TheNibras Technologies Privacy Policy

TheNibras Technologies (Dubai, United Arab Emirates) makes apps, websites and software, including the Masar app and thenibras.com. This page explains how we handle your data. The Masar section comes first, then our website, future products, and company-wide terms that apply to everything we make. Company-wide policy last updated: 3 November 2026. العربية

1. Masar app

Last updated: 3 November 2026.

Masar is a free learning app for UAE real estate, for learners and for hiring partners (companies). It has no payments, no in-app purchases, no prices and no ads. Hiring partners are billed separately under their own agreement with TheNibras, outside the app. Masar is for people aged 13 and over.

What we collect, and why

• Sign-in details: your mobile number or email address. We use it only to send you a one-time code and to identify your account. You type it on the sign-in screen. Codes sent by SMS go through Twilio Verify (United States), which uses your number only to deliver the code. Codes sent by email go from noreply@thenibras.com through our Namecheap mail server (SMTP). There is no password and no social login.
• Profile: display name, emirate, nationality, career interests, language, and your choice whether to be visible to hiring partners (the "visible to hiring partners" switch on your profile). You enter these yourself. We use them to run your account and personalise learning.
• Nationality is sensitive. We treat your nationality as sensitive personal data in the UAE context. Other learners never see it. Hiring partners see it only if you opt in. We use it only for your profile and, if you opt in, for partners, and never for advertising or profiling.
• Learning activity: answers, scores, XP, streaks, duel, season and exam results, certificates and badges. Created as you use the app. We use it to provide learning, rankings and certificates.
• Exam integrity signals: during timed exams the app counts how often you leave the app and how often you copy, cut or paste, and reduces this to a result of clean, review or flagged. We use it only to keep exams and certificates fair. We do not use the camera or microphone, and we do not read what you copy. You can ask for a person to review a result (section 9).
• Uploaded evidence files: written answers, links, friend-league names, and files you attach as project evidence (JPEG, PNG, HEIC, WebP or PDF). Files are kept in a private storage area that only your account can access (row-level security), and are visible to others only as far as you choose to share the submission.
• Hiring partner accounts: company name, member profiles (name, phone number or email address, role), the access end date set by the Masar team, and the invites sent to learners.
• Not collected: payment or card data, location, contacts, camera, microphone, push notification tokens, or advertising identifiers. Masar has no analytics, crash-reporting or diagnostic SDKs.

Opt-in partner visibility: who can see what

• Other learners see your first name and initial, rank and weekly XP on leaderboards and in friend leagues you join.
• Hiring partners approved by the Masar team can see exactly these five things about you: your name, emirate, nationality, ranking and exam integrity result (clean, review or flagged). They see them only if you turn on "visible to hiring partners", and nothing else. They see your phone number and email only after you accept their invite.
• The public can see your skill passport only if you make it public.
• We do not show your data to anyone else, except our service providers (section 6) and where the law requires.

Where your data is stored, and cross-border transfer

Masar's database and uploaded files are stored with Supabase in Mumbai, India (AWS ap-south-1), so your data is transferred outside the UAE. SMS codes are handled by Twilio in the United States. We make these transfers under Articles 22 and 23 of the UAE Personal Data Protection Law (section 7).

Storage on your device

Masar sets no cookies and does not use sessionStorage or IndexedDB, and it has no tracking or ads. It uses local storage (localStorage on the web; private on-device storage on iOS) only for: your sign-in session tokens, so you stay signed in; your chosen language and a one-time reload marker used when switching to Arabic; your light or dark theme; and the progress of the sample quiz you can try before signing up, which is cleared when you sign in. Clearing your browser's site data, or signing out, removes this. App updates are delivered only through the App Store; Masar does not check for updates itself and sends no device or install identifier to any update service.

Withdraw consent, and delete your account

• Turn off "visible to hiring partners" on your profile at any time. Partners then stop seeing your profile data.
• Decline or ignore a partner's invite. Your contact details are not released unless you accept.
• Make your skill passport private.
• Delete your account in the app, immediately and completely: learners go to Profile, then Delete account. Partners go to Account, then Delete account. You confirm in two steps. Your uploaded files and sign-in record are deleted at once, and this removes all your rows of data. If you own a friend league that others have joined, it passes to another member, and other records that referred to you are cleared of your identity. Deleted data may remain in our hosting provider's routine system backups for a limited period, as explained in section 8.
• You can also email support@thenibras.com from your registered email or phone contact and we will delete your account for you.

Age

Masar is for people aged 13 and over (section 11).

2. Website thenibras.com

Last updated: 3 November 2026.

Our website gives information about TheNibras and our products. It uses no advertising or analytics trackers. If you email us, we keep your message and our reply to answer you and keep a record. Our hosting provider (Namecheap) keeps standard server logs (IP address, browser type, pages requested, time) for security and troubleshooting. The Masar web version and this policy page are also hosted by Namecheap.

3. Other and future TheNibras products

Last updated: 3 November 2026.

For any other TheNibras app, website or software (for example our AI-based accounting software), these rules apply from the first day: we collect only the data the product needs; we use it only for the purposes shown in that product's section or in the app before you use it; we ask your consent where the law or Apple's rules require it (and never make paid features depend on data you do not need to give); we do not sell your data, show ads based on your data, or track you across other companies' apps or websites; and we do not repurpose your data without asking you again. If a product uses accounting, financial or business records you enter, we use them only to provide that product to you. We will add a section for any product that collects personal data before it is released.

4. Who we are and how to contact us

TheNibras Technologies (Arabic trade name: ذانبرس للتكنولوجيا), a sole establishment licensed by the Dubai Department of Economy and Tourism, professional license no. 1650761, Commercial Register no. 2921853, Dubai, United Arab Emirates, is the controller of the personal data described in this policy. Privacy requests and support: support@thenibras.com (put "Privacy request" in the subject). Company contact: salyafei@thenibras.com.

5. Artificial intelligence (AI) providers

• Masar currently sends no user data to any third-party AI service.
• If a TheNibras product shares personal data with a third-party AI provider (for example the AI accounting software), before any data is shared we will tell you in the product and in this policy which provider, which data and for what purpose, and we will ask for your explicit permission. If you say no, you can still use the parts of the product that do not need AI.
• Our contracts with AI providers require that they use the data only to provide the service to us, that they protect it to the same or equal standard as this policy and Apple's App Store requirements, and that they do not train their models on your data unless you have agreed to that separately.
• You can withdraw this permission at any time in the product or by emailing support@thenibras.com.

6. Service providers and equal protection

We share personal data only with the providers below, only as needed for the stated purpose.

Equal protection. Every third party that receives personal data from us, including the providers above, any AI provider (section 5) and any parent, subsidiary or related company that has access to it, must provide the same or equal protection of that data as this policy states and as Apple's App Review Guidelines (5.1.1 and 5.1.2) require. We use written contracts or the providers' data-protection terms for this. We never allow a provider to use your data for its own advertising, and we do not sell personal data.

7. International transfers

TheNibras is in the UAE, but the Masar database is in India, and some providers (Twilio, Stripe) process data in the United States or elsewhere. Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021, "PDPL", Articles 22 and 23), we transfer personal data outside the UAE only to countries or providers that give appropriate protection, under contracts that require them to apply the safeguards of the PDPL, or where you have given explicit consent or the transfer is needed to provide the service you asked for. By signing in and using Masar you ask us to provide it, which needs these transfers.

8. How long we keep data

When we no longer need data, we delete it or make it anonymous so that it cannot identify you.

9. Your rights and how to use them

Under the PDPL you can ask us to give you access to your data or a copy of it, correct it, delete it, restrict or stop processing it, and object to automated processing (including a request that a person review an exam integrity result). You can also withdraw your consent at any time (section 1). Email support@thenibras.com from the email address or phone contact registered on your account. We will check your identity and answer within 30 days. If you are not satisfied, you may complain to the UAE Data Office or the data protection authority where you live.

10. Security

We use encrypted connections (TLS), encryption at rest by our database provider, row-level access rules so each user can reach only their own data, and a private file area for uploads. No system is perfectly secure. If a breach is likely to harm you, we will tell you and the authorities as the law requires.

11. Children

Our products are for people aged 13 and over. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has given us data, email support@thenibras.com and we will delete it. Some products may set a higher minimum age, which we will state in that product's section.

12. Changes

We will post changes on this page with a new date, and tell you in the app or by email if a change is significant. We will ask for your consent again before using data for a new purpose.