Privacy Policy

We collect information you provide directly to us, including:

• Full name
• Date of birth for age verification
• Email address and phone number
• Unit or property address within the community
• Profile photo, if provided
• Family member details, including name, relationship, phone number, and date of birth
• Staff linkage and employment details

When you create visitor passes, we collect:

• Visitor name and phone number
• Purpose of visit
• Date and time of expected arrival
• Vehicle plate number, if applicable

When you use the App, we automatically collect:

• Device platform, such as iOS or Android
• Push notification token for delivering notifications
• Activity logs, including login times and actions performed within the App

When you use the AI assistant feature, every message you send is transmitted to our servers and forwarded to Google Gemini, our third-party AI provider, for processing. Google Gemini processes your message and returns a response; its handling of submitted content is governed by Google's applicable service terms and data-processing commitments. Your conversation history is stored on our servers to maintain context across sessions and to enable features such as amenity booking and service ticket creation through the assistant. A recent copy of your conversation is also cached locally on your device for faster loading. You can clear your local conversation cache at any time using the “New Conversation” button within the AI assistant.

When you submit the demo request form on kenza.ae, we collect the details you enter: your name, mobile number, work email address, community name, city, number of units, your role, and the area you are interested in. Only your name, mobile number and work email are required. We use these details to respond to the demo enquiry you asked us to handle.

Submitting the form is not an opt-in to general marketing. If we want to use your details for marketing beyond responding to this enquiry, we will ask you separately where applicable.

Two service providers are involved in handling a form submission:

• Cloudflare, which provides the Turnstile human-verification check on the form. Turnstile is used to prevent automated abuse. Cloudflare receives technical signals from your browser and your IP address for this purpose.
• Resend, which delivers the resulting email to our team inbox.

Each provider processes this data only to perform that function. We do not use the form data for advertising, and we do not sell it.

Demo requests are delivered to our team inbox by email. We do not store website form submissions in a separate database. Your enquiry is retained in our email records for as long as needed to respond to it and to manage the resulting business relationship, and is deleted on request.

The website does not use advertising or analytics cookies and does not track you across other sites. Your language preference (English or Arabic) is stored in your own browser so the site remembers it on your next visit. Clearing your browser data removes it.

You can ask us to access, correct or delete the details you submitted through the form at any time by emailing support@kenza.ae. We will respond within the period required by applicable law.

The website offers Kenza AI, an assistant that answers questions about Kenza Living only. Each message you send to it is transmitted to our servers and forwarded to Google Gemini, a third-party AI service provided by Google, for processing; Google's handling of submitted content is governed by its applicable service terms and data-processing commitments. We do not store website chat transcripts on our servers: the short conversation history exists only in your browser for the duration of your visit, and each request is forgotten once its response is delivered. Do not enter personal or sensitive information into the website assistant.

Community administrators and security guards who need access to manage gate access, verify residents, and maintain community safety.

Third-party services that help us operate the App:

• Amazon Web Services for cloud hosting and file storage
• Google Gemini for AI assistant and translation services
• Expo for push notification delivery

Each service provider processes data only as necessary to perform their function and is bound by their own privacy and data protection policies.

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Your preferences, app settings, and a cached copy of recent AI conversations are stored locally on your device. You can clear this data at any time through the App or by uninstalling it.

The following data is stored on our servers with the indicated retention periods:

• Account information, Retained while your account is active, deleted 30 days after account deletion request.
• Visitor logs and entry records, Retained for 12 months from the date of visit, then automatically purged.
• Service and maintenance tickets, Retained for 24 months from ticket closure, then anonymized.
• Family member records, Retained while your account is active, deleted with your account.
• Staff linkage records, Retained while the linkage is active, deleted when unlinked or upon account deletion.
• Amenity booking history, Retained for 12 months from the booking date.
• AI conversation history, Retained for 7 days, then automatically deleted; all conversations are also permanently deleted upon account deletion.
• Audit logs, Retained for 24 months for security and compliance purposes.

Kenza Living is operated for UAE residential communities. Primary production hosting and personal-data processing are intended to be in the UAE, with Mumbai, India used only as backup, disaster-recovery, service-continuity, technical-support, or temporary operational-continuity infrastructure where required and legally permitted.

UAE personal data protection law regulates cross-border personal-data transfers; it does not automatically prohibit every transfer outside the UAE. Where necessary for security, backup, disaster recovery, technical support, service continuity, app-store operation, push notifications, AI processing, or legal compliance, limited personal data may be transferred to or processed outside the UAE subject to appropriate safeguards.

• AWS infrastructure outside the UAE, Used only where needed for backup, disaster recovery, service continuity, technical support, or temporary operational continuity.
• Google Gemini, AI assistant and translation processing.
• Expo, Push notification delivery.
• Apple and Google, App-store review, distribution, crash/reporting, and platform services.

Emirates ID and identity-verification data should be minimized and used only for eligibility, security, legal, or community-authorized operational purposes. We do not intentionally send Emirates ID images or full identity documents to AI services unless a future feature expressly requests it for a lawful operational purpose with appropriate disclosure.

You may request account deletion inside the App from Profile or Privacy Settings, or from the public Delete Data web page. Upon account deletion, your data will be scheduled for removal with a 30-day grace period during which you may cancel the deletion. After this period, your personal data is first anonymized and then permanently deleted from our systems.