ENDEAR

Privacy Policy

Privacy Policy

MiBiT FCZO ("we", "us", "our") operates the website aymani.ae (the "Service"). This page informs you of our policies regarding the collection, use, and disclosure of personal information when you use our Service and the choices you have associated with that data.

We use your data to provide and improve the Service. By using the Service, you agree to the collection and use of information in accordance with this policy.

1. Information We Collect

1.1 Information You Provide

While using our Service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you ("Personal Information"), including but not limited to:

  • Contact form / Register Your Interest: first name, last name, salutation, email address, phone number

  • Admin panel (where applicable): name, email, role, and authentication credentials (stored as a cryptographic hash only)

  • Communications: when you contact us directly, we may keep a record of that correspondence

1.2 Health and Wellness Data (AYMANI Smart Band)

The AYMANI Smart Band is a consumer wearable designed to monitor general wellness indicators. When paired with the AYMANI mobile application (currently in pre-release), the device may collect:

  • Estimated blood glucose readings (non-medical)

  • Blood pressure estimates (non-medical)

  • Blood oxygen saturation (SpO₂)

  • Sleep duration and quality metrics

  • Activity and movement data

Important: The AYMANI Smart Band is a lifestyle and wellness product. It is not a medical device and is not intended to diagnose, treat, cure, or prevent any disease. Always consult a qualified healthcare professional for medical decisions.

1.3 Usage and Technical Data

We automatically collect certain information when you visit, use, or navigate the Service, including:

  • IP address

  • Browser type and version

  • Operating system

  • Referring URLs and pages visited

  • Date and time of visit

  • Pages viewed and time spent on them

  • Device identifiers

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide and maintain the Service — including processing your registration interest, sending launch notifications, and operating the admin panel

  • To notify you about changes to our Service

  • To enable interactive features of the Service when you choose to use them

  • To provide customer support and respond to enquiries

  • To analyse usage so we can improve the Service

  • To monitor and secure the Service — detecting, preventing, and addressing technical issues, fraud, security incidents, and abuse (including via hCaptcha and rate limiting)

  • To comply with legal obligations under applicable law, including UAE Federal Decree-Law No. 45 of 2021 (Personal Data Protection Law)

3. Legal Basis for Processing

If you are in the European Economic Area (EEA), the United Kingdom, or the United Arab Emirates, our legal basis for processing your personal data depends on the context:

  • Consent — when you submit the contact form, register your interest, or subscribe to updates

  • Contract — when processing is necessary to perform a contract with you (for example, fulfilling an order once the product launches)

  • Legal obligation — when we must comply with applicable laws

  • Legitimate interests — for operating, securing, and improving our Service, provided these interests are not overridden by your fundamental rights and freedoms

4. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and analyse the Service:

  • Strictly necessary cookies — required for the Service to function, such as authentication session cookies and language preferences

  • Analytics cookies — anonymised usage statistics that help us understand how visitors use the Service (only if enabled)

  • Bot-protection cookies — set by hCaptcha to detect automated traffic and prevent abuse on the contact form

You can configure your browser to refuse all cookies or to alert you when a cookie is being sent. However, if you disable certain cookies, some portions of the Service may not function properly.

5. How We Share Your Information

We do not sell your personal information. We share data only with the following categories of recipients:

  • Service providers that process data on our behalf, including:

    • Hosting and infrastructure — CloudPanel-managed server located in the United Arab Emirates

    • Email delivery — transactional email providers, only when you have opted in

    • Bot protection — hCaptcha (privacy policy available at hcaptcha.com/privacy)

    • Database — MariaDB

    • Caching layer — Redis

  • Legal and regulatory authorities when required by UAE law or valid legal process

  • Business successors in connection with a merger, acquisition, restructuring, or sale of assets

We require all third parties to respect the security of your personal data and to treat it in accordance with applicable law. Our service providers are not permitted to use your personal data for their own purposes.

6. International Data Transfers

Your data is primarily stored and processed in the United Arab Emirates. Some of our service providers may be located in other countries. Where we transfer your personal data outside the UAE or EEA, we ensure that appropriate safeguards are in place (such as standard contractual clauses or adequacy decisions) to protect your data in accordance with this Privacy Policy.

7. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements.

  • Contact form submissions: retained on our pre-launch interest list and for up to 24 months after the product launch, unless you request earlier deletion

  • Admin authentication logs: retained for 90 days

  • Server access logs: retained for 30 days, then anonymised or deleted

  • Backups: retained for 7 days, then overwritten on a rolling basis

8. Your Rights

Depending on your jurisdiction, you have some or all of the following rights with respect to your personal information:

  • Access — request a copy of the personal information we hold about you

  • Rectification — correct information that is inaccurate or incomplete

  • Erasure ("right to be forgotten") — request deletion of your personal information

  • Restriction of processing — ask us to suspend processing of your personal information

  • Objection to processing — object to our processing of your personal information

  • Data portability — request transfer of your personal information to another party

  • Withdrawal of consent — where we rely on consent, you may withdraw it at any time without affecting prior lawful processing

9. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

  • TLS/SSL encryption for all data in transit

  • Password hashing (bcrypt) for stored credentials

  • Principle-of-least-privilege access controls for staff

  • Regular encrypted backups stored at rest

  • Network isolation of database and cache services

  • Ongoing security monitoring and access logging

However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

10. Children's Privacy

Our Service is not directed at anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you believe your child has provided us with Personal Information, please contact us. If we become aware that we have collected Personal Information from a child without verification of parental consent, we will take steps to remove that information from our servers.

11. Links to Other Websites

Our Service may contain links to other websites that are not operated by us. If you click on a third-party link, you will be directed to that third party's website. We strongly encourage you to review the Privacy Policy of every site you visit. We have no control over, and assume no responsibility for, the content, privacy policies, or practices of any third-party sites or services.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date at the top of this page. Where required by law, we will provide additional notice (for example, by email or via a banner on the Service).

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.