This privacy policy applies to the AROOH app for mobile devices, together with any related services operated by Daeeim (collectively, the "Application").
Data Controller Identity For the purposes of the General Data Protection Regulation (GDPR) and other applicable data protection laws, Daeeim is the "Data Controller" of your personal information. Daeeim is hereby referred to as the "Service Provider".
Information Collection and Use
The Application collects information when you download and use it. This information may include information such as:
Account Registration Data: When you create an account or log in, we collect your email address, name, profile picture, and authentication tokens from third-party identity providers (specifically Google Sign-In and Apple Sign-In).
Payment Information: If you make purchases (e.g., tickets, subscriptions), payments are securely processed by third-party providers (Stripe, Google Pay, Apple Pay). We do not store your full credit card details, but we may receive transaction summaries and billing history.
Generative AI Interactions: If you use AI-powered features within the Application (e.g., trip planning assistants via Google Generative AI), your text inputs, queries, and contextual data may be processed to generate responses.
Device and Usage Data: Your device's Internet Protocol (IP) address, operating system, device identifiers, and the time and date of your visit.
Location Information: Precise or approximate location data (GPS, Wi-Fi, network) if you grant permission, to enable routing, mapping, and relevant transit features.
App Activity: The pages of the Application that you visit, the time spent on those pages, search queries, and route preferences.
Special Categories of Personal Data We do not intentionally collect or process "special categories" of personal data under GDPR Article 9 (such as data revealing racial or ethnic origin, political opinions, religious beliefs, or health data). Please do not submit such sensitive information through the Application.
Legal Basis for Processing (GDPR)
If you are an individual in the European Economic Area (EEA) or the UK, we collect and process information about you only where we have a legal basis for doing so under applicable EU laws (such as the General Data Protection Regulation - GDPR). Our legal bases include:
Contractual Necessity: Where we need the personal data to provide the Application services, such as setting up your account, providing routing information, or customer support.
Consent: Where you have given us explicit consent to process your personal data for a specific purpose, such as accessing your device's precise location.
Legitimate Interests: Where the processing is necessary for our legitimate interests, such as improving the Application, maintaining security, or protecting our legal rights, provided those interests are not overridden by your rights and freedoms.
Legal Obligation: Where we need to process your data to comply with a legal obligation.
Statutory or Contractual Requirements to Provide Data Providing Account Registration Data is a contractual requirement necessary to create a profile and use advanced features of the Application. Failure to provide this data means you cannot register for an account. Providing Location Information is optional and based on consent; failure to provide it will prevent the use of real-time navigation features but will not prevent basic offline usage of the Application.
Automated Decision-Making and Profiling While the Application utilizes artificial intelligence (Google Generative AI) for trip planning assistance, we do not use your personal data for automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you (as defined in GDPR Article 22). AI features are strictly advisory.
Cookies and tracking technologies
The Application or its third-party SDKs may use cookies, SDKs, pixels, and similar technologies to support functionality, analytics, or service delivery. Where required by applicable law, the Service Provider will obtain consent before using non-essential tracking technologies.
Location Information
The Application collects your device's location to provide location-based features, improve the Application, and support related services.
Geolocation Services: The Service Provider may use location data to provide location-based features or content.
Analytics and Improvements: Aggregated location data may help the Service Provider understand usage patterns and improve performance.
Third-Party Services: Location data may be shared with third-party services used to support Application functionality, subject to this privacy policy and applicable law.
Your European Privacy Rights (GDPR)
If you reside in the EEA or the UK, you have the following rights regarding your personal data:
Right of Access: You can request a copy of the personal data we hold about you.
Right to Rectification: You can request that we correct any inaccurate or incomplete personal data.
Right to Erasure ('Right to be Forgotten'): You can request that we delete your personal data when it is no longer necessary or if you withdraw your consent.
Right to Restrict Processing: You can ask us to suspend the processing of your personal data under certain conditions.
Right to Data Portability: You can request the transfer of your personal data to you or a third party in a structured, commonly used, machine-readable format.
Right to Object: You can object to the processing of your personal data based on legitimate interests or for direct marketing.
Right to Withdraw Consent: Where we rely on your consent to process your data (e.g., location tracking), you have the right to withdraw that consent at any time through your device settings.
To exercise any of these rights, contact the Service Provider at eng.mazen.embaby@gmail.com. We may require you to verify your identity before responding to such requests. You also have the right to lodge a complaint with your local Data Protection Authority.
Your California privacy rights (CCPA/CPRA)
If you are a California resident, you have the right to know what personal information is collected, the right to delete personal information, the right to opt out of the sale or sharing of personal information, and the right to non-discrimination for exercising these rights. To exercise your CCPA/CPRA rights, contact the Service Provider at eng.mazen.embaby@gmail.com.
The Service Provider may use the information you provide to send important information, required notices, and, where permitted by law, marketing communications.
For a better experience while using the Application, the Service Provider may require you to provide certain personally identifiable information. The information the Service Provider requests will be retained and used as described in this privacy policy.
Third Party Access
Only aggregated, anonymized data is periodically transmitted to external services to aid the Service Provider in improving the Application and their service. The Service Provider may share your information with third parties in the ways that are described in this privacy statement.
International Data Transfers
The Service Provider or its third-party service providers may transfer personal data to countries outside your country of residence, including outside the European Economic Area (EEA). Where applicable law requires safeguards for international transfers, the Service Provider will use appropriate mechanisms.
Standard Contractual Clauses (SCCs) approved by the European Commission
Adequacy decisions or other legally recognized transfer mechanisms
Your consent, where required and legally permitted
Data protection laws in other countries may differ from those in your jurisdiction. Where required by law, the Service Provider will apply appropriate safeguards and obtain any consent required for the transfer.
Please note that the Application utilizes third-party services that have their own Privacy Policy about handling data. Below are the links to the Privacy Policy of the third-party service providers used by the Application:
The Service Provider may disclose User Provided and Automatically Collected Information:
as required by law, such as to comply with a subpoena, or similar legal process;
when they believe in good faith that disclosure is necessary to protect their rights, protect your safety or the safety of others, investigate fraud, or respond to a government request;
with their trusted services providers who work on their behalf, do not have an independent use of the information the Service Provider discloses to them, and have agreed to adhere to the rules set forth in this privacy statement.
Opt-Out Rights
You can stop further collection of information from your mobile device by uninstalling the Application. Uninstalling will stop the Application from collecting data from your device, but it does not automatically delete information that has already been transmitted to the Service Provider or to third parties.
To request deletion of your personal data, to withdraw consent, or to exercise any of your rights, contact the Service Provider at eng.mazen.embaby@gmail.com.
Data Retention Policy
The Service Provider retains personal data based on its necessity for the stated purposes:
User Provided Data: Retained for the duration of your use of the Application plus 12 months thereafter, unless longer retention is required by law
Automatically Collected Data: Retained for up to 24 months from collection, unless longer retention is required for legal compliance
Aggregated and Anonymized Data: Retained indefinitely as it no longer identifies you
Data required for legal compliance: Retained as long as required by applicable law
You may request deletion of your personal data, subject to any legal obligation to retain it. If you want the Service Provider to delete User Provided Data submitted through the Application, please contact them at eng.mazen.embaby@gmail.com. Please note that some User Provided Data may be required for the Application to function properly.
Children
The Application is not intended for children under 13 years of age, or such higher age as required by applicable law. The Service Provider does not knowingly solicit data from children or market the Application to them.
Where parental or guardian consent is required under applicable law, the Application is not intended for use without that consent. The Service Provider does not knowingly collect personally identifiable information from children under 13 years of age in violation of applicable law. In the event the Service Provider discovers that a child has provided personal information, the Service Provider will immediately delete this from their servers. If you are a parent or guardian and you are aware that your child has provided the Service Provider with personal information, please contact the Service Provider (eng.mazen.embaby@gmail.com) so that they will be able to take the necessary actions.
Security
The Service Provider is concerned about safeguarding the confidentiality of your information. The Service Provider provides physical, electronic, and procedural safeguards to protect information the Service Provider processes and maintains.
Data Breach Notification
If a data breach occurs that affects your personal data, the Service Provider will notify you in accordance with applicable legal requirements, including, where required, providing information about the nature of the breach and the steps being taken to address it.
Changes
The Service Provider may update this Privacy Policy from time to time. The Service Provider will notify you of material changes by posting the updated Privacy Policy with an effective date. Where required by law, the Service Provider will seek your consent to material changes before they take effect.
Previous versions of this Privacy Policy will be maintained and made available upon request by contacting the Service Provider at eng.mazen.embaby@gmail.com.
This privacy policy is effective as of 2026-08-28
Your Consent
Where processing is based on consent, you provide that consent by affirmatively opting in to the relevant feature or action. You may withdraw consent at any time without affecting processing carried out before withdrawal. Processing based on other lawful bases is carried out as described above.
Contact Us / Data Protection Officer
If you have any questions regarding privacy while using the Application, wish to exercise your GDPR rights, or have questions about our practices, please contact the Service Provider (Data Controller) and our Data Protection Officer / EU Representative via email at eng.mazen.embaby@gmail.com.
This privacy policy page was generated by App Privacy Policy Generator