Privacy policy

1. Who is responsible

Controller: Dubiv Car Care LLC, Dubai, United Arab Emirates.

Contact: support@dubiv.com · 800-DUBIV (800 38248) · https://www.dubiv.com

This policy is the public privacy notice required by the App Store (https://www.dubiv.com/privacy). If UAE law requires a stricter rule than this notice, the law prevails.

2. The service this policy covers

Dubiv is an on-demand car-care service. You create a local account on your phone (no phone number, email, or password), add a vehicle, type the wash address, and a crew comes to that address. The first exterior wash booked through the official app is AED 0. Later amounts, if any, are paid in cash to the crew after the wash. The app does not take cards, Apple Pay, Google Pay, or in-app purchases.

3. Personal data we collect

Account: a local account on the device only. We do not ask for a phone number, email, or password to start. Garage and bookings stay on the phone until a live API exists.

Garage: make, model, and body type so the crew can identify the vehicle. We do not ask for a licence plate.

Bookings: services, time slot, flexi window, the address you type (emirate, area, street, building, unit, parking, and notes), order status, first-wash flag, and the cash amount due.

Location: we do not request GPS or precise location. The crew goes only to the address you type.

Device and diagnostics: app version and crash or reliability logs needed to keep the app working. We do not collect the Advertising Identifier (IDFA), and we do not run a tracking pixel across other companies’ apps or sites.

We do not collect payment-card numbers, Apple Pay tokens, government ID, contacts, photos, microphone, motion, or health data.

4. App Store privacy labels

Used for App Functionality, not used for tracking: Other User Content (typed address, vehicle make, model, and type); Product Interaction (bookings you place). Precise Location, licence plate, and Phone Number are not collected.

Data Used to Track You: none. Third-Party Advertising: none. We do not sell personal data and we do not share it with data brokers.

5. Why we use data (PDPL legal bases)

Contract: create the account, dispatch a crew to the address you typed, show order status, and calculate cash due.

Consent: there is no location permission. You may leave optional address fields blank.

Legitimate interests: prevent duplicate first-wash abuse, keep crew safe, and debug the app.

Legal obligation: keep booking and tax records where UAE law requires, including VAT records when a TRN is issued.

6. Who we share data with

Crew and dispatch see the vehicle make and model, typed address, notes, services, and slot needed to complete that job — not your full account history.

Processors who act on our instructions: hosting for the website and API (including dubiv.work) and error diagnostics. They are not permitted to use your data for their own marketing.

Authorities: we disclose data if UAE law or a competent court or regulator requires it.

Apple and Google are not controllers of your Dubiv bookings. They may process their own App Store / Play data under their policies. We do not use StoreKit or Google Play Billing for washes.

7. Transfers outside the UAE

Some processors (for example SMS or hosting) may store or access data outside the United Arab Emirates. Where that happens we use a PDPL-appropriate mechanism (contractual safeguards and a necessity assessment) so the data remains protected to a standard comparable with the PDPL.

8. Retention

Until the live booking API ships, preview builds store your profile, garage, and orders on the device (and, if you use the web preview, in that browser).

When the API is live: account and garage data are kept while the account exists. Booking records are kept for as long as UAE commercial, tax, or consumer rules require, then deleted or anonymised.

There is no SMS or one-time code. The local account exists only on the device until you delete it.

9. Account deletion (App Store 5.1.1(v))

In the app go to Settings → Delete account. That erases the profile, garage, and orders from the device and is a request to erase server copies when they exist.

We may retain information the law does not allow us to erase (for example a completed cash invoice). We will tell you if a part of the request cannot be completed.

You may also email support@dubiv.com with the subject “Delete my account”.

10. Your PDPL rights

You may request: information about processing; access to a copy of your data; correction; erasure; restriction; portability of data you provided; and to object to processing based on legitimate interests.

You may withdraw consent for location or optional profile fields at any time. You may lodge a complaint with the UAE Data Office.

To exercise a right, email support@dubiv.com. We will respond within the PDPL time limits.

11. Children

Dubiv is a real-world vehicle service for people 18 or older who can book and pay for a wash in the UAE. We do not knowingly collect data from children. If you believe a minor created an account, email support@dubiv.com and we will delete it.

12. Security

We use HTTPS for dubiv.com and dubiv.work, access controls on the server, and device-side storage for the current preview. No method of transmission is perfectly secure.

13. Changes

If we change what we collect or why, we will update this page and the date above. Material changes will also be flagged in the app Settings screen.