Privacy Policy for Oqaabi App

Effective Date: April 23, 2026

Confidence Way - FZCO (“we,” “our,” or “us”), a company registered in the United Arab Emirates, operates the Oqaabi mobile application (“App”). We are committed to protecting your privacy through a strict Privacy-First architecture. This Privacy Policy explains how we handle information in compliance with the requirements of the Apple App Store and Google Play Store. By using the App, you acknowledge that you have read and understood this Privacy Policy.

1. Data Collection and Usage

We are committed to minimizing data collection. We do not collect personally identifiable information (PII) such as your name, email address, phone number, contacts, photos, or precise location. You are not required to create an account to use the App.

We only process limited technical data necessary to operate the App securely and efficiently. This includes temporary, anonymous Session IDs used to maintain real-time connectivity, and technical request data required for system functionality and security. These elements are purely functional, are not linked to your identity, and cannot be used to identify you.

2. Third-Party Services and Infrastructure

The App operates in a clean, privacy-focused environment. We do not use advertising SDKs, tracking tools, or third-party analytics services (such as Firebase Analytics or AdMob). We use Amazon Web Services (AWS) as a secure infrastructure provider to process requests and deliver responses.

3. Local Biometric Security (Face ID / Touch ID)

Oqaabi uses your device’s native biometric authentication (e.g., Face ID or Touch ID) to secure access to locally stored data. All biometric processing is handled entirely by your device’s operating system. We do not access, collect, store, or transmit your biometric data. The App only receives a simple authentication result (success/failure).

4. Artificial Intelligence & Message Processing

User messages are securely transmitted through AWS infrastructure to Amazon Bedrock, which generates AI responses. Requests are processed without any user identifiers. Data is transmitted securely and used only to generate responses.

According to AWS service policies, Amazon Bedrock does not use your inputs or outputs to train or improve its models, and data is processed only for the duration necessary to respond to your request.

5. Server Logging and Technical Data

For security, monitoring, and system reliability, our infrastructure may automatically process limited technical metadata, including:

  • IP address: processed at the network level
  • Request timestamps: date and time of each API call
  • HTTP details: request/response metadata (e.g., status codes, response size)

These logs do not include chat content or personal identifiers. They are used strictly for security, troubleshooting, and abuse prevention, and are automatically deleted within 90 days.

6. Data Retention and Local Storage

We follow a Zero Server Retention approach for user content. We do not store chat messages or user data on our servers. All conversations and app data are stored locally on your device only. You have full control over your data at all times.

7. Data Deletion and User Control

Because your data is stored only on your device, you can permanently delete all data at any time by uninstalling the App, or by clearing app data through your device settings. Once removed, the data cannot be recovered.

8. Your Privacy Rights

Since we do not collect or store personal data on our servers, we do not maintain user profiles or identifiable records. Requests for access, correction, or deletion of personal data do not apply in the traditional sense. However, you retain full control over your data through your device.

9. Children’s Privacy

The App is not intended for children under the age of 13 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If you believe a child has provided personal information, please contact us and we will take appropriate action.

10. Device Permissions

Oqaabi requests only the minimum permissions required to function:

  • Internet Access: to communicate with backend services
  • Biometric Authentication: to secure local access
  • Network State: to detect connectivity status

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be reflected by updating the “Effective Date.” Continued use of the App after updates constitutes acceptance of the revised policy.

12. Contact Information

If you have any questions or concerns regarding this Privacy Policy, please contact:
Confidence Way - FZCO
Email: yalfutuhi@confidenceway.com
Website: www.confidenceway.com