Nayra is operated by MPAGENCY MARKETING - FZCO, Dubai Digital Park, Dubai Silicon Oasis, Dubai, UAE. This Privacy Policy explains what data the Nayra mobile application collects, why we collect it, how we use it, and your rights regarding your data.
We are committed to compliance with the UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (UAE PDPL) and align our practices with GDPR principles where applicable.
1. Data We Collect
a) Account Data
When you create an account, we collect:
- Email address (if you sign up with email)
- Name or display name you choose
- Profile avatar (emoji character you select)
- Authentication data from Apple or Google (if you use those sign-in methods)
b) Learning Analytics
To power your personalised learning experience, we collect:
- Lesson progress and completion status
- Quiz answers and scores
- Financial Confidence Index (FCI) assessment results
- Daily streak and XP activity
- Topic categories you engage with in the AI chat
This data is required to operate the app. You cannot opt out while using the service.
c) AI Chat Messages
The Nayra Support tab uses an AI assistant powered by artificial intelligence (DeepSeek language model). When you chat, we process and temporarily store your messages to generate responses. Chat messages are retained for 12 months and then automatically deleted.
⚠️ The Nayra AI is for educational purposes only — not financial, legal, or tax advice. Always consult a licensed professional for personal financial decisions.
d) Community Content
If you post in the community feed, your post content and chosen display name (or "Anonymous") are stored and visible to other users. You can delete your own posts at any time.
e) Usage Data
We collect standard app analytics including:
- Screens viewed and features used
- App version and device type (iOS version, device model)
- Session duration
We do not use advertising identifiers (IDFA) or cross-app tracking.
2. How We Use Your Data
- To deliver and personalise the learning experience
- To track your progress and award achievements
- To power the AI chat assistant
- To show and moderate community posts
- To generate anonymous, aggregated research insights for our university partners (see Section 3)
- To send optional push notifications about streaks and new lessons (you can disable these)
- To improve the app based on aggregated usage patterns
3. Data Sharing with Partners
With your consent (given during the chat setup flow), we share anonymous, aggregated research insights with our university and institutional partners (currently DMCC and the UAE Ministry of Economy).
What is shared: Cohort-level statistics only — for example, "18–25 year olds in this cohort save X% of their income on average." Minimum group size is 5 users before any statistic is included.
What is never shared: Your name, email address, phone number, user ID, individual quiz answers, or chat messages. Ever.
You can withdraw your consent to partner data sharing at any time via Settings → Privacy in the app.
Third-Party Service Providers
We use the following sub-processors to operate the app:
- Supabase — database and authentication (EU region servers)
- DeepSeek — AI language model for the chat assistant
- Apple / Google — optional social sign-in
- Vercel — website hosting
We do not sell your data to any third party.
4. Data Retention
| Data Type | Retention Period |
|---|---|
| Account data | Until you delete your account |
| Learning progress & analytics | Lifetime of account |
| AI chat messages | 12 months, then auto-deleted |
| Community posts | Until you delete the post or your account |
| Usage analytics | 24 months |
5. Your Rights
Under the UAE PDPL and applicable law, you have the right to:
- Access — request a copy of your personal data
- Correction — ask us to correct inaccurate data
- Deletion — request deletion of your account and all associated data
- Withdraw consent — opt out of partner data sharing at any time
- Portability — receive your data in a structured, machine-readable format
To exercise any of these rights, email us at privacy@mynayra.app or use the in-app deletion option under Settings → Account → Delete Account.
6. Children's Privacy
Nayra is intended for university students aged 17 and above. We do not knowingly collect data from children under 13. If you believe a child under 13 has created an account, please contact us at privacy@mynayra.app and we will promptly delete the account.
7. Security
We use industry-standard security measures including TLS encryption in transit, row-level security in our database, and access controls. No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it responsibly to privacy@mynayra.app.
8. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you via the app and update the "Last updated" date above. Continued use of the app after changes constitutes acceptance of the updated policy.
9. Contact Us
If you have questions about this Privacy Policy or your data, contact us:
MPAGENCY MARKETING - FZCO
Dubai Digital Park, Dubai Silicon Oasis, Dubai, UAE
Email: privacy@mynayra.app