Clique AI Privacy Policy
Last updated: 20 October 2026
1. Who we are
Clique AI Limited (“Clique”, “we”, “us”) is a company registered in the Dubai International Financial Centre (DIFC), UAE, at Innovation One, DIFC, Dubai. We are the controller of the personal data described in this policy and are registered with the DIFC Commissioner of Data Protection.
This policy explains how we collect, use, share and protect personal data when you use the Clique app, our website www.cliquehub.digital, Cleo (our AI concierge) and related services (the “Services”). It should be read with our Terms and Conditions.
Organisations that license Clique OS as a business have a separate data processing agreement with us. Section 8 explains how your data is handled inside a partner’s space.
2. Summary at a glance
| Question | Short answer |
|---|---|
| What do we collect? | Your account details, verified identity data, interests, activity, messages, device data and, if you allow it, location. |
| Why? | To verify you, match you with the right people and circles, keep the community safe and run the app. |
| Do we sell your data? | No. We never sell your personal data or share it for third-party advertising. |
| Does AI use my data? | Yes. Cleo and our matching use your profile and activity. No decision with a significant effect on you is made by AI alone. |
| Who sees my profile? | Other verified members, and partners who run a space you join. |
| Can I delete my data? | Yes, at any time, from Settings in the app. |
| Who regulates us? | The DIFC Commissioner of Data Protection. |
3. Personal data we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Name, email, mobile number, password or login token, language | You |
| Verified identity data | Full name, date of birth, gender, nationality and a verification reference from UAE PASS or another approved identity verification provider. We do not store copies of your Emirates ID or passport unless a provider is required to keep them under its own policy. | UAE PASS or our verification provider, with your consent |
| Profile data | Photos, bio, interests, preferred circles, neighbourhood or city, languages, availability | You |
| Conversations with Cleo | Your questions, answers and onboarding choices | You |
| Community activity | Circles joined, events attended, Speed Meeting sessions, connections, Clique Coins balance and history | Generated by your use |
| Messages and posts | Content of messages and posts you send, photos you share | You |
| Safety data | Reports you make or receive, blocks, moderation decisions, appeals | You, other members, our team |
| Location | Approximate location from IP; precise location only if you turn it on, to show nearby circles and events | Your device |
| Device and usage data | Device model, OS, app version, IP address, crash logs, pages and features used, push token | Your device, automatically |
| Purchase data | What you bought and when. Payment card details are handled by Apple or Google and never reach us. | Apple, Google |
| Partner data | Your membership of a partner’s community (for example, a resident or alumni list) when you join via that partner | Clique OS partner |
| Support and feedback | Messages to our support team, survey answers | You |
4. How we use your data and our legal basis
Under the DIFC Data Protection Law, we must have a lawful basis for each use. These are ours:
| Purpose | Legal basis |
|---|---|
| Create and run your account, provide circles, events, messaging and Speed Meeting | Performance of our contract with you (the Terms) |
| Verify your identity and age, and gate women-only circles | Your consent and our legitimate interest in a safe, adults-only community |
| Match you with circles, people and events, and power Cleo | Performance of contract; legitimate interests in providing relevant matches |
| Detect, prevent and investigate fraud, abuse, fake accounts and breaches of our Community Standards | Legitimate interests in keeping members safe; legal obligations |
| Process purchases and manage Clique Coins | Performance of contract |
| Send service messages, safety notices and changes to our Terms | Performance of contract; legal obligations |
| Send marketing and news about Clique | Your consent, which you can withdraw at any time |
| Use precise location to show nearby activity | Your consent (device permission) |
| Analyse usage, fix bugs and improve the Services, using aggregated or de-identified data where possible | Legitimate interests in improving Clique |
| Comply with law, respond to lawful requests from authorities, and defend legal claims | Legal obligations; legitimate interests |
Where we rely on legitimate interests, we have balanced them against your rights. You can ask us for details and you can object (see section 12).
5. Special category data
We do not ask for special category data such as religious beliefs, health, sexual orientation or political opinions. However, some interests or circles you choose to join (for example, a faith-based or wellbeing circle) may reveal such information.
Where that happens, we process it only with your explicit consent, given when you choose to add that interest or join that circle, and only to provide the feature you asked for. You can remove the interest or leave the circle at any time, which withdraws your consent going forward. We never use this information for advertising.
Women-only circles. To keep women-only circles safe, we use the gender recorded in your verified identity (from UAE PASS or our verification provider) to confirm eligibility. We use it only for this check and for related safety purposes.
6. Cleo, matching and AI
This section is our notice under DIFC Data Protection Regulation 10 on autonomous and semi-autonomous systems.
What the AI systems do.
- Cleo, our AI concierge, guides your onboarding, answers questions about Clique and suggests circles, people and events.
- Matching uses your interests, preferences, location (if enabled) and activity to rank and suggest Interest Circles, people and events.
- Safety tools automatically flag content and behaviour that may break our Community Standards, for review by our team.
How they work. Our systems combine rules we design with machine learning and large language models from third-party providers. Providers process your inputs only on our instructions, under contracts that prohibit them from using your data to train their general models.
Human oversight. No decision that has a legal or similarly significant effect on you, such as a permanent ban, is made solely by an automated system. A member of our team reviews these decisions, and you can ask for a review by writing to appeals@cliquehub.digital.
Your choices. You can see why a circle was suggested to you in the app, edit your interests at any time, and object to profiling for matching by contacting us, although this will limit the matching features we can offer. Please do not share sensitive personal information with Cleo that you do not want processed.
Accuracy. AI outputs can be wrong. We monitor and test our systems for accuracy, bias and safety, and we keep a record of the AI systems we use and their purposes.
7. Who we share your data with
We never sell your personal data. We share it only as follows:
- Other members. Your profile (name, photos, bio, interests) is visible to verified members in your circles and events. Your messages are visible to their recipients. We never show your date of birth, nationality or verification details to other members, only a “verified” badge.
- Service providers (processors). Cloud hosting, AI model providers, identity verification (UAE PASS), messaging and push notifications, email and SMS delivery, analytics and crash reporting, and customer support tools. They act on our instructions under written contracts with confidentiality and security obligations.
- Organisers. When you register for an event, we share the details needed to admit you (name and ticket or registration reference) with its Organiser.
- Apple and Google, to process in-app purchases and deliver the app.
- Authorities and legal requests. Where required by law, court order or a valid request from a competent authority, or where needed to protect someone’s life or safety.
- Corporate transactions. If Clique is involved in a merger, acquisition or sale of assets, your data may transfer to the new owner, who will remain bound by this policy.
- With your consent, in any other case.
8. Partner spaces (Clique OS)
Some communities are run by organisations that license Clique OS, such as a property developer, university or event organiser (“Partners”).
- When you join a Partner’s space, the Partner can see the profile information and activity you share in that space (for example, attendance and engagement), and may receive aggregated reports.
- The Partner may also provide us with data to confirm you are eligible, for example that you are a resident or alumnus.
- Depending on the arrangement, the Partner may be a separate controller of the data it receives, in which case its own privacy policy also applies. We will tell you who the Partner is before you join its space.
- Your activity outside a Partner’s space is not shared with that Partner.
9. International transfers
We are based in the DIFC, and some of our providers process data in other countries.
Where data leaves the DIFC to a jurisdiction the DIFC Commissioner has not recognised as adequate, we protect it using appropriate safeguards, such as the DIFC standard contractual clauses, or rely on a lawful exemption under the DIFC Data Protection Law. You can request a copy of the safeguards we use by contacting us.
10. How long we keep your data
We keep personal data only as long as we need it.
| Data | Retention |
|---|---|
| Account and profile data | While your account is active; deleted within 30 days of account deletion |
| Messages and posts | While your account is active; deleted within 30 days of account deletion, except copies held by recipients |
| Cleo conversations | 12 months, then deleted or de-identified |
| Verification reference | While your account is active, plus 6 months to prevent re-registration of banned users |
| Safety reports and moderation records | Up to 3 years after the report, or longer if needed for an investigation or legal claim |
| Purchase and transaction records | 6 years, to meet accounting and tax obligations |
| Device, usage and log data | Up to 12 months |
| Marketing preferences | Until you withdraw consent, plus a suppression record so we do not contact you again |
We may keep de-identified or aggregated data, which no longer identifies you, for longer.
11. Security
We use appropriate technical and organisational measures, including encryption in transit and at rest, access controls on a need-to-know basis, staff confidentiality obligations and regular security reviews. No system is completely secure. If a personal data breach is likely to put your rights at risk, we will notify you and the DIFC Commissioner as required by law.
12. Your rights
Under the DIFC Data Protection Law, you have the right to:
- Access the personal data we hold about you and receive a copy.
- Correct inaccurate or incomplete data.
- Delete your data (the “right to be forgotten”), subject to legal exceptions.
- Restrict how we use your data in certain cases.
- Port your data, receiving it in a structured, machine-readable format.
- Object to processing based on legitimate interests, including profiling, and to direct marketing at any time.
- Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects.
- Withdraw consent at any time, without affecting earlier processing.
- Not be discriminated against for exercising these rights.
To exercise any right, email privacy@cliquehub.digital or use the options in Settings > Privacy. We may need to verify your identity. We respond within one month, which may be extended by up to two further months for complex requests, in which case we will tell you why.
13. Deleting your account
You can delete your account at any time in the app under Settings > Account > Delete account, or by emailing privacy@cliquehub.digital, or through our web form at www.cliquehub.digital/delete-account. Deletion starts immediately and completes within 30 days, except for data we must keep as listed in section 10. Deleting the app from your phone does not delete your account.
14. Adults only
Clique is only for people aged 18 and over. We do not knowingly collect data from anyone under 18. If we learn that a minor has created an account, we will delete it and the associated data. If you believe a minor is using Clique, contact privacy@cliquehub.digital.
15. Marketing
We send marketing emails, SMS or push notifications only with your consent. You can opt out at any time using the unsubscribe link, your device’s notification settings or Settings > Notifications in the app. We do not use your data for third-party advertising, and we do not track you across other companies’ apps or websites.
16. Cookies and similar technologies
Our website uses strictly necessary cookies to function, and, with your consent, analytics cookies to understand how visitors use it. You can accept or reject non-essential cookies through our cookie banner and change your choice at any time. The app uses similar technologies (such as device identifiers and SDKs) for security, crash reporting and analytics, as described in section 3.
17. Changes to this policy
We may update this policy from time to time. If we make material changes, we will tell you in the app or by email before they take effect. The “Last updated” date at the top shows when it was last revised.
18. Contact us and complaints
Data Protection Officer: Clique AI Limited, Innovation One, DIFC, Dubai, UAE. Email: privacy@cliquehub.digital
If you have a concern about how we handle your data, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with the Commissioner of Data Protection, Dubai International Financial Centre Authority, via www.difc.com/business/operating/data-protection.