Nafaa's Privacy Policy
This Privacy Policy applies to the Nafaa landing page/website and related lead forms and communications. It does not replace the in-app Privacy Policy that will apply when the Nafaa mobile application is launched.
Operator: NAFAA PORTAL (Trade License No. 1503573)
Registered Address: Office 205-9, HH Shaikh Saud Bin Saqr Al Qassimi Building, Al Muteena, Deira, Dubai, United Arab Emirates
Support: info@nafaa.app | +971 52 225 7100
Effective Date: 16/01/2026
Last Updated: 16/01/2026
This Privacy Policy governs how we collect, use, disclose, store, and protect personal data when you visit or interact with the Nafaa website/landing page (the “Website”), including waitlist or event registration forms and related communications. This policy does not cover the Nafaa mobile application.
We may collect the following categories of personal data when you use the Website:
Contact data: name, email address, phone number (only if you submit it)
Student-related data (if requested by the form): university/school name and student-status selection
Technical data: IP address, device type, browser type, operating system, and basic website interaction events (if analytics is enabled)
Cookies/online identifiers: cookies and similar technologies (if enabled on the Website)
We use personal data to:
Operate the waitlist and contact you about launch access, onboarding steps, or event information
Respond to your inquiries and provide support
Improve the Website (performance, reliability, and content)
Maintain security, prevent abuse, and protect our systems and users
We process personal data using one or more lawful bases depending on the context, including:
Consent (e.g., you submit a form or opt in to communications)
Legitimate interests (e.g., security, fraud/abuse prevention, service improvement), where permitted
Steps taken at your request prior to entering into a contract (e.g., early access onboarding communications)
If you opt in to receive updates, you may opt out at any time by:
Using the unsubscribe mechanism in the message (where provided), or
Contacting us at info@nafaa.app from the email address you used to sign up
We may share personal data only with:
Service providers that help operate the Website and communications (e.g., hosting, email delivery, analytics), subject to confidentiality and security obligations
Authorities or third parties where required by applicable law, lawful requests, or to protect rights, safety, and security
Some service providers may process data outside the UAE. Where transfers occur, we apply appropriate safeguards and transfer only where permitted under applicable law.
We retain Website lead data only as long as necessary to operate the waitlist and launch communications, unless a longer period is required by law or needed for security, dispute handling, or compliance. You can request deletion at any time.
We apply reasonable technical and organizational measures to protect data, including:
Encryption in transit (TLS) where supported
Access controls and least-privilege principles
Monitoring and security safeguards
No system is completely secure. If you believe your information has been compromised, contact us.
Subject to applicable law, you may request:
Access to your personal data
Correction of inaccurate data
Deletion/erasure of data
Withdrawal of consent (where consent is the basis)
The Website is not intended for children under 16. If you believe a child has provided personal data, contact us to request deletion.
We may update this policy from time to time. We will update the “Last Updated” date and publish the revised version on the Website.
For privacy questions or requests, contact info@nafaa.app.