Owners
O

Privacy Policy
Owners Investments

Effective Date: May 14, 2026  |  Last Updated: May 14, 2026

01

Introduction

Welcome to Owners Investments ("Owners", "we", "us", or "our"). We operate the Owners mobile application (the "App"), which provides investment portfolio management, market insights, and related financial services to individual investors across the MENA region.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our App or any related services. It has been drafted to comply with:

  • UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL)
  • Saudi Arabia Personal Data Protection Law (PDPL) and its implementing regulations
  • Egyptian Data Protection Law No. 151 of 2020
  • Applicable Central Bank and capital-markets regulations across the GCC
  • Google Play Developer Programme Policies
  • Apple App Store Review Guidelines

Please read this policy carefully. By downloading, registering, or using the App you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please uninstall the App and cease use immediately.

02

Information We Collect

We collect information in the following categories:

CategoryExamplesSource
Identity DataFull name, date of birth, national ID / Emirates ID / Iqama number, passport detailsProvided by you during KYC / onboarding
Contact DataEmail address, mobile phone number, country of residence, mailing addressProvided by you
Account & Financial DataPortfolio holdings, transaction history, bank account references, wallet balances, investment preferencesGenerated through App usage or linked financial institutions
Authentication DataHashed passwords, biometric indicators (Face ID / fingerprint flags — processed locally on device), OTP recordsGenerated during login / security flows
Device & Technical DataDevice model, OS version, unique device identifiers (IDFA / Android Advertising ID), IP address, crash logsAutomatically collected
Usage DataFeatures accessed, pages viewed, time spent, tap events, session durationAutomatically collected via analytics SDK
Location DataApproximate country/city (derived from IP); precise GPS only if explicitly enabled by youAutomatically collected / device permission
Communications DataSupport tickets, chat messages, feedback forms, survey responsesProvided by you
Marketing DataCommunication preferences, campaign responsesProvided by you or inferred from usage

We do not collect full payment-card numbers, CVV codes, or online banking credentials. Payment processing is handled exclusively by our certified payment partners such as Paymob, under their own PCI-DSS environment.

03

How We Use Your Information

We use your personal information for the following purposes:

  • Account creation & management – register you, verify identity (KYC/AML), and maintain your account.
  • Service delivery – execute investments, display portfolio performance, process deposits and withdrawals.
  • Personalisation – tailor investment recommendations and market insights to your profile and risk appetite.
  • Security & fraud prevention – detect suspicious activity, prevent unauthorised access, and enforce our Terms of Service.
  • Legal & regulatory compliance – fulfil obligations under AML, CFT, FATCA/CRS, and local financial regulations.
  • Customer support – respond to inquiries, resolve disputes, and improve support quality.
  • Analytics & product improvement – understand usage patterns to fix bugs and develop new features.
  • Marketing & communications – send updates, promotions, and educational content (where you have opted in).
  • Legal proceedings – exercise or defend legal claims.
05

Sharing Your Information

We do not sell your personal data. We may share it with:

  • Service Providers – payment processing (Paymob), analytics, push notifications, and customer-support tools, each bound by strict data-processing agreements.
  • Financial Regulators & Government Authorities – when legally required (e.g., UAE Securities and Commodities Authority, Saudi CMA, Central Bank requests, court orders).
  • Identity Verification Partners – KYC/AML providers for legally mandated identity checks.
  • Auditors & Legal Advisers – subject to professional confidentiality obligations.
  • Corporate Transactions – in connection with a merger, acquisition, or asset sale; users will be notified prior to any transfer of personal data.
  • With Your Consent – in any other circumstances with your prior explicit consent.

All third-party service providers who receive your data are required by contract to maintain equivalent privacy and security standards and to process data only on our documented instructions.

06

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with legal obligations:

Data TypeRetention PeriodReason
KYC / Identity Documents5 years after account closureAML / regulatory requirement
Transaction Records7 years from transaction dateFinancial regulations, tax law
Account & Profile DataDuration of relationship + 5 yearsContractual & legal obligations
Usage / Analytics Logs24 monthsProduct improvement, security
Marketing PreferencesUntil withdrawn or 3 years of inactivityConsent management
Support Communications3 years from resolutionQuality assurance, legal claims

After the applicable retention period, data is securely deleted or anonymised so it can no longer be linked to you.

08

Your Rights

Depending on your country of residence, you may have the following rights regarding your personal data:

  • Right to Access – obtain a copy of the personal data we hold about you.
  • Right to Rectification – request correction of inaccurate or incomplete data.
  • Right to Erasure – request deletion of your data where there is no compelling legal basis for continued processing.
  • Right to Restriction – request that we limit the processing of your data in certain circumstances.
  • Right to Data Portability – receive your data in a structured, machine-readable format.
  • Right to Object – object to processing based on legitimate interests or for direct marketing.
  • Right to Withdraw Consent – withdraw consent at any time where processing is based on consent (without affecting prior lawful processing).
  • Right to Lodge a Complaint – file a complaint with your national data protection authority.

To exercise any of these rights, contact us at privacy@owners.investments. We will respond within 30 calendar days (or as required by law). We may need to verify your identity before processing your request.

09

Children's Privacy

The App is intended exclusively for users aged 18 years or older. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us immediately at privacy@owners.investments and we will promptly delete such data.

10

International Data Transfers

Your data may be processed and stored on servers located outside your country of residence, including in the European Union or the United States, by our certified service providers. Where such transfers occur, we ensure adequate safeguards are in place, including:

  • Standard Contractual Clauses (SCCs) approved by relevant authorities
  • Adequacy decisions where applicable
  • Binding Corporate Rules for intra-group transfers

By using the App you acknowledge that your data may be transferred internationally under these safeguards.

11

Cookies & Tracking Technologies

The App does not use browser cookies. However, we use the following mobile-equivalent technologies:

  • Analytics SDKs – to measure app performance and user behaviour (data is aggregated and anonymised where possible).
  • Push Notification Tokens – device tokens used solely to deliver notifications you have opted into.
  • Advertising Identifiers (IDFA / GAID) – used only with your explicit consent for personalised marketing; you may reset or opt out at any time via your device settings.
  • Crash Reporting Tools – to automatically detect and diagnose app crashes and errors.

You may manage these preferences in the App under Settings → Privacy & Notifications.

13

Financial & Investment Data

As a financial services platform, we collect and process sensitive financial data subject to additional protections:

  • Investment portfolio data is used solely to provide you with personalised investment management services.
  • Transaction histories are maintained to satisfy regulatory reporting obligations and may be disclosed to financial regulators upon lawful request.
  • We implement suitability assessment processes and may restrict access to certain investment products based on your investor profile as required by applicable securities laws.
  • We do not use your financial data for profiling or targeted advertising without your explicit consent.
  • Wallet and balance data is encrypted and access-controlled at the application and database layers.

Owners Investments complies with applicable Anti-Money Laundering (AML), Combating the Financing of Terrorism (CFT), and Know Your Customer (KYC) obligations under UAE, Saudi, and Egyptian financial regulations. These obligations may require us to report certain transactions or freeze accounts without prior notice to you.

14

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will:

  • Update the "Last Updated" date at the top of this page.
  • Send you an in-app notification and/or email at least 14 days before the changes take effect (for material changes).
  • For significant changes affecting your rights, request renewed consent where required by law.

Continued use of the App after the effective date of any changes constitutes your acceptance of the updated policy.