Privacy Policy

Introduction

This Privacy Policy explains what personal information the Nadira platform collects, why we collect it, who we share it with, and the choices available to you. It applies to the Nadira mobile application, the Nadira website, and all related services (together, the "Service").

It should be read together with our Terms of Service and Cookie Policy.

Who We Are

Nadira is operated by GigaNet IT, a company registered in Dubai, United Arab Emirates. GigaNet IT is the data controller responsible for the personal information described in this policy.

Where a business owner uses Nadira to manage their own clients, that business owner is the controller of their client records, and GigaNet IT acts as a processor on their behalf.

Information We Collect

Information you give us

• Account details — your name, business name, email address, and phone number.
• Verification documents — where you register as a service professional, a copy of your business licence and a government-issued photo identification. These are used solely to verify that you are entitled to trade.
• Client and booking records — the contact details, appointments, packages and notes you enter about your own clients.
• Assistant voice recordings and conversations — if you choose to enable the Salma AI assistant, the short voice recordings of your spoken commands and the text of your questions to the assistant. See the AI Assistant section below.
• Support correspondence — messages you send us and our replies.

Information collected automatically

• Device identifier — a unique identifier generated on your device when the application is first launched. This is how we recognise your device and keep you signed in. It is not your advertising identifier and is not shared with advertisers.
• Usage and diagnostic data — which features are used, how long tasks take, and where errors occur.
• Crash reports — technical details of any crash, so that we can fix it.
• Approximate location — where you grant permission, used to show relevant nearby results.

Device Permissions

The application asks for the following permissions. Each one is optional, is requested only at the point it is needed, and can be withdrawn at any time in your device settings.

Declining a permission does not prevent you from using the rest of the Service; only the feature that depends on it will be unavailable.

How We Use Information

• To create and maintain your account, and to keep you signed in.
• To verify the identity and trading status of service professionals.
• To take bookings, issue payment links, and record whether payment has been made.
• To send transactional messages about bookings, payments and account activity.
• To send notices about your own subscription period — for example that a free trial or a paid term is ending — by email, and by WhatsApp where you have separately opted in to receive them.
• To provide the Salma AI assistant — converting your spoken commands to text, answering your questions, carrying out the actions you request, and speaking replies aloud — where you have enabled it.
• To provide customer support.
• To detect, investigate and prevent fraud and abuse.
• To understand how the Service is used in aggregate and improve it.
• To comply with legal, tax and regulatory obligations.

We do not sell personal information. We do not use your information, or your clients' information, to build advertising profiles.

Legal Basis

Where data protection law requires a legal basis for processing, we rely on the following:

• Performance of a contract — to provide the Service you have signed up for.
• Legal obligation — to meet identity verification, tax and record-keeping requirements.
• Legitimate interests — to secure the platform, prevent fraud and improve the Service, balanced against your rights.
• Consent — for device permissions and optional analytics, which you may withdraw at any time.

Sharing & Disclosure

We share personal information only in the following circumstances:

• Between the parties to a booking — a client's name and contact details are shared with the service professional they book, and the professional's business details are shared with the client.
• Service providers — hosting, payment processing, messaging delivery, crash reporting, analytics, and artificial-intelligence processing providers (speech-to-text, answer generation and text-to-speech for the Salma assistant — see the AI Assistant section) who process data on our instructions and are bound by confidentiality obligations.
• Legal and regulatory — where required by law, court order, or a competent authority, or to establish or defend legal claims.
• Business transfer — if the business is sold or restructured, subject to the acquirer honouring this policy.

Nadira is not responsible for the privacy practices of third-party websites to which the Service links. You should review their policies directly.

Payment Information

Payments for services booked through Nadira are processed by our third-party payment provider over a secure, 3-D Secure protected connection. Card details are entered on the provider's own secure page.

We receive and retain only a transaction reference, the amount, the currency, the outcome, and the last four digits of the card for reconciliation and dispute handling. We never receive or store the full card number, expiry date or security code.

WhatsApp Messaging

Where you use Nadira's WhatsApp features, booking confirmations and payment links are delivered through WhatsApp. Message content passes through WhatsApp's infrastructure and is subject to WhatsApp's own privacy policy in addition to this one.

We retain a record of which messages were sent and whether they were delivered, so that you have an audit trail of your bookings. Your clients may opt out of these messages at any time by replying to stop.

AI Assistant (Salma)

The application includes an optional AI assistant, Salma, which can answer questions about your business, carry out tasks such as sending payment links, and respond by voice in eight languages.

Your consent comes first

The assistant does not process anything until you have given explicit consent. Before it can be used, a consent screen names each provider below, states exactly what each one receives, and asks you to accept. The screen cannot be dismissed without making a choice. If you decline, nothing is transmitted to any of them and the assistant is unavailable; every other part of the Service remains fully available.

You can change your mind at any time. Open AI & Privacy in the application to see your current choice and to turn the assistant on or off. Turning it off takes effect immediately and stops any further transmission to the providers below. You may also write to us and we will action it for you.

What is sent, and to whom

When you use the assistant, the following is transmitted over encrypted connections, always through Nadira's own servers — the application never communicates with these providers directly and contains no provider credentials:

Language identification of typed text is performed entirely on your device using Google ML Kit; no data leaves your device for that purpose.

What is not done

• Assistant data is used solely to provide the assistant. It is never used for advertising, sold, or used to build marketing profiles.
• No contacts, photographs, precise location, card numbers or identity documents are sent to AI providers.
• Voice recordings are processed transiently for transcription and are not retained on Nadira servers once transcribed.

The AI providers process this data as our service providers under the Sharing & Disclosure section of this policy. As they are located outside the UAE, the safeguards described under International Transfers apply.

Data Retention

We keep personal information only for as long as it is needed for the purpose it was collected, and then for any additional period required by law.

• Account and booking records — for the life of the account, and for up to seven years afterwards where required for tax and accounting purposes.
• Verification documents — for the life of the account and for five years afterwards, in line with anti-money-laundering record-keeping requirements.
• Assistant voice recordings and conversations — voice recordings are processed transiently for transcription and are not retained on Nadira servers once transcribed; assistant conversations are held on your device and cleared when the application is restarted.
• Your AI consent choice — stored on your device only, so the application knows whether it may use the assistant. It is removed when you uninstall the application, and is replaced whenever you change the setting under AI & Privacy.
• Diagnostic and crash data — typically up to 24 months.
• Support correspondence — up to three years.

When a retention period ends, information is deleted or irreversibly anonymised.

Security

We use technical and organisational measures appropriate to the risk, including encryption of data in transit, encrypted storage of session credentials on your device, access controls limiting who within our team can view personal data, and logging of administrative access.

No system is completely secure. If a breach occurs that is likely to result in a risk to your rights, we will notify you and the relevant authority without undue delay.

Your Rights

Subject to applicable law, you have the right to:

• Access the personal information we hold about you.
• Correct information that is inaccurate or incomplete.
• Request deletion of your information, where we are not required to retain it.
• Object to or restrict certain processing.
• Receive a copy of your information in a portable format.
• Withdraw consent at any time, without affecting processing already carried out.

To exercise any of these rights, contact us at privacy@nadiraglobal.com. We respond within 30 days.

Two of these you can action yourself, without contacting us. You may delete your account from within the application, which begins the deletion process for data we are not obliged to keep. You may withdraw consent for the AI assistant at any time under AI & Privacy in the application, as described in the AI Assistant section.

Children's Privacy

Nadira is a business tool intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If we become aware that we have done so, we will delete it promptly. If you believe a minor has provided us with information, please contact us.

International Transfers

Nadira is operated from the United Arab Emirates. Some of our service providers process data in other countries. Where information is transferred outside the UAE, we take steps to ensure it remains protected to a standard comparable to that described in this policy, including through contractual safeguards with our providers.

Changes to This Policy

We may update this Privacy Policy as the Service and the providers we rely on change. The revised policy is posted on this page with an updated "Last Updated" date. Where changes are significant, we will notify you in the application or by email.

Contact Us

For questions about this Privacy Policy, or to exercise any of your rights, please contact us: