Privacy Policy

Khobraa Alsahraa Cleaning Services, operating in the UAE, is the controller responsible for the personal data described in this policy.

• Privacy email: info@khobraaalsahraa.com
• Business address: Office no. F1-281, Green Community Lake Apartment building 4, DIP 1, Dubai, UAE

This policy applies to the Khobra Cleaning website, customer booking service, native mobile applications, mobile web wrapper, and operational portals used by authorized customers, administrators, cleaners, drivers, and other personnel.

It explains what personal data we process, why we process it, who may receive it, how long we keep it, and the choices and rights available to you.

Depending on how you use Khobra Cleaning, we may process:

• Account and profile data: name, email, phone number, password hash, profile photo, role, account status, and last login information.
• Address, optional GPS, and booking data: saved addresses, service address, city, area, optional precise latitude and longitude when you choose phone GPS, requested service, appointment details, duration, crew size, notes, preferences, recurrence, status, cancellation or no-show information, and staff assignments.
• Payment and transaction data: payment method, invoices, amounts, bank transfer details, payment proof, verification remarks, and transaction history. The current service does not collect payment card numbers.
• Communications and content: complaints, responses, resolution notes, ratings, comments, and files or images you choose to upload.
• Notification data: in-app notification records, browser push subscriptions, and mobile push tokens.
• Workforce and operational data: contact and address details, employee or driver identifiers, skills, attendance, leave, payroll or salary information, driver licence and vehicle information, trips, mileage, expenses, fuel costs, and receipts.
• Technical and security data: IP address used for rate limits and security, session identifiers, request identifiers, device or browser security signals, and limited server error records.
• Device permissions and local storage: foreground location permission only when you choose phone GPS, optional notification permission, secure native session storage, and limited mobile wrapper storage for push status, tokens, and pending navigation.

Manual address entry remains available. The app requests a one-time foreground GPS reading only after you select Use phone GPS. It stores the resulting latitude and longitude with the saved service address and booking. It does not collect background or continuous location. We do not currently use advertising SDKs, behavioral advertising trackers, contacts, microphone, or broad device storage access.

We use personal data to:

• create and secure accounts;
• provide estimates, manage bookings, and deliver cleaning services;
• assign cleaners and drivers and coordinate service delivery;
• send account, booking, payment, complaint, and operational communications;
• process and verify payments and maintain transaction records;
• provide support and resolve complaints or disputes;
• manage authorized workforce operations, payroll, dispatch, expenses, and permissions;
• prevent fraud, abuse, unauthorized access, and excessive automated requests;
• maintain and secure the service; and
• comply with legal, accounting, regulatory, and law enforcement obligations.

We do not use personal data for third-party behavioral advertising and we do not sell personal data.

Where the UAE Federal Personal Data Protection Law applies, we rely on contract necessity, applicable legal obligations, permitted security and legal-claim purposes, permitted employment administration, or consent where consent is required.

When consent is the applicable ground, you may withdraw it at any time. Withdrawal does not affect earlier lawful processing or processing permitted on another legal ground.

We disclose only information reasonably needed for the relevant purpose to:

• authorized administrators, support personnel, cleaners, and drivers;
• our hosting and database providers;
• Cloudinary for user-selected images and files;
• Cloudflare Turnstile for bot and misuse detection;
• Google Firebase Cloud Messaging, Apple Push Notification service, and browser push providers for notifications;
• Google Maps, only when you choose to open a saved GPS pin in Maps, which receives the coordinates included in that link;
• professional advisers, auditors, insurers, or corporate transaction participants where necessary; and
• courts, regulators, or law enforcement where disclosure is required or permitted by law.

Service providers may process personal data only for the services they provide to us, subject to their contracts and applicable law. We do not permit them to use Khobra Cleaning data for their own advertising.

The web service uses an essential secure session cookie. The native app stores its session token in secure device storage. The mobile web wrapper uses limited local storage for push status and navigation. We do not currently use analytics or advertising cookies.

Some providers may process or store personal data outside the UAE. Before a transfer, we are responsible for assessing the destination and applying contractual or other safeguards required by applicable UAE data protection law.

We keep personal data only as long as reasonably needed to provide the service, maintain account and transaction history, handle complaints and disputes, prevent fraud, and meet legal, accounting, tax, employment, or regulatory requirements.

Different records require different periods. When data is no longer needed, we will delete it, anonymize it, or securely isolate it until deletion is possible. Account deactivation does not automatically delete associated records that must be retained for a permitted purpose.

Our safeguards include password hashing, encrypted HTTPS connections for the production mobile service, secure session controls, role-based access restrictions, and protected device storage for native app sessions. No system is completely secure. Please protect your password and notify us if you believe your account or personal data has been compromised.

Subject to applicable law and its exceptions, you may request information, access, portable data, correction, deletion, restriction, objection, consent withdrawal, or an end to certain processing. You may also complain to the competent data protection authority.

Contact info@khobraaalsahraa.com for these requests. We may verify your identity and clarify the request's scope. We may retain or refuse to delete information where an exception or legal obligation applies and will explain the reason when required.

Customers can delete an authenticated account in Profile → Security, or submit a public deletion request. Information that we are legally permitted or required to retain remains protected and limited to the permitted purpose. This policy is draft-only until legal company details and a monitored privacy contact are supplied.

Push notifications are optional and can be disabled in your device or browser settings. This does not stop essential service communications that we are permitted to send through other channels.

Khobra Cleaning is not designed for children under 18, and we do not knowingly seek to create accounts for them. Contact info@khobraaalsahraa.com if you believe a child has provided personal data.

We may update this policy when our service, providers, or legal obligations change. We will publish the updated policy with a new effective date and provide additional notice when required.

This policy is designed with reference to UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data and applies to Khobraa Alsahraa Cleaning Services' UAE operations.

Read the official UAE legislation