Privacy Policy

Who we are

WIYO ("WIYO", "we", "us") operates the website at www.wiyo.ae, the WIYO real estate platform, and the WIYO ROS mobile app for iOS and Android. The controlling entity is WIYO L.L.C-FZ, The Meydan Hotel, Grandstand, 6th Floor, Meydan Road, Nad Al Sheba, Dubai, United Arab Emirates. For any privacy question, contact us at hello@wiyo.ae.

What data we collect

When you request a demo, subscribe to insights, or contact us, we may collect:

• Your name and the name of your agency or company
• Your work email address and phone number
• Your team size and the challenge you are trying to solve
• Technical data such as IP address, browser type, and pages visited, collected through standard server logs and analytics

We do not ask for, and you should not submit, sensitive personal data (such as government IDs or financial account details) through our website forms.

How we use your data

• To respond to demo requests and sales enquiries
• To send the UAE real estate insights you subscribed to
• To operate, secure, and improve our website and platform
• To comply with our legal and regulatory obligations

We rely on your consent and our legitimate business interest in responding to enquiries as the basis for processing. You can withdraw consent at any time.

How we share data

We do not sell your personal data. Lead enquiries submitted through this website are forwarded to our own customer relationship management system so our team can follow up. We use a small number of trusted service providers (for example, hosting and email delivery) who process data only on our instructions and under appropriate safeguards.

Where your data is stored

Hosting locations, subprocessors, and data-transfer arrangements depend on the service and customer deployment. Current platform details and any contractual residency commitments are provided during procurement. Some website providers may process limited technical data outside the UAE; where they do, we take steps to ensure an appropriate level of protection.

The WIYO ROS mobile app

WIYO ROS is a business tool for licensed brokerages and their agents. It is not a consumer app: accounts are issued by a subscribing brokerage, there is no public sign-up, and every screen requires a sign-in. The sections below describe the app specifically.

Account and profile data

When your brokerage creates your account and when you sign in, we process your name, email address, password (stored only as a salted hash, never in plain text), phone number, profile photo, job role, permissions, and the company you belong to.

Client and lead data you enter

The app is a CRM, so you enter information about your own clients and prospects: name, phone number, email address, nationality, preferred language, occupation, budget, property preferences, enquiry messages, and your notes. You are responsible for having a lawful basis to enter another person's data. We process it on your brokerage's instructions, as a processor.

Identity documents (KYC)

Where you use the KYC feature, the app captures a photograph of a client's identity document — typically a passport or Emirates ID — using your device camera or photo library. The image is uploaded to our content delivery network and processed by an automated text-extraction service to read the document fields. Both the image and the extracted fields are stored against the corresponding lead record.

Identity documents are sensitive personal data. Capture them only where you have the client's consent and a lawful basis to do so. We process them because UAE anti-money-laundering rules require brokerages to verify client identity.

Camera and photo access

Camera and photo-library access are used for one purpose only: attaching an identity document or an image to a client record, when you actively choose to do so. The app never opens the camera in the background, and images are uploaded only as part of an action you initiate. You can decline or later revoke these permissions in your device settings; the rest of the app continues to work.

Communications

If your brokerage connects WhatsApp, message content, contact identifiers, and delivery status flow through the app so you can read and reply to client conversations in one place.

Technical data

We process your authentication token, device push-notification token, app version, and error diagnostics. Requests to our API are logged, including timestamp and endpoint, for security and troubleshooting.

What the app does not collect

• Location. The app requests no location permission and never reads your position. Property maps show fixed project coordinates, not you.
• Microphone or audio. The app has no recording capability; the permission is explicitly blocked in the app manifest.
• Contacts, calendar, SMS, or call logs. Never accessed.
• Advertising identifiers. We run no advertising and no third-party analytics or tracking SDKs in the app.

Who we share app data with

Only with processors who help us run the service: cloud hosting and database, a content delivery network for images and documents, automated text-extraction providers for KYC documents and listing copy, messaging platforms where your brokerage connects them, and push-notification delivery. Each acts under contract and may process data only on our instructions. We do not sell app data or use it for advertising.

Security

Data is encrypted in transit using HTTPS. Your session token is stored in the device's hardware-backed secure storage — the iOS Keychain or the Android Keystore — not in ordinary app storage. Passwords are stored only as salted hashes. Access is restricted by role, and each brokerage's data is segregated so one company cannot read another's.

How long we keep it

We keep enquiry and subscriber data for as long as needed to respond to you and maintain our business relationship, and then for a reasonable period to meet legal and accounting requirements, after which it is deleted or anonymised.

App account data is kept while the account is active. Client, lead, and KYC records are kept for as long as the brokerage requires them, and at least as long as UAE real-estate and anti-money-laundering record-keeping rules demand, after the end of the business relationship. Diagnostic logs are kept for a short period and then deleted.

Account and data deletion

To delete your WIYO ROS account and its associated data, email hello@wiyo.ae from your registered address, or ask your brokerage administrator. We delete or irreversibly anonymise the data within 30 days, except where law requires us to retain records. If you are a client of a brokerage rather than an app user, contact that brokerage first — they control your data; we only process it for them.

Your rights

Subject to UAE Federal Decree-Law No. 45 of 2021 on the protection of personal data (and the GDPR where it applies), you may request access to, correction of, or deletion of your personal data, request restriction or a portable copy, object to processing, and unsubscribe from our emails at any time using the link in any message or by emailing hello@wiyo.ae. We respond within 30 days.

Cookies

We use a small number of cookies and similar technologies to keep the site working, remember your theme preference, and understand aggregate usage. You can control cookies through your browser settings. The mobile app does not use advertising or tracking cookies.

Children

Our website, platform, and app are intended for real estate professionals. They are not directed at anyone under 18, and we do not knowingly collect children's data.

Changes to this policy

We may update this policy from time to time. The "last updated" date at the top reflects the most recent revision.

Contact

Questions about this policy or your data? Email hello@wiyo.ae.