Privacy Policy

Last updated: October 12, 2026

Dubai Directory MM (“the app”) is a community app for the Myanmar community in Dubai/UAE. This policy explains what information we collect, why, who can see it, how long it is kept, and the choices you have.

Information We Collect

• Account and profile information: email address, password, display name, optional profile photo/bio, required first/last name and date of birth, plus optional gender and phone number.
• Community content: posts, comments, photos, likes, reports, and automated safety-review results.
• Classifieds and Jobs: post type, category, title, description, a coarse area you type manually, optional image, and relevant price/condition or employer/employment/workplace/salary/deadline fields.
• Private contextual messages: the two participant accounts, related Classified/Job post, message text, timestamps, moderation/publication state, and limited anti-abuse rate state. Messages are private to the two participants in normal use, but are safety-moderated and are not end-to-end encrypted.
• Reports and safety records: reporting account, target identifier, reason, optional details, status, and moderator decision. For an open private-message report, authorized moderators can retrieve only the reported message plus at most two messages before and two after it; there is no browse-all private-message tool.
• Business Directory information: business identity, category, address/map link, hours, contact details, images, services, prices, and optional member-only offers submitted by approved business owners.
• Featured campaigns and store purchases: promoted listing/business, dates/duration, store platform/product, store transaction/order reference or cryptographic purchase-token digest, and verification/fulfillment/refund/revocation state. Apple or Google processes payment; we do not receive full card/store-payment credentials.
• Featured campaign performance: campaign/listing, promotion surface, interaction type, member account, short deduplication session key, and server timestamp when a signed-in member sees/opens a promotion or taps a business contact action.
• Community Events: events you create/join, public Event text/category/time/area, participant state, manually typed meeting point, and post-event feedback.
• Public website Event/Webinar registrations: event, name, email address, optional phone/WhatsApp number, optional notes, registration status, consent timestamp, and registration/update timestamps.
• Public Volunteer Directory: when a signed agreement permits public listing, an admin may publish your app profile display name, verified volunteer badge rank, Active/Alumni status, position and contribution scope. Your app photo is published only when the agreement also permits photo use. The private signed agreement reference, consent confirmation time and a minimal admin audit are stored for review, not shared publicly. You can request withdrawal through Support; live listings disappear when consent is withdrawn, your account becomes inactive, or your badge is revoked. Previously downloaded copies may remain elsewhere.
• Preferences and progression: app language, Level and earned badges, and underlying progression needed to operate member features.
• Exclusive Discount redemptions: member account, business, approved offer/business-name snapshots, recording owner, and server timestamp when a business owner records a redemption.

We do not access your device’s precise location or contacts. Business addresses/map values, Event areas/meeting points, and Classified/Job areas are entered manually. A business owner may grant camera access only while scanning a Member ID QR for an in-person Discount redemption; this feature does not record video or audio. We do not collect browsing activity outside the app or use app data for third-party behavioral advertising.

How We Use and Share Information

We use information to operate accounts, profiles, community features, the approved Directory, Classifieds/Jobs, private post-bound messaging, Events, public website Event/Webinar registration and attendance management, progression, Discounts, Featured campaigns, purchase reconciliation, content safety, abuse prevention, reports, and support. Active approved public content is visible to signed-in members subject to account status and blocking rules.

Private contextual messages are normally visible only to the two participants. Blocking stops new messages while preserving the participant’s existing history. If a message is reported, authorized moderators may see only the reported message and the bounded surrounding context described above. Pending/rejected submissions and moderation records are limited to the submitting member and authorized moderators/admins. We do not sell personal information and do not use app data for cross-company tracking or targeted advertising.

Public website Event/Webinar registration forms use server-side validation, origin checks, a hidden anti-spam field, duplicate prevention, and capacity enforcement to reduce automated abuse. The Production registration form does not use a third-party CAPTCHA service.

Automated Content Moderation

Before user-generated content is published or delivered, submitted content may be sent securely to OpenAI’s moderation service for automated safety screening. This includes feed posts/comments and images, public Event text, Classified/Job text and optional images, and private contextual message text. OpenAI acts as a service provider for this safety function. Rejected content is not published or delivered; uncertain content may be reviewed by an authorized human moderator. Moderation decisions/category scores may be retained for safety, abuse prevention, and audit purposes, but long-term chat retention does not keep an unlimited private transcript in moderation audit rows.

Retention and Deletion

Private contextual messages remain available while the related post/conversation is active. After a Classified/Job post closes, expires, or is removed, archived conversations and private message content are scheduled for deletion after 90 days. If an open message report still requires safety evidence, that conversation is temporarily held until the report is resolved or dismissed. When the transcript is purged, corresponding private message text is redacted from durable moderation audit rows and resolved-report free-text details are removed; only minimal audit fields may remain. Stale message rate-limit state is also removed after it is no longer operationally needed.

Exclusive Discount redemption history is otherwise retained for up to 12 months unless removed earlier through account deletion. Public website Event/Webinar registration records are automatically removed after the related event has been over for 12 months.

You can permanently delete your account from Profile by typing “DELETE” to confirm, or use the public account-deletion page after verifying your account email. Account deletion removes your account/profile, community posts/comments/likes, business profile/listings, Classified/Job posts, private contextual conversations and message content, Discount redemption rows linked to you, Events you host, Event participation/feedback, push tokens, and uploaded user photos including Classified images and pending moderation uploads. This cannot be undone.

If another member previously filed a moderation report, minimal report/audit metadata may remain where needed for safety/audit integrity, but a deleted private-message transcript and deleted member profile identity are not retained through that report record. Featured purchase history may retain a minimal de-identified campaign/store audit with snapshots and store transaction references for reconciliation, accounting, fraud/support disputes, or legal/store obligations; it no longer retains the deleted member profile identity.

Children

The app is not directed at children and is not intended for anyone under 13.

Contact

Questions about this policy or your data: info@dubaidirectorymm.com.