Privacy Policy

Last Updated: March 7, 2026  ·  Effective: March 7, 2026

Desert Rose FZE. ("we", "our", or "us") operates the TrueMap mobile application and website at https://truemap.org/ and mobile application at https://apps.apple.com/app/truemap/id6759581919. This Privacy Policy describes what data we collect, why we collect it, how it is used, and your rights under applicable law — including the UAE Federal Decree-Law No. 45/2021 on the Protection of Personal Data ("PDPL").

By using TrueMap, you consent to the practices described in this policy. If you do not agree, please discontinue use of the application.

1. Data Controller

Desert Rose FZE.
Jurisdiction: United Arab Emirates
Office: Office Number AT-301, Third Floor, Atrium Tower, Umm Al Quwain Free Trade Zone, Al Barqaa, Umm-Al-Quawain, United Arab Emirates

2. Minimum Age

TrueMap is intended for users aged 18 and older. We do not knowingly collect personal data from persons under 18. If we become aware that a minor has provided personal data, we will delete it promptly. If you believe a minor has created an account, please contact us immediately at [email protected].

3. Data We Collect

We collect the following categories of personal data:

3.1 Account Data

• Email address — required for registered accounts; used for authentication and transactional communications.
• Optional profile fields: display name, gender, phone number, nationality.
• Authentication tokens — Apple ID / Google Account sign-in tokens, stored securely server-side.
• Guest users: a unique device identifier (IDFV/UUID) that is not linked to your personal identity.

3.2 Review and Content Data

• Text of submitted reviews and ratings.
• Public photos attached to reviews.
• Private verification materials (receipts, bank statement fragments) submitted as proof of visit — accessible only to you and the assigned moderator, deleted immediately upon moderation completion.

3.3 Technical and Fraud-Prevention Data

When you submit a review or take key actions in the app, we automatically collect the following for fraud detection and quality-control purposes:

• IP address
• Unique device identifier (iOS IDFV)
• Device model and operating system version
• Device language settings

This data is used exclusively by our internal risk-monitoring system and is not shared with third parties for any other purpose.

3.4 Behavioural and Activity Data

We collect data about how you interact with TrueMap, including:

• Screens and features visited (e.g. "opened promo codes screen");
• Buttons tapped and in-app navigation patterns; and
• App performance metrics and crash reports.

This data is collected via Amplitude, Inc. in anonymised, aggregated form and is used solely to improve the application. Amplitude does not receive your name, email, or any directly identifying information. See Amplitude Privacy Policy.

3.5 Push Notification Token

If you grant permission, we collect your Apple Push Notification Service (APNs) token to send you review-status notifications (approved / rejected / under review). This token is not shared with third parties and is used solely for this purpose.

3.6 Subscription and Payment Data

Premium subscriptions can be processed through the Apple App Store. We use RevenueCat to manage subscription status. RevenueCat receives only a non-personal subscription token from Apple — it does not receive your payment card details, name, or email address. See RevenueCat Privacy Policy. We retain a record of your subscription history (plan type, purchase dates, renewal status) for billing support purposes.

4. Legal Basis for Processing

Under the UAE PDPL, we process your personal data on the following bases:

• Consent — for push notifications (APNs token); you may withdraw consent at any time.
• Contractual necessity — to provide the services you requested (account creation, review submission, promo code access, premium subscription).
• Legitimate interests — fraud prevention, platform security, and service improvement (analytics, technical data).
• Legal obligation — compliance with UAE law, including content moderation requirements under Federal Decree-Law No. 34/2021 (Cybercrimes Law) and responding to lawful requests from authorities.

5. How We Use Your Data

• Providing and maintaining the TrueMap application and its features;
• Authenticating your identity and managing your account;
• Verifying the authenticity of submitted reviews and moderating content before publication;
• Personalising promo code suggestions and in-app content based on your review activity and rank;
• Managing premium subscriptions and providing billing support;
• Detecting and preventing fraudulent, abusive, or illegal activity;
• Improving app performance and developing new features (via anonymised analytics);
• Sending review-status push notifications (if enabled); and
• Complying with applicable UAE laws and responding to lawful requests.

6. Cookies and Similar Technologies

The TrueMap website (truemap.org) may use standard browser cookies and local storage to maintain session state and remember language preferences. No third-party advertising cookies are used. The TrueMap mobile application does not use browser cookies; it uses device-level identifiers as described in Section 3.

You can control cookie preferences through your browser settings. Disabling cookies may limit certain website functionality.

7. Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Data is shared only in the following limited circumstances:

All primary infrastructure and user data is stored and processed on servers operated directly by Desert Rose FZE. and it's server hoster parthner.

8. Private Verification Materials

Photos, receipts, or other documents submitted as private proof of visit are:

• Visible only to you and the assigned moderator;
• Never published publicly under any circumstances;
• Permanently and irreversibly deleted immediately after the review is approved or rejected; and
• Not retained, archived, or used for any other purpose.

9. User-Submitted Public Photos

Photos submitted for public display within reviews are your responsibility. You must ensure that any public photo does not contain images of individuals who have not given their consent to be photographed or published. By submitting public photos, you confirm you hold all necessary rights and consents. Desert Rose FZE. bears no liability for user-submitted content that violates the privacy or rights of any third party.

10. Data Retention

After the applicable retention period, personal data is securely deleted or irreversibly anonymised. We may retain data longer where required by applicable UAE law or for the defence of legal claims.

11. Your Rights under UAE PDPL

Under Federal Decree-Law No. 45/2021, you have the following rights in relation to your personal data:

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your personal data (subject to legal retention obligations).
• Withdraw consent — revoke consent for push notifications at any time via device settings or in-app settings.
• Data portability — request your data in a structured, machine-readable format.
• Objection — object to processing based on our legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. We may ask you to verify your identity before processing your request.

12. Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption in transit — all data transmitted between the app and our servers uses TLS 1.2 or higher;
• Encryption at rest — sensitive account data is stored in encrypted form;
• Access controls — access to personal data is restricted to authorised personnel on a need-to-know basis; and
• Breach notification — in the event of a personal data breach that poses a risk to your rights, we will notify affected users and relevant UAE authorities without undue delay and in accordance with the requirements of the PDPL.

However, no method of electronic storage or transmission is 100% secure. We encourage you to use a strong, unique password and to notify us immediately at [email protected] if you suspect unauthorised access to your account.

13. International Data Transfers

Your personal data is primarily stored and processed within the UAE. When data is transferred to third-party processors outside the UAE (e.g. Mixpanel, RevenueCat), we ensure appropriate safeguards are in place in accordance with the PDPL. Third-party processors listed in Section 7 maintain their own PDPL- and internationally-recognised privacy standards.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by updating the "Last Updated" date on this page and, where appropriate, via in-app notification. Your continued use of TrueMap after changes are posted constitutes acceptance of the updated policy.