Legal

Privacy Policy

Dirhamly is a budgeting app for people living in the UAE. This policy explains what we collect, why, who processes it on our behalf, and how you get it deleted.

Last updated: 14 August 2026

This policy is written to align with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”). Dirhamly is the data controller for the information described below.

The short version

  • We never sell your data, and we never use it for advertising.
  • Dirhamly does not connect to your bank. Every figure in the app is one you typed in yourself.
  • Deleting your account deletes your data.

What we collect

We collect only what the app needs in order to work:

  • Account details — your email address, and the password hash held by our authentication provider.
  • Income — your salary amount and the salary day your cycle resets on.
  • Transactions — expenses you record, including amount, category, date and any note you add.
  • Bills and commitments — recurring bills, rent, subscriptions, and monthly commitments with their amounts and due dates.
  • Remittances — transfers you log, including amount, destination country and exchange rate at the time.
  • Credit cards — card nicknames, limits, statement dates and balances you enter. We never collect card numbers, CVVs or expiry dates.
  • AI chat messages — the questions you ask Dir, the in-app money coach, and the financial figures sent with them so it can answer using your real numbers.
  • Push notification tokens — a device token so we can send the daily safe-spend reminder and salary-day alerts you opted into.
  • Diagnostics — crash reports and anonymous product analytics (screens opened, features used). These are linked to an opaque user ID, never to your email or your amounts.

Why we process it

We process this data to calculate your Safe Daily Spend, run the features you asked for, keep the app stable, and answer your support requests. Our legal bases under the PDPL are performance of our contract with you, your consent (for notifications and the AI coach), and our legitimate interest in keeping the service secure and working.

Who processes data on our behalf

We use a small number of processors. Each is bound to use your data only on our instructions:

  • Supabase — database and authentication. Stores your account and all financial records described above.
  • Anthropic — powers Dir, the AI coach. Receives your question plus the financial context needed to answer it. Anthropic does not use this data to train its models.
  • Sentry — crash reporting. Receives error and stack information, tied to an opaque user ID.
  • PostHog — product analytics. Receives which screens and features are used, tied to an opaque user ID. Autocapture is switched off so no on-screen text or amount is recorded.

Some of these providers process data outside the UAE. Where they do, transfers are made under the safeguards permitted by the PDPL and the provider's own contractual commitments.

Security

Your data is encrypted in transit and at rest. Access is scoped per user at the database level, so one account can never read another account's records.

Retention

We keep your data for as long as your account exists. When you delete your account, your personal data is deleted. Backups roll off on their own schedule and are overwritten within 30 days. Aggregated, non-identifying statistics may be retained.

Your rights

Under the PDPL you may:

  • Access the personal data we hold about you and ask how it is processed.
  • Correct anything that is inaccurate — most fields are editable directly in the app.
  • Delete your account and data, in the app under Profile → Delete my account, or via our deletion request form.
  • Withdraw consent for notifications or the AI coach at any time, without losing access to the rest of the app.
  • Object or restrict processing, and lodge a complaint with the UAE Data Office.

To exercise any of these, email support@dirhamly.com. We respond within 30 days.

Children

Dirhamly is not intended for anyone under 18, and we do not knowingly collect their data.

Changes to this policy

If we make a material change we will update the date at the top and notify you in the app before the change takes effect.

Not a licensed financial service

Dirhamly is a personal budgeting tool. It is not a bank, and it is not licensed by the UAE Central Bank, the Securities and Commodities Authority, or any other financial regulator. Nothing in the app is financial, investment, tax or legal advice, and you remain responsible for your own financial decisions.

Contact

Questions about this policy? Email support@dirhamly.com.