Privacy Policy

1. Introduction

This Privacy Policy describes how Mueen AI, the mobile application and its connected web services at mueen.om, collects, uses, stores, and protects your personal information.

Mueen AI is operated by Oman Data Park SAOC (“Otech”) with Commercial Registration No. 1130280 operating from Z3, 3rd Floor, KOM4, Muscat, PO Box 35, PC 135, the Sultanate of Oman. Authentication is provided through your account. By using the app, you agree to the practices described in this policy.

This policy applies specifically to the Mueen AI application. For general Otech website and corporate services, see also otech.om/privacy-policy.

2. Information We Collect

We collect only the information necessary to provide AI-powered assistance and manage your account.

Otech may use data collected through your use of the Mueen AI platform including, but not limited to, conversation inputs, AI-generated outputs, usage patterns, feedback, and performance logs to train and improve the AI model underlying the platform, to develop and optimise the technical infrastructure on which the platform operates, and to enhance the overall quality, accuracy, and functionality of our products and/or services.

Before any such data is used for these purposes, it is de-identified and aggregated so that it cannot reasonably be used to identify you individually. Otech does not use raw, identifiable personal data for AI training or infrastructure development purposes.

This processing is carried out on the basis of Otech's legitimate interests in maintaining and improving a high-quality AI platform. We have assessed that these interests are not overridden by your data protection rights, given the de-identification measures applied before any such use.

3. How We Use Your Information

• Authenticate you and maintain your session
• Process your messages and generate AI responses
• Extract and analyse text from uploaded documents to answer your questions
• Store conversation history so you can return to previous chats
• Improve service quality through optional message feedback
• Enforce content safety guardrails and prevent misuse

Otech may use aggregated and de-identified conversation data to improve the performance and accuracy of the Mueen AI model. Any data used for this purpose is anonymized prior to use and cannot be used to identify any individuals.

4. AI Processing and Third-Party Services

Your messages and uploaded document content are processed on infrastructure operated by Otech to generate AI responses. Processing may include retrieval from curated knowledge bases and, when necessary to answer your query, automated web search.

• AI models — Processed through Otech's sovereign AI gateway on Otech-controlled infrastructure within the Sultanate of Oman.
• Web search (when enabled) — Rewritten search queries (not your full conversation history) may be sent to third-party search API providers to retrieve publicly available information. These providers process queries under their own privacy terms.
• Authentication — Sign-in is handled through your account via a secure in-app browser during login.
• Fonts — The app may download font files from Google Fonts servers to display Arabic and Latin text. No personal data is sent with font requests.

Cross-Border Data Transfers

While your core conversation and account data is stored on servers within the Sultanate of Oman, limited transfers of data outside Oman occur in the ordinary operation of certain platform features:

• Web search queries: where you use the web search feature, rewritten query text (not your full conversation history) is transmitted to third-party search API providers whose servers may be located outside Oman.
• Font delivery: the app may request font files from Google Fonts servers; no personal data beyond standard network information (such as device IP address) is transmitted with such requests.

Where the destination country does not provide a level of protection equivalent to that of the Sultanate of Oman, Otech relies on the necessity of the transfer to perform the service you have requested, in accordance with Article 22 of the PDPL. By enabling these features, you acknowledge that such limited transfers may occur.

We do not sell, trade, or rent your personal information to third parties for their marketing purposes. We may disclose information to law enforcement or regulatory authorities when required by applicable law.

We process your personal data on the legal bases under the Personal Data Protection Law (Royal Decree No. 6/2022, “PDPL”) and its Executive Regulations (Ministerial Decision No. 34/2024).

Mueen AI generates responses by analyzing your input and predicting contextually appropriate replies based on its training and available information. AI-generated responses may contain inaccuracies, errors, or outdated information. You should not rely solely on Mueen AI output as the basis for legal, medical, financial, regulatory, or other professional decisions. Otech accepts no liability for any loss or damage arising from reliance on AI-generated content.

If you identify information about you within an AI-generated response that you believe to be factually inaccurate, you may request a review by contacting support@omandatapark.com. We will consider your request and take reasonable steps to address it where technically and legally practicable.

5. Data Storage and Security

Otech implements technical, administrative, and organizational security measures to protect your personal data against unauthorized access, loss, destruction, modification, or disclosure, including:

• Encryption: data and all communication between the app and mueen.om is encrypted in transit using TLS/HTTPS.
• Access controls: access to personal data is restricted to authorized personnel on a need-to-know basis, enforced through role-based access controls.
• Security assessments: Otech conducts periodic security reviews and vulnerability assessments of its infrastructure.
• Incident response: Otech maintains documented procedures for detecting, containing, and notifying affected parties of personal data breaches.
• Token storage: your session token is stored in your device's secure storage (Android Keystore / iOS Keychain).
• Hosting: conversation data is stored on servers operated by Otech in the Sultanate of Oman as clarified under this Policy.
• Temporary storage: uploaded files are held temporarily within Otech's premises and automatically expire; they are not retained indefinitely (30 days).

Notwithstanding these measures, no system is entirely immune from security risk. In the event of a personal data breach likely to result in risk to your rights, Otech will notify you and the competent supervisory authority in accordance with applicable law.

6. Data Retention and Deletion

In the app, you can:

• Delete individual conversations at any time
• Sign out, which removes your session token from the device

Automatic retention (backend):

• Inactive conversations are archived after 30 days of inactivity
• Archived conversations are permanently deleted after 40 days total

We'll retain your Personal Data for only as long as we need in order to provide our Services to you, or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations. How long we retain Personal Data depends on the type of data, and how we use it.

In determining these retention periods, we consider a number of factors, such as:

• Our purpose for processing the Personal Data (such as whether we need to retain it to provide our Services);
• The amount, nature, and sensitivity of the information;
• The potential risk of harm from unauthorized use or disclosure;
• Any legal requirements that we are subject to.

Full account or data erasure: To request deletion of all personal data associated with your account, contact us at support@omandatapark.com. We will process verified requests in accordance with applicable data protection laws of the Sultanate of Oman.

7. Your Data Protection Rights

Under applicable data protection laws of the Sultanate of Oman, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your personal data
• Object to or restrict certain types of data processing
• Withdraw consent where processing is based on consent

To exercise any of these rights, email support@omandatapark.com.

8. Intended Users

Mueen AI is intended for use by government employees.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. If we make material changes to how we handle previously collected information, we will provide notice through the app or by email where appropriate.

10. Contact Us

Data Controller

The data controller responsible for processing your personal data through the Mueen AI application is:

Oman Data Park SAOC (“Otech”)
Commercial Registration No.: 1130280
Z3, 3rd Floor, KOM4, Muscat, PO Box 35, PC 135, Sultanate of Oman

Otech determines the purposes and means of processing your personal data as described in this Privacy Policy and is your primary point of contact for all data protection matters.

If you have questions about this Privacy Policy or how we handle your data:

• Email: support@omandatapark.com
• Address: Z3, 3rd Floor, KOM4, Muscat, PO Box 35, PC 135, Sultanate of Oman

11. Governing Law

This Privacy Policy is governed by and interpreted in accordance with the laws of the Sultanate of Oman.