Contents
01Who we are and scope
Expat Pocket provides community, listings, discovery, and daily-life tools for people living in or moving to the United Arab Emirates. This policy applies to our website, mobile apps, and related services.
The data controller is Expat Pocket. Contact privacy@expatpocket.app with questions.
02Data we collect
We process only data needed to run the product and keep it safe. Categories include:
- Account: email, display name, language preference, profile details.
- Authentication: technical identifiers required for sessions and security.
- Content: listings, messages, comments, media you upload.
- Location: approximate or precise location when you grant permission (discovery, nearby, safety signals).
- Device and usage: app version, crash logs, performance signals for product quality.
- Support: contact and support records when you write to us.
03Why we process data
We process data to create and maintain your account; deliver community and listing features; personalize experiences such as Poco and discovery; prevent fraud and abuse; meet legal obligations; and improve the product (preferably aggregated or anonymized).
04Location data
Location is core to Expat Pocket — but only with permission and transparency. We do not collect precise location without device permission.
Approximate location may power neighborhood discovery, nearby content, and safety-related features. You can revoke permission in system settings; some features may become limited.
05Messages and private content
One-to-one messages and similar private content are processed to provide the service and keep it safe. Staff do not access this content arbitrarily outside moderation, legal requests, or abuse investigations.
Security and operations panels use role-based access and audit trails.
06Sharing and processors
We do not sell your data. We may use limited processors to run the service (hosting, analytics, notifications, payments). They are contractually restricted from using data for other purposes.
We may share data with authorities when legally required, or to address security threats or protect rights.
07Retention and security
We keep data for as long as needed for the purpose. After account deletion we delete or anonymize within a reasonable period; legal retention or security exceptions may apply.
Technical and organizational measures include encryption in transit, access control (RLS and roles), least privilege, and audit logs. No system is risk-free; we run incident processes if a breach is suspected.
08Your rights
Under applicable law you may request access, correction, deletion, restriction, and objection. Contact privacy@expatpocket.app; we may need to verify identity.
In-app settings let you manage profile and notification preferences. Self-serve export is available where offered; otherwise support handles requests.
09Children
The service is not directed at users under 18. We do not knowingly collect children’s data. If we learn we have such data, we start a deletion process.
10Changes
We may update this policy from time to time. For material changes we notify in-app or by email. The current version is published on this page; check the last-updated date.
