Privacy Policy

1. Who we are

This Privacy Policy explains how Discond (“Discond”, “we”, “us”) collects, uses, shares, and protects personal data when you use Discond websites, apps, and related services (the “Service”). We operate from Dubai, United Arab Emirates.

Privacy contact: privacy@discond.ae.

We design these practices with users in the UAE in mind and aim to follow UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection (PDPL). Where other laws apply to you, we will honour applicable rights as required.

2. Personal data we collect

Account data. When you sign in with Google, we receive your email address, name, and profile photo URL, and we store a numeric account ID. We may store tokens needed to keep you signed in.

Content requests. If you ask us to add a business, offer, or provider, we store the request text, optional details, search context, source (web or mobile), and optionally a contact email.

Usage data. We automatically process technical information such as pages viewed, approximate times, language/locale, signed-in state, platform or app version, referrer and campaign parameters, search and filter activity, and outbound link events.

Cookies and similar technologies. We use essential storage for session, language, and theme preferences, and (when enabled) analytics consent. Analytics providers may set their own cookies when analytics are active.

We do not collect payment card details through Discond. We do not use your precise GPS location to rank results; maps and directions use merchant or branch coordinates.

3. How we use personal data

We use personal data to sign you in and keep your session; personalise language and experience; run browse, search, and discovery features; process content requests; secure and debug the Service; measure usage and improve Discond; and meet legal obligations.

We do not sell your personal data.

4. Legal bases

Depending on applicable law, we process personal data to provide the Service you request (contract), with your consent where required (for example non-essential analytics when a consent choice is shown), for legitimate interests such as security, abuse prevention, and product improvement balanced against your rights, and where needed to comply with law.

5. Analytics and cookies

We use product analytics (Amplitude) and, when configured, Google Analytics. After you sign in, analytics identify you with a numeric account ID only — not your email or name as event properties.

Where we show a consent choice, you can accept analytics or keep essential-only storage. Where consent is not required by our configuration, analytics may run by default. You can also limit tracking through browser or device settings.

6. Sharing and processors

We share personal data with service providers that process it for us, including cloud database hosting (currently in the EU), application hosting, media storage, Google for sign-in, and analytics providers named above. We may also disclose data when required by law, to protect rights and safety, or in connection with a corporate transaction involving Discond.

When you leave Discond to redeem an offer, third-party partners (membership apps, merchants, banks) act under their own terms and privacy practices.

7. International transfers

Your data may be processed in the UAE, the European Union, and other countries where our hosts and analytics providers operate (including, depending on configuration, the United States). Where required, we use appropriate contractual and technical safeguards for those transfers.

8. Retention

We keep account data while your account remains active. Content requests are kept as needed to review feedback. Analytics data is retained according to our providers’ settings and our configuration. We delete or anonymise personal data when it is no longer needed for the purposes above, unless a longer period is required by law.

9. Your rights

Subject to applicable law (including UAE PDPL), you may request access, correction, deletion, restriction, objection to certain processing, and — where applicable — portability of data you provided.

Email privacy@discond.ae from the address linked to your account (if any) and describe your request. We may need to verify your identity. You may also lodge a complaint with a competent data protection authority where available.

In-product account deletion is not yet available; contact us and we will process deletion requests manually.

10. Security and children

We use HTTPS in transit, access controls on production systems, and standard hosting security practices. No method of transmission or storage is completely secure.

Discond is not directed at children and we do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

11. Changes

We may update this Privacy Policy and will revise the “Last updated” date on this page. Material changes may also be communicated in-product or by email when appropriate. Continued use after the effective date means you acknowledge the updated policy.

12. Language

We may make this Privacy Policy available in languages other than English. Translations are for convenience only. In case of any inconsistency between language versions, the English version controls.

13. Contact

Privacy requests and questions: privacy@discond.ae. Postal: Discond, Dubai, United Arab Emirates.