Privacy Policy
Effective date: April 3, 2026 · Existing FRANK policy
1. Information We Collect
We collect the following categories of information:
a) Personal Identification Information
- Full name, email address, phone number
- Profile picture and avatar (if provided)
- Account credentials and authentication tokens
- Professional role and company affiliation
- RERA broker ID or developer license number (where applicable)
b) Usage & Behavioral Data
- Pages visited, features used, search queries, and interaction patterns
- Deal scores generated, properties compared, and areas researched
- Client packs created, media generated, and reports downloaded
- Session duration, frequency of access, and navigation paths
- Quiz responses and challenge participation data
c) Device & Technical Data
- Device type, model, operating system, and version
- Browser type, version, and language settings
- IP address, approximate geolocation, and time zone
- Screen resolution, viewport dimensions
- Push notification tokens and device identifiers
- Mobile application installation and crash analytics
d) Transaction & Financial Data
- Subscription plan selections and billing history
- Payment method type (we do not store full card details)
- Invoice records, promo/coupon code usage
- Affiliate commission and referral tracking data
e) Communication Data
- WhatsApp messages sent to or from FRANK AI business accounts
- Bug reports, support requests, and feedback submissions
- Email correspondence related to your account
- In-app notifications and push notification interaction data
f) User-Generated Content
- Documents, brochures, images, and files uploaded to the platform
- Notes, comments, and annotations within the closing room
- Custom property listings and inventory data
- AI-generated content created through our tools
2. How We Collect Information
- Directly from you - when you create an account, subscribe, fill out forms, upload content, or contact us.
- Automatically - through cookies, analytics SDKs, server logs, and device APIs when you interact with our website or mobile applications.
- From third-party sources - public Dubai Land Department (DLD) transaction records, developer project data from real estate data providers, and payment processors (Stripe).
- Via integrations - WhatsApp Business API for communication, Hercules Auth for identity verification, and social signal platforms for affiliate tracking.
3. How We Use Your Information
We use the collected information for the following purposes:
- Provide, operate, and maintain the FRANK AI platform and all its features
- Authenticate your identity and manage your account and subscription
- Deliver personalized market intelligence, deal scores, and property analytics
- Generate AI-powered content including client packs, media, and legal summaries
- Process subscription payments and manage billing cycles
- Send transactional emails, push notifications, and WhatsApp messages related to your account activity
- Provide customer support, respond to inquiries, and process bug reports
- Track affiliate referrals, commission calculations, and partner performance
- Improve our AI models, algorithms, and user experience through anonymized analytics
- Detect, prevent, and address fraud, security breaches, and technical issues
- Comply with legal obligations, including UAE federal and DIFC data protection laws
- Conduct internal research and analytics to improve service quality
4. Legal Basis for Processing
We process your personal data under the following legal bases:
- Contractual Necessity - to fulfill our obligations under your subscription agreement and provide the services you have requested.
- Consent - for marketing communications, push notifications, and optional data collection where you have given explicit consent. You may withdraw consent at any time.
- Legitimate Interest - to improve our platform, prevent fraud, ensure security, and conduct business analytics, balanced against your privacy rights.
- Legal Obligation - to comply with applicable UAE laws, regulations, and lawful requests from authorities.
6. Data Retention
- Active accounts - personal data is retained for the duration of your account existence and active subscription.
- Inactive accounts - data may be retained for up to 24 months after last login. We may send reactivation notices before deletion.
- Financial records - transaction and billing records are retained for 7 years to comply with UAE tax and accounting regulations.
- Anonymized data - aggregated statistical and analytics data that cannot identify individuals may be retained indefinitely for research and improvement purposes.
- Account deletion - upon request, we will delete your personal data within 30 days, except where retention is required by law.
7. Data Security
We implement industry-standard security measures to protect your data:
- All data transmitted between your device and our servers is encrypted using TLS 1.2+
- Sensitive data at rest is encrypted using AES-256 encryption
- Authentication is managed through Hercules Auth (OIDC-compliant) with support for Google, Microsoft, and email OTP sign-in methods
- Payment processing is handled by PCI-DSS-compliant Stripe - we never store your full credit card number
- Role-based access control (RBAC) restricts internal data access to authorized personnel only
- Regular security audits and vulnerability assessments are conducted
- Automated monitoring for suspicious activity and unauthorized access attempts
While we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data:
- Right of Access - request a copy of the personal data we hold about you
- Right to Rectification - request correction of inaccurate or incomplete data
- Right to Erasure - request deletion of your personal data ("right to be forgotten")
- Right to Restrict Processing - request limitation on how we process your data
- Right to Data Portability - receive your data in a structured, machine-readable format
- Right to Object - object to processing based on legitimate interests or direct marketing
- Right to Withdraw Consent - withdraw previously given consent at any time without affecting the lawfulness of prior processing
To exercise any of these rights, please contact us at admin@frankai.ae . We will respond within 30 days.
10. Mobile Applications
FRANK AI is available on iOS (Apple App Store) and Android (Google Play Store). Our mobile apps may additionally collect:
- Device Permissions - camera (for document scanning), photo library (for uploads), push notifications, and biometric authentication data (stored locally on device only).
- App Usage Metrics - screen views, feature usage, app launch frequency, crash reports, and performance data via platform-native analytics (Apple App Analytics, Google Firebase).
- Background Location - we do not collect background location data. Approximate location from IP address may be used for area-relevant content.
- Push Notifications - device tokens are collected when you opt in. You can disable notifications through your device settings at any time.
- Offline Data - certain features may cache data locally on your device for offline use via our Progressive Web App (PWA) service worker.
Mobile apps are subject to additional terms from Apple and Google. Please review their respective privacy policies.
11. Subscriptions & Payments
- Subscription payments are processed by Stripe, a PCI-DSS Level 1 certified payment processor. We do not store your credit or debit card number on our servers.
- We store your subscription tier, billing cycle, payment status, and transaction history for account management and invoicing.
- Promotional codes and affiliate referral discounts are tracked to ensure accurate billing and commission calculations.
- Subscription data may be shared with our affiliate partners solely for commission attribution purposes, limited to transaction confirmation and plan type.
- Auto-renewal information and payment failure notifications are sent via the email associated with your account.
12. Third-Party Services
We integrate with the following third-party services:
- Hercules - hosting, authentication (OIDC), and backend infrastructure
- Stripe - payment processing and subscription management
- OpenAI - AI-powered content generation, analysis, and conversational features
- Twilio - WhatsApp Business API for two-way communication
- Infobip - transactional email delivery and SMS services
- Real estate data providers - off-plan property project data and developer information
- Gamma - AI-powered presentation and photo card generation
- Apple / Google - mobile app distribution, in-app analytics, and push notifications
Each third-party service has its own privacy policy. We encourage you to review them. We are not responsible for their data practices beyond our contractual agreements.
13. Children's Privacy
FRANK AI is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If we discover that a child under 18 has provided us with personal data, we will delete it promptly. If you believe a minor has submitted data to us, please contact us at admin@frankai.ae .
14. International Data Transfers
FRANK AI is headquartered in Dubai, UAE. Your data may be processed and stored in the UAE and in other jurisdictions where our service providers operate, including the United States and the European Economic Area.
Where data is transferred outside the UAE, we ensure appropriate safeguards are in place, including:
- Standard contractual clauses approved by relevant authorities
- Data processing agreements with all third-party processors
- Compliance with UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection
- Adherence to DIFC Data Protection Law (where applicable)
15. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes:
- We will post the updated policy on this page with a new "Last Updated" date
- For significant changes, we will notify you via email or in-app notification
- Continued use of the platform after updates constitutes acceptance of the revised policy
- If you disagree with the changes, you may close your account and request data deletion
16. Contact Us
For any privacy-related inquiries, data access requests, or complaints, please contact us:
FRANK AI (operated by RE FRANK TECHNOLOGY L.L.C)
Website: https://frankai.ae
Website activity measurement
FRANK uses first-party, anonymous session measurement to understand visits to its public website. We record page paths, section engagement, button interactions, approximate country, device category and referral domain. A random session reference is kept in this browser tab’s session storage and renewed after inactivity. Visitor analytics does not capture form text, payment details or full IP addresses. Browser Global Privacy Control and Do Not Track requests disable this measurement.
Activity reports cover the most recent 90 days. Older activity records are cleared when the private dashboard refreshes. Private dashboard access is restricted to the authorized owner. Enquiry details are stored separately so our team can respond to your request. For questions, contact wael.handous@frankai.ae.