Privacy & data-protection notice

1Who we are (the data controller)

Mentor of Dubai is a leadership-mentoring web application delivered as an initiative aligned with the Mohammed Bin Rashid Centre for Leadership Development. The Centre and its delivery partner act as the controller of your personal data — they decide why and how it is processed. If you are unsure who to contact about your data, use the contact details in section 9; we will route your request to the responsible team.

2What personal data we collect

We collect only what the programme needs. Depending on how you use the app, this includes:

• Account details — your display name, email address, and a securely-hashed password.
• Optional profile details — government entity, nationality, phone number and a masked government/Emirates ID reference, only if you choose to provide them.
• Conversation content — the text of your coaching chats and class questions, and your progress, scores and certificates, so your mentor can remember your sessions and continue your journey.
• Live microphone audio — when you speak to a mentor in a class, your microphone audio is processed in real time to understand your question and generate a spoken reply. It is used to answer you in the moment; the app does not store your voice as an audio recording (a text transcript may be saved as part of your conversation history above).
• Camera — your camera is optional and off by default. When you turn it on, the video stays on your device for your own self-view only; it is never uploaded or recorded.
• Basic technical data — sign-in events and activity needed to operate and secure the service.

3How we use your data

• To create and secure your account and sign you in.
• To deliver the mentoring programme — run your weekly classes, remember your sessions, track progress, assess mastery and issue certificates.
• To understand your spoken and typed questions and generate the mentor's replies.
• To operate, secure and improve the service, and to comply with legal obligations.

4Legal basis for processing

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), we rely on your consent — given when you create your account — to store your account and conversation history, and on the necessity of performing the service you have asked for to deliver your classes. You can withdraw consent at any time by deleting your data (see section 7); withdrawing consent does not affect processing that already took place.

5Who we share your data with (processors & third parties)

We share personal data only with service providers that help us run the app, under agreements that require them to protect it and use it only on our instructions:

• Hosting & database — the cloud infrastructure that runs the application and stores your account and conversation data.
• AI language services — providers whose language models generate the mentor's coaching replies from your questions.
• Hosted avatar & voice services — the mentors are rendered by third-party real-time avatar providers: Tavus, Anam and HeyGen. For those mentors, your live microphone audio and messages are streamed to the provider, which performs speech-to-text, response generation and text-to-speech to make the avatar speak. These are external companies based outside the UAE and process this data outside the UAE.
• What the mentor is told about you — so that a mentor can continue where you left off, a short briefing is included at the start of a session: your first name and how you wish to be addressed, the summary you approved from your تعارف introduction and CV, and the brief takeaways from your previous sessions. Because the mentor is rendered by the avatar provider above, that briefing is sent to them as part of the conversation. You can review, change or delete all of it at any time from your profile.

6How long we keep your data

By default, your account and conversation history are kept for as long as you have an account — that is, until you delete them. We do not automatically delete them after a fixed period, so that your mentor can remember your journey across sessions. You are always in control: you can delete your data at any time (section 7), and when you do, your account and conversation history are removed. Camera video is never stored, and live microphone audio is not retained as a recording.

7Your rights & how to exercise them

Under the UAE Personal Data Protection Law you have the right to:

• Access — ask what personal data we hold about you.
• Correct — update inaccurate account or profile details.
• Delete — remove your account and conversation history. You can do this yourself from your profile in the app at any time.
• Withdraw consent — stop future processing that relies on your consent.
• Object / restrict — ask us to limit how we process your data.
• Complain — raise a concern with us and, if unresolved, with the UAE Data Office.

To exercise any right, use the delete control in your profile, or contact us using section 9. We aim to respond within the timeframes set by the law.

8How we protect your data

Access is over encrypted (HTTPS) connections, passwords are stored only as secure hashes, sensitive identifiers such as any government/Emirates ID reference are encrypted at rest, and access to the systems that hold your data is restricted to authorised operators. No online service can be guaranteed perfectly secure, but we take reasonable measures appropriate to the sensitivity of the data.

9Contact us about your data

For any question about this notice or to exercise your rights, please reach us through the Contact us page. Tell us it concerns your personal data and we will route it to the responsible team.