Privacy policy
PRIVACY POLICY
|
Company |
Effective Date |
Last Updated |
|
Oudience LLC – Sharjah Media City Free Zone (SHAMS) |
21stOctober 2025 |
21stOctober 2025 |
This Privacy & Data Protection Policy (“Policy”) explains how Oudience LLC (“Oudience,” “we,” “us,” or “our”) collects, uses, stores, shares, and safeguards information relating to individuals (“Users,” “you”) who access or use the OREYA mobile application, website, or associated services (“Platform”).Our practices comply with:
· Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL);
· Executive Regulations and Guidelines issued thereunder; and
· Principles of Islamic Sharia, including truthfulness, confidentiality, and protection of dignity and reputation.
Oudience LLC acts as a data controller, determining the purpose and means of processing personal data collected through OREYA. We may rely on independent or contracted third parties to perform limited processing functions (see Section 7).
This Policy is incorporated by reference into the Customer Terms of Service and operates alongside: the End-User License Agreement (EULA), Community Guidelines, and Payment & Refund Policy.
By using the Platform, you acknowledge that you have read, understood, and agreed to this Policy.
1) Types of Data Collected
Oudience LLC collects only the information necessary to deliver the OREYA Platform’s core matchmaking and marketplace functions in a secure and lawful manner.All data categories below are processed according to the principles of necessity, transparency, and fairness under UAE PDPL:
|
Category |
Examples |
Source / Nature |
Purpose |
|
|
Account information |
Name, email, gender, age, profile picture from Google or Apple |
When signing up using Google or Apple, the following information are extracted. |
To create and manage your account, authenticate login, and verify eligibility (18 +). |
|
|
ID Verification Data |
Government ID image, nationality, facial recognition matched with face on Government ID, verification results |
Collected though authorized verification providers optionally from free subscription plans and mandatory for paid subscription plans. |
To confirm authenticity, prevent fraud, and comply with legal obligations. |
|
|
Location Data |
Real-time or approximate device location, selected city, region, and country preferences |
Automatically collected (with device permission) or provided manually in profile settings or selected from the location dropdown options. |
To display nearby or preferred-region profiles, support “search within area / city / country / global” features, and improve geographic relevance of recommendations. Moreover, to display marketplace items based on location detected or selected. |
|
|
Transaction Data |
Payment records, invoices, subscription tier, timestamps, transaction IDs |
Processed through licensed payment providers
|
To process and document financial transactions securely. |
|
|
Profile & Matchmaking Data |
Information voluntarily or mandatorily provided to build your dating profile and receive recommendations. This includes personality traits, lifestyle indicators, interests, partner preferences, and optional self-descriptions. |
Provided by you through profile forms or questionnaires |
To generate compatible matches and allow your profile to appear in others’ search results. |
|
|
Marketplace Data |
Purchase history, consultations booked, reservation details, reviews or ratings |
Generated automatically when using marketplace features |
To manage transactions, display order history, and enhance vendor performance analytics. |
|
|
Communications Data |
Chat metadata (time, frequency, participants), messages, support tickets, and correspondence |
Through in-app communication tools or customer-support channels |
To enable messaging, provide technical assistance, and ensure safe interactions. |
|
|
Device & Technical Data |
IP address, device ID, browser, OS type& version, diagnostics logs |
Collected automatically via analytics or SDKs |
For security, fraud detection, and performance optimization. |
|
|
Cookies & Tracking Data |
Session cookies, analytics identifiers, ad preference tags |
Via Platform cookies or third-party analytics |
To maintain sessions, remember settings, and measure usage metrics. |
· All required fields are clearly labeled within the Platform and are necessary for the matchmaking system to operate.
· Optional fields are marked as such; you may choose not to provide them or may remove them later.
· Location access can be toggled off in device settings; if disabled, you may still manually set a preferred region to receive approximate results.
· We do not intentionally collect data of minors below 18 years.
2) Purpose of Data Collection
We process data strictly for specific, explicit, and legitimate purposes, including:
· Account Creation & Authentication:to register you and secure access.
· Service Operation:to deliver matchmaking and marketplace features.
· Payment Processing:to handle transactions, subscriptions, and invoices.
· Identity Verification:to ensure user authenticity and comply with UAE regulations.
· Customer Support:to assist and resolve issues.
· Personalization & Improvement:to enhance recommendations and usability.
· Legal & Regulatory Compliance:for AML, KYC, and law-enforcement obligations.
· Public & Moral Safety:to detect and prevent indecent or fraudulent use, consistent with Sharia principles.
3) Legal Basis for Processing
Processing activities rely on one or more lawful bases:
· Performance of a Contract:to provide the services you request.
· Consent:for marketing, optional features, or cross-border transfers.
· Legal Obligations:to meet UAE statutory or regulatory requirements.
· Legitimate Interest:to improve services while protecting your rights.
· Public Interest / Sharia Morality:to uphold decency and prevent harm.
Withdrawal of consent is possible at any time through account settings or written notice (see Section 12).
4) Data Storage & Retention
· Storage Locations:Data may reside on secure cloud servers located in and outside the UAE, including:
o Matchmaking & Profile Data:servers in India managed by reputed hosting providers.
o Marketplace & Payment records:stored through international e-commerce hosting infrastructure meeting recognized security standards.
· Retention Principles:Data is retained only for the period:
o necessary to deliver services;
o mandated by law or regulator; or
o required to resolve disputes or defend legal claims.
When retention expires, records are securely deleted or irreversibly anonymized.
5) Cross-Border Data Transfer & Consent
· Transfers:Your information may be processed in multiple jurisdictions to enable technical hosting, payment processing, or support services. Some countries may not offer the same level of data protection as the UAE.
· Safeguards:Oudience LLC implements layered protections to ensure lawful and secure transfers:
o Independent Platforms:Certain external platforms (e.g., payment gateways or hosting services) operate under their own Terms of Service and certified compliance frameworks (such as PCI-DSS, ISO 27001, or GDPR adequacy). These providers act as independent or joint controllers, not as contracted processors. In this context, “instruction” refers to the technical commands and API parameters that govern what data we transmit or receive, not to a contractual mandate over their internal operations.
o Contracted Processors:Where we retain vendors under formal processing agreements, they must act only within documented instructions and apply confidentiality and security standards equivalent to UAE PDPL requirements.
o Technical Controls:All cross-border transfers use encrypted channels, access-key management, and multi-factor authentication to mitigate unauthorized access.
o Due Diligence:Before onboarding any provider, we aim to assess its security certifications, jurisdiction, and privacy track record and continue to monitor compliance to the best of our abilities.
· Consent:By using the Platform and its global integrations, you explicitly consent to the transfer of your data to such locations as necessary for service delivery.
6) Third-Party Processors
· Categories:Oudience LLC may use external service providers for the following functions:
o payment and billing facilitation;
o cloud hosting and data storage;
o analytics and performance monitoring;
o identity verification;
o content safety and moderation;
o communication delivery (email, SMS, notifications).
· Obligations:All such providers are selected based on their legal compliance and security credentials. Where contractual agreements exist, they limit use of data to the specific purpose for which it was shared. Provider identities are not publicly disclosed to preserve confidentiality and platform security.
7) User Rights
You enjoy the rights granted under the UAE PDPL and Sharia principles of fairness and accountability:
· Access:receive a copy of your data we hold.
· Correction:rectify inaccurate or incomplete information.
· Deletion / Erasure:request removal of data no longer required by law.
· Restriction:limit processing while a complaint is investigated.
· Portability:obtain data in a structured format or transfer to another controller where technically feasible.
· Objection:opt-out of marketing or profiling activities.
· Withdrawal of Consent:withdraw any granted consent without prejudice to prior lawful processing.
Requests can be sent by contacting us as described under the contact section of this document.
8) Data Security Measures
We apply multi-layered security controls to protect personal information:
· End to end encryption for data in transit and at rest.
· Secure authentication and role-based access.
· Continuous system monitoring and intrusion detection.
· Regular backups and disaster-recovery testing.
· Employee training and confidentiality undertakings.
While we strive for maximum security, no internet-based system can be guaranteed completely secure. Users share responsibility for protecting their credentials and devices.
9) Cookies & Tracking
· Purpose:Cookies help maintain sessions, remember preferences, and analyze usage patterns.
· Types:Essential, analytics, and marketing cookies. Marketing cookies are used only with explicit consent.
· Control:You may disable cookies through your browser settings, though some features may not function properly.
10) Data Breach Notification
If a personal-data breach occurs that could result in significant risk to Users, Oudience LLC will:
· Immediately assess and contain the incident;
· Notify the UAE Data Office and affected Users without undue delay; and
· Document the nature of the breach and remedial actions taken.
We also maintain an internal incident log for accountability and future risk mitigation.
11) Governing Law & Language
· Governing Law & Jurisdiction:This policy and any non-contractual obligations arising out of or in connection with them are governed by the laws of the United Arab Emirates, as applied in the Emirate of Sharjah, with reference to the principles of Islamic Sharia concerning morality, fairness, and public order. The courts of Sharjah shall have exclusive jurisdiction.
· Language & Prevailing Version:This policy is drafted in English. Any translation is provided for convenience. In the event of inconsistency or ambiguity, the English version prevails, provided that any Arabic translation required for UAE court submission shall faithfully reflect the English version.
· Entire Agreement & Updates:This policy, together with the incorporated Customer Policies, constitute the entire agreement between you and Oudience LLC regarding use of the Platform. We may update these policies or any Customer Policy by posting a revised version with an updated “Last Updated” date. Your continued use after posting constitutes acceptance of the updated terms.
12) Contact
Thank you for reading our Privacy & Data Protection Policy for Customers. If you have any further questions, please feel free to contact usby filling out the form available in-app or on our website’s contact page and we shall be happy to answer.