laws and regulations in your jurisdiction. If there are conflicts between this Privacy Policy and local laws, local laws shall prevail.

## 16. Definitions

- **Personal Information**: Information that identifies, relates to, or could be linked with a particular individual
- **Processing**: Any operation performed on personal information, such as collection, storage, use, or deletion
- **Service**: Our mobile application and related online services
- **Third Party**: Any entity other than the Company or the user

## 17. Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at:
zakione.dev@gmail.com

---

**Alaan AI** is committed to protecting your privacy and providing a transparent, secure, and user-friendly experience. We believe in being straightforward about our data practices and respecting your rights and choices.

If you have any questions or concerns about this Privacy Policy or our privacy practices, please do not hesitate to contact us.

**Thank you for using Alaan AI.**

---

*This Privacy Policy is effective as of May 7, 2026 and will remain in effect until modified or superseded by a new Privacy Policy.*