Privacy Policy

• Account: your name, email address, password (stored only as a one-way hash), language, theme and numerals preference, and whether two-step sign-in is on. If you sign in with Google, we receive your name and email address from Google, never your password there.
• Profile: the details you choose to give, such as your full name, nationality, the country you live in, your emirate, residency status, what describes you, why you are coming to the UAE, your interests, goals, budget band and timeline, and, if you add them, your mobile and WhatsApp numbers. Zayn can fill a field when you tell it something in a conversation; such fields are marked "Set by Zayn from your conversation" and you can change them at any time.
• Family: the people you add, with their name, relationship and, if you invite them, their email address. A connected family member sees only your name and relationship.
• What Zayn remembers: short facts you tell Zayn about yourself or your plans, so later conversations can pick up from them.
• Conversations with Zayn: your messages, Zayn's replies and any feedback you give.
• Use of the site: articles you save, how often articles are viewed (counts only) and searches. Searches that find nothing are counted, without your identity, so we know which topics to write next.
• Security: your sessions (device and last use), sign-in attempts and a record of account changes.

We do not sell your data and we do not use it for advertising.

Nuzan uses only the cookies it needs to work: nz_at and nz_rt keep you signed in, nz_csrf protects your requests, and nz_guest keeps a guest's conversation with Zayn. We use no advertising or tracking cookies.

To provide Nuzan and your account; to let Zayn answer you and remember your profile so it does not ask twice; to keep accounts secure; to send the emails your account needs (confirming your address, resetting your password and security notices), which are always sent; and to review and improve the quality of answers.

To answer you, your message and the relevant article passages are sent to our AI provider, OpenAI, which processes them on our behalf. To review answer quality we keep records of conversations with email addresses and phone numbers masked.

• Your account, profile and conversations, and visitors' conversations: kept with no time limit, so Nuzan and Zayn can pick up where you left off.
• If you delete your account, it is closed and its data is kept, so it can be restored if you ask.
• Sign-in sessions: they end after 14 days without use, and after 30 days at most.
• Answer-quality records: kept with no time limit.

Only the providers that run Nuzan for us (hosting, email delivery, the AI provider and, when you choose it, Google Firebase for signing in with Google), under contract and for that purpose, and authorities where the law requires it. Some providers may process data outside the UAE; we choose providers that protect it.

You can see and correct your profile at any time, and delete your account in Security. You can also ask us for a copy of your data, to correct or delete it, or to stop or limit a use of it. To make a request, reply to any email we have sent you.

Connections are encrypted, passwords are stored only as one-way hashes, two-step sign-in is available, and staff access to accounts is limited by role and recorded.

To help you and to improve Nuzan, authorised Nuzan staff may view your profile, family details, what Zayn remembers and your conversations with Zayn. Each time they open them they must give a reason, which is recorded with their name. Reports built from all conversations show questions and totals, not who asked.

We ask for your consent in a way that is specific, clear and given by a positive action, and we keep a record of it: what you agreed to, the wording you saw, and when. Before you use Zayn or upload a document, we ask for your consent separately and tell you who will receive the data. Information you gave for one purpose is reused for another only within what you agreed to.

When you choose a partner (for example a free zone or a consultancy), your details are sent only to the one partner you chose, and only after you agree. The same request is never sold or sent to more than one partner. A request to a partner never includes images of your identity documents, and never includes health information unless the partner is a health provider and you have given separate, explicit consent for it. Documents are shared only through a flow you authorise with UAE PASS.

Health information is kept separately from your other data. Under UAE law (Federal Law No. 2 of 2019) it stays in the UAE: it is stored, hosted and processed by AI inside the UAE, and it is not shared with anyone without your prior consent.

When data is processed outside the UAE, including by our AI provider, it is protected by a contract that gives it protection equivalent to UAE law: the provider may not use it to train its models, keeps it only for a defined period, controls who else processes it, and deletes it when asked.

Zayn is an AI assistant, not a person, and its answers are general information, not legal, financial, medical or immigration advice. If an automated answer or decision from Nuzan has a legal effect on you or seriously affects you, you can object to it and ask for a person to review it.

Nuzan accounts are for people aged 18 or over.

We may update this policy. The date at the top shows the latest version, and we will tell you about significant changes.