Privacy Policy

Last updated: September 14, 2025

Data Controller
SPARROW STACK FOR COMPUTER SYSTEMS & COMMUNICATION EQUIPMENT SOFTWARE DESIGN, Sole Establishment (Trade Licence No. 1524419) — trading as “Makinah.ai.”
Muaisam 1, P.O. Box 485085, Dubai, UAE
Email: privacy@mail.makinah.ai | Phone: +971 58 587 3783

1 Information We Collect

Account data: name, email, billing address, phone.
Usage data: project history, prompts, activity logs.
Device data: IP address, browser type, OS, and device identifiers.
Payment data: last-four digits and expiry date (card details are handled directly by Stripe; we never store full PAN or CVC).
Cookies & similar technologies for authentication, analytics, and preference storage.

2 How We Use Your Data

Operate and secure the platform.
Improve features and AI models (using anonymised and aggregated data).
Personalise your experience.
Detect fraud and enforce these Terms.
Comply with legal obligations (e.g., bookkeeping, sanctions screening).

2.1 AI-Generated Content & Model Use

Makinah uses large language models and generative AI systems to create interface designs, user flows, documentation, and code based on user prompts and project inputs.
By using Makinah, you acknowledge that:

Generated outputs are created by automated systems and may require human review before use.
Your inputs (e.g., prompt text, project metadata) may be used to improve our models, unless you opt out.
Outputs may reflect public training data and should be reviewed for originality and accuracy before publishing.
You remain fully responsible for how you use any generated content.

We do not use your personal account data (such as name, email, or payment info) to train our AI models.

3 Legal Bases

We process your data on the bases of contract, legitimate interests, and consent (where required, e.g., marketing emails).

4 Sharing & International Transfers

Data may be processed by:

Stripe (payments), Cloudflare (hosting), analytics and support vendors.
These providers may be located outside the UAE. Transfers rely on contractual safeguards such as the EU Standard Contractual Clauses or equivalent mechanisms.

5 Security

We employ industry-standard encryption in transit and at rest, role-based access controls, and periodic penetration testing. Stripe is PCI-DSS Level 1 certified.

6 Your Rights

Subject to local law, you may access, correct, delete, or port your personal data and object to or restrict certain processing.
EU residents (GDPR) and California residents (CCPA) have additional rights.
Contact privacy@mail.makinah.ai to exercise any right; we will respond within 30 days.

7 Data Retention

We keep data while your account is active plus six (6) years for accounting and legal purposes. Logs related to security events may be retained longer if required by law.

8 Children

Makinah.ai is not intended for children under 13 and we do not knowingly collect data from minors.

9 Changes to This Policy

If we materially change this Policy, we will notify you via email or in-app message. Continued use after the effective date constitutes acceptance.

10 Contact

Questions or complaints?
Email privacy@mail.makinah.ai or call +971 58 587 3783.

— End of Privacy Policy