Hayy

Privacy Policy

Last updated: 17 February 2026

Hayy is operated by Aberkane Software House FZ-LLC ("we", "us", "our"), a company registered in the United Arab Emirates. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and share your personal data when you use our website and services, in compliance with the UAE Federal Decree-Law No. 45/2021 on the Protection of Personal Data (PDPL).

1. Information We Collect

We collect the following types of personal data:

  • Account data: When you sign in with Google OAuth, we receive your name, email address, and profile picture from your Google account.
  • Contact form submissions: When you submit a message through our contact or support forms, we collect your name, email address, and message content.
  • Favourites: If you save communities to your favourites, we store those preferences linked to your account.
  • Payment information: If you subscribe to Hayy+, payment details are collected and processed securely by Stripe. We do not store your full card details on our servers.
  • Usage data: We may collect information about how you interact with the Service, including pages visited, features used, and device information.

2. How We Use Your Information

We use your personal data to:

  • Provide and maintain the Service, including your account and favourites.
  • Process payments and manage subscriptions.
  • Respond to your enquiries and support requests.
  • Improve and personalise your experience.
  • Comply with legal obligations under UAE law.

3. Legal Basis for Processing

In accordance with the UAE PDPL, we process your personal data based on:

  • Consent: When you create an account or submit a contact form, you consent to the processing of your data for the stated purposes.
  • Contractual necessity: Processing required to provide the Service and fulfil subscription agreements.
  • Legitimate interests: Improving our Service, ensuring security, and preventing fraud.
  • Legal obligation: Compliance with applicable UAE laws and regulations.

4. Data Sharing & Third Parties

We do not sell your personal data. We share data with the following trusted third-party service providers, solely to operate the Service:

  • Supabase: Database hosting and authentication services.
  • Stripe: Payment processing for subscriptions.
  • Google: OAuth authentication and Maps services.
  • Vercel: Website hosting and deployment.

Each provider is bound by their own privacy policies and data protection obligations. We may also disclose data if required by UAE law or to protect our legal rights.

5. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Contact form submissions are retained for up to 24 months. If you delete your account, we will remove your personal data within 30 days, except where retention is required by law.

6. Your Rights under UAE PDPL

Under the UAE Federal Decree-Law No. 45/2021, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Correction: Request correction of inaccurate or incomplete data.
  • Deletion: Request deletion of your personal data, subject to legal obligations.
  • Portability: Request your data in a structured, commonly used format.
  • Withdrawal of consent: Withdraw your consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at support@aberkane.io.

7. Cookies & Tracking

We use essential cookies to maintain your authentication session and preferences. We do not use third-party advertising or tracking cookies. You can manage cookie settings through your browser preferences.

8. International Data Transfers

Your data may be transferred to and processed in countries outside the UAE where our service providers operate. We ensure that appropriate safeguards are in place in accordance with the UAE PDPL to protect your data during such transfers.

9. Children's Privacy

The Service is not directed at children under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will take steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the most recent revision. We encourage you to review this page periodically. Continued use of the Service after changes are posted constitutes acceptance of the updated policy.

11. Contact Information

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us at support@aberkane.io or through our Support page.