Privacy Policy
Effective 2026-05-03 · UAE PDPL (Federal Decree-Law No. 45 of 2021)
1. Who we are
Koma is the data controller for the personal data you provide while using this application. For privacy questions, contact us at privacy@heykoma.com.
2. What we collect
- Your email address (for sign-in via one-time code).
- Your pay date and chosen remittance corridor.
- Transactions you log (amount, category, optional note).
- Device information (browser, language, timezone) for session handling.
3. Lawful basis
We process this data on the lawful basis of your explicit consent under Article 6 of the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).
4. How we use it
- Budgeting and spending insights tailored to your pay cycle.
- Remittance-corridor comparisons (optional).
- AI-assisted logging when you choose to use the chat assistant.
5. Retention
We keep your data while your account is active. You can delete your account at any time from Settings; after deletion, your data is removed from production systems within 30 days and from backups on the following rotation.
6. Your rights
Under the UAE PDPL you have the right to access, rectify, delete, or object to our processing of your personal data, and to withdraw your consent at any time. Account deletion (Settings) is the canonical path to exercise the right to withdraw consent.
7. Contact
For any privacy-related inquiry, or to exercise your rights, contact us at privacy@heykoma.com.