Privacy Policy

Saina ("Saina", "we", "us", "our") provides the Saina mobile application, which scans skincare and cosmetics products and shows ingredient, skin-type, and pricing information. For the purposes of the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, "PDPL") and other applicable data protection laws, Saina is the data controller responsible for the personal data described in this policy.

Questions about this policy or your data can be sent to hello@sainaapp.com.

We collect the following categories of personal data:

• Account data: the email address (and, if provided, name) you use to create and sign in to your account.
• Scan history: the barcodes/products you scan and when you scanned them, so we can show you your history.
• Favorites: products you choose to save.
• Crowdsourced submissions:if you submit a product that isn't in our database, we collect the photo you upload and any product details you enter. Submission photos are stored in a private, access-controlled storage bucket and are only used to add or verify catalog data. Please avoid including other people, faces, or unrelated personal documents in submission photos — we do not ask for this, but a photo of a product on a shelf or in your home could incidentally capture other personal imagery in the background.
• Device permissions:camera access (to scan barcodes and take submission photos) and photo library access (to pick an existing photo for a submission). We do not access your camera or photo library except when you actively use these features, and we do not collect your photo library's contents beyond the specific image you choose to submit.
• Basic technical data: information generated by your use of the app needed to keep it running securely (e.g., authentication tokens, error logs). We do not currently run advertising or analytics SDKs that track you across other apps or websites.

• To create and secure your account and let you sign in.
• To operate core features: scanning, scan history, favorites, and product search.
• To review and, where appropriate, add crowdsourced product submissions to our catalog.
• To respond to support requests you send us.
• To maintain the security, integrity, and reliability of the service.
• To comply with legal obligations.

We process your personal data on the following legal bases:

• Performance of a contract: to provide the account, scanning, history, and favorites features you request when you use the app.
• Consent:for camera and photo library access, and for any crowdsourced submission you choose to make. You can withdraw consent at any time by revoking device permissions in your phone's settings or by not submitting further content.
• Legitimate interest: to keep the service secure, prevent abuse, and improve reliability, balanced against your rights and interests.
• Legal obligation: where we must retain or disclose data to comply with applicable law.

We keep account data, scan history, and favorites for as long as your account is active. If you delete your account, we delete this data as described in Section 8, subject to any shorter retention already in place for submission photos tied to a rejected or duplicate submission, and any residual copies kept in encrypted backups for a limited period, or data we are legally required to retain for longer (e.g., for fraud prevention or legal claims).

We do not sell your personal data, and we do not run ads in the app. We share data only with:

• Supabase, our database, authentication, and file storage provider, which processes data on our behalf (as a data processor) under its own security and confidentiality commitments.
• Other service providers strictly necessary to run the app (e.g., cloud infrastructure), each bound by contract to only process data on our instructions.
• Authorities or third parties where required by law or to protect our legal rights.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data (e.g., your account email or name).
• Delete your account and associated personal data (see Section 8).
• Withdraw consent at any time for processing based on consent, without affecting processing that already took place.
• Object to or restrict certain processing based on legitimate interest.

To exercise any of these rights, email hello@sainaapp.com from the email address associated with your account.

You can delete your account and its associated data at any time:

• In the app: go to Profile → Account → Delete Account, and confirm. This permanently removes your scan history, favorites, and crowdsourced submissions tied to your account, and deletes your account itself.
• By email: if you can't access the app, email hello@sainaapp.com from your account's email address and we will delete your account and associated personal data within a reasonable time.

Some information may be retained for a limited period after deletion where necessary for legal, security, or fraud-prevention purposes, or where it exists only in encrypted backup copies pending their normal deletion cycle.

Saina is not directed at, and is not intended for use by, children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, contact us at hello@sainaapp.com so we can delete it.

Your data may be stored and processed in countries other than the one you live in, including where our infrastructure providers (such as Supabase) operate servers. Where data is transferred outside the UAE, we take steps intended to ensure it receives a level of protection appropriate to that required under the PDPL, such as relying on providers with appropriate contractual and security safeguards.

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date below and, where appropriate, notify you in the app. Continued use of Saina after a change becomes effective means you accept the updated policy.

For any question about this Privacy Policy or how we handle your data, email hello@sainaapp.com.