Privacy Policy

1Purpose and relationship to the Master Policy

This Addendum applies only to users of Al-Mu'een, an AI-powered academic advising and career companion operated by EmoEx Technology Limited ("EmoEx") for the United Arab Emirates University (UAEU) pilot.

It supplements the EmoEx Privacy Policy. Unless changed below, the Master Policy's commitments on data collection, security, no model training and retention apply in full. If anything conflicts in relation to Al-Mu'een, this Addendum controls.

2Who uses Al-Mu'een and how

Al-Mu'een is developed with the UAEU Department of Cognitive Sciences and serves two user groups:

For advisers, Al-Mu'een is a reference and preparation aid. It does not make advising decisions, and it has no access to student records held by the University.

Participation is limited to authorised UAEU students and staff aged 18 and over. Al-Mu'een is not a medical device or therapy service, and interactions are never used for grading, admissions, progression or disciplinary decisions.

3Confidentiality and separation

• Students: UAEU faculty, academic advisers and administrators cannot see your individual conversations, transcripts or notes. This includes faculty who use Al-Mu'een themselves.
• Faculty: your conversations are equally private from students, colleagues and University administrators.
• Separate environments: student and faculty users run in separate back-end environments, so information does not pass between the two groups.
• What UAEU receives: only aggregated, de-identified usage and feedback reports for the pilot evaluation.
• Operator: EmoEx operates the back-end services, hosting and AI infrastructure.

4Data processed, feedback and surveys

• Account data: your access group (student or faculty) and the details needed to sign in.
• Conversation data: messages you send and Al-Mu'een's responses, used to provide the service. Please do not include health information, ID numbers, financial details or other people's personal details.
• In-app feedback: you may be asked to rate whether a response was helpful or saved you time. Ratings are reported only in aggregated, de-identified form.
• Surveys: optional surveys about the pilot are anonymous and voluntary.

The pilot is evaluated by the Department of Cognitive Sciences using these aggregated results.

5Cross-border transfers (UAE PDPL notice)

Under Articles 22 and 23 of UAE Federal Decree-Law No. 45 of 2021 on Personal Data Protection ("UAE PDPL"), you are notified that Al-Mu'een data is not stored in the UAE. Personal data, conversation context and AI processing are hosted in Australia and the United States, under enterprise agreements with contractual safeguards and encryption (TLS 1.2+ in transit, AES-256 at rest).

6AI processing, retention and deletion

• No model training: conversations are processed in real time through enterprise agreements with vetted model providers (such as OpenAI and Anthropic). Neither EmoEx nor these providers use your conversations or notes to train or fine-tune AI models.
• Session data: signing out or clearing browser site data removes local session tokens and cached content.
• Voice (where enabled): audio is streamed without persistent recording. Technical connection logs are deleted after 30 days.
• Memory: long-term conversation memory runs on a rolling 12-month window.
• Deletion: when you delete your account, conversations, profile details and memories are removed from production systems within 30 days.
• Pilot records: aggregated, de-identified reports and the enrolment verification needed for UAEU pilot reporting are kept after individual deletion, and only for as long as the pilot reporting requires.

7Your rights and contact

Under the UAE PDPL you can request access to, correction, portability and erasure of your personal data. EmoEx acknowledges verified requests within 3 business days and responds within 30 calendar days.