TALI FORESIGHT — Privacy Policy
Effective Date: November 5, 2026
Last Updated: November 5, 2026
Jurisdiction: Sharjah, UAE
This Privacy Policy explains how Tali Education Foresight Research FZE ("Tali Foresight," "we," "us," or "our"), an entity established in the Sharjah Research, Technology and Innovation Park (SRTIP), United Arab Emirates, collects, uses, shares, and protects your personal data when you use the TALI FORESIGHT mobile application and related services (collectively, "the App"). This Privacy Policy forms an integral part of, and should be read together with, our Terms of Service.
Summary of Our Privacy Commitment & Consent
We process personal data in accordance with applicable data protection laws, including the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) ("UAE PDPL"). By creating an account or using the App, you acknowledge this Privacy Policy and consent to the collection and processing of your personal data as described herein. We never sell your personal data to third parties or use it for third-party targeted advertising.
1. Who Can Use the App (Age Restriction)
TALI FORESIGHT is designed and intended exclusively for adults aged 18 years or older. During account registration, we require your date of birth to verify that you meet this minimum age requirement, and our systems prohibit account creation for anyone under 18. We do not knowingly collect, solicit, or process personal data from anyone under the age of 18. If we learn that we have inadvertently collected personal data from a minor under 18, we will promptly deactivate the relevant account and delete the associated data. If you believe a person under 18 has provided us with personal data, please contact us immediately at dr.thani@taliforesight.com.
2. Information We Collect
We collect only the information reasonably necessary to operate the App, deliver AI-assisted research and foresight insights, manage subscriptions, and maintain security.
2.1 Information You Provide Directly to Us
- Account Registration Details: Your email address or mobile phone number (depending on your selected sign-up method), an optional display name, and your authentication credentials. Passwords are encrypted and processed directly by Google Firebase Authentication and are never stored by us in readable (plaintext) form.
- Age Verification Data: Your date of birth, collected solely to confirm that you are 18 years of age or older.
- Sector Interests & User Preferences: The research sectors and foresight topics you select, your interface language preference (English or Arabic), display theme setting (light, dark, or system default), and notification settings (including your preferred delivery time and local time zone).
- User Queries, Prompts & Report Requests: Questions and prompts you submit to the AI Assistant, search topics entered into AI Insights, and custom report requests submitted via Request a Report (including any supporting descriptions or parameters you provide). Please avoid entering sensitive personal data (such as health, financial, or third-party confidential data) into AI prompts.
- Support Communications: Any information you provide when contacting us for customer support, feedback, or privacy inquiries.
2.2 Information Created Automatically When You Use the App
- Reading Activity & Sync Data: Reports you bookmark, your reading history, and reading progress percentages so your library remains synchronized across devices.
- Generated AI Outputs: Responses generated by the AI Assistant and custom AI Insights created for you, which are linked to your account so you can revisit them.
- Quota & Usage Counters: Daily counts of how many AI Assistant messages, AI Insights searches, and report requests you have used, enabling us to apply fair-use daily limits according to your plan.
- Subscription & Billing Status: Whether you are on a free trial or active paid subscription, subscription start and renewal dates, and the cryptographic purchase token/reference provided by Google Play (or Apple App Store, where applicable). We do not collect, receive, or store your credit card, debit card, or banking details; all payment transactions are processed directly by the relevant app store.
- Device & Sign-In Sessions: A record of active authenticated sessions and basic device identifiers so we can keep your account secure and enable remote sign-out.
- Push Notification Tokens: A device registration token generated by Google Firebase Cloud Messaging (FCM) used solely to route push notifications to your device.
- Server Log & Technical Diagnostics: Standard server logs automatically recording your IP address, request timestamps, app version, and error logs, used strictly for cybersecurity, fraud prevention, and debugging.
2.3 Information Stored Exclusively on Your Device (Local Storage)
On-Device Privacy by Design
Certain personal study tools—specifically your in-report highlights, personal study notes, custom collections, report ratings, daily reading streaks, and reports downloaded for offline reading—are stored locally on your device only. This data is not transmitted to our servers. Note: If you uninstall the App or clear the App's local storage without backing up your device, this locally stored data will be permanently erased.
3. How We Use Your Information & Legal Bases
We process your personal data only where we have a lawful basis under applicable law. The table below outlines how we use your data and the corresponding legal basis:
| Purpose of Processing | Categories of Data Used | Legal Basis |
|---|---|---|
| Creating and managing your account, authenticating sign-ins, and synchronizing bookmarks and history across devices. | Account details, session records, reading activity. | Performance of a Contract (Terms of Service) |
| Verifying that you meet the minimum age requirement of 18 years. | Date of birth. | Legal Obligation & Policy Compliance |
| Delivering core App functionality: reports, AI Insights, AI Assistant, Request a Report, Daily Brief, and PDF exports. | User queries/prompts, AI outputs, sector preferences. | Performance of a Contract |
| Personalizing content feeds, language (English/Arabic), and visual themes. | Sector interests, language and display settings. | Performance of a Contract / User Preference |
| Managing free trials, verifying active subscriptions, and applying daily feature usage limits. | Subscription status, store purchase token, usage counters. | Performance of a Contract |
| Sending optional push notifications and email updates (e.g., new sector reports, weekly digests). | Email address, FCM notification token, sector settings. | Your Consent (opt-out available anytime) |
| Securing the App, preventing abuse or unauthorized access, troubleshooting bugs, and maintaining audit records for disputes. | Server logs, IP address, session data, usage counters, account activity. | Legitimate Interests & Legal Claims |
4. AI-Generated Content & Third-Party AI Processing
When you interact with the AI Assistant, AI Insights, or Request a Report, the text prompts and topic descriptions you enter are transmitted securely via API to Google Gemini (Google's enterprise AI service) solely to generate your requested output. Where current news context is required for AI Insights or report generation, your search topic keywords are sent to Microsoft Bing News Search API to retrieve relevant public news sources.
AI Privacy Safeguards
- De-Identified Search Queries: When search topics are sent to Microsoft Bing News, your name, email address, phone number, and account identifiers are never included in the search request.
- No Model Training on Personal Identifiers: We utilize commercial cloud APIs governed by enterprise data processing terms. Your personal account details are not used to train public third-party foundation models.
- Informational Purposes Only: AI-generated responses may occasionally contain inaccuracies and are provided strictly for informational and research purposes, as detailed in our Terms of Service.
5. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties. We share limited data only with trusted infrastructure and service providers ("Data Processors") that operate the App on our behalf under strict confidentiality and data protection obligations:
| Service Provider | Role & Function | Data Processed |
|---|---|---|
| Google Firebase | Authentication & Cloud Messaging | Email/phone, hashed credentials, sign-in sessions, FCM push tokens. |
| Google Cloud Platform | Cloud Application & Database Hosting | Account profile, saved AI outputs, bookmarks, preferences, server logs. |
| Google Gemini API | AI Content & Insight Generation | User prompts, questions, and report topic descriptions (Section 4). |
| Microsoft Bing News | Real-Time News Source Retrieval | Search topic keywords only (no personal account identifiers). |
| Google Play (or Apple) | Subscription Billing & Payment Processing | Subscription status and purchase verification tokens. |
| Google Workspace | Transactional & Support Email Delivery | Email address, display name, support correspondence, digest emails. |
Internal Administrative Access & Legal Disclosures: Authorized administrators of Tali Foresight may access account metadata (such as name, email/phone, age verification status, subscription status, and in-app activity logs) strictly on a need-to-know basis to provide technical support, administer accounts, investigate abuse, and maintain records in the event of legal disputes. We may also disclose personal data if required to do so by applicable UAE law, court order, or regulatory authority, or where necessary to protect the safety, rights, or property of our users or the App.
6. Data Retention Schedule
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
- Active Accounts: Retained for the duration of your active account so you can access your library, preferences, and AI history.
- Deleted or Inactive Accounts: When you request account deletion, your active profile, bookmarks, and saved AI conversations are deleted or anonymized within 30 days, and purged from encrypted system backups within 90 days. Accounts remaining inactive for more than 24 months may be scheduled for deletion following prior email notice.
7. Your Privacy Choices & Data Subject Rights
Depending on your jurisdiction (including under the UAE PDPL), you have specific legal rights regarding your personal data, alongside direct controls built into the App:
In-App Controls
- Notifications: Customize notification types and delivery times, or disable them entirely, via Notification Settings in the App or your device OS settings.
- AI History & Preferences: Update your sector preferences or clear your AI Assistant conversation history at any time inside the App.
Statutory Data Rights
- Access & Portability: Request a copy of the personal data we hold about you in a structured format.
- Correction & Restriction: Request correction of inaccurate data or restriction of processing.
- Withdraw Consent: Withdraw consent for optional processing at any time without affecting prior processing.
Account & Data Deletion (In-App & Web Request Options)
You may permanently delete your account and associated personal data at any time through either of the following methods: (1) Inside the App: Navigate to Profile > Delete Account; or (2) Via Web or Email (without opening the App): Visit https://tali-api-840657110681.me-central1.run.app/delete-account or email dr.thani@taliforesight.com from your registered email address. Note: Deleting your account does not automatically cancel an active store billing subscription; you must manage or cancel subscriptions in your Google Play account settings.
8. Data Security
We implement technical and organizational security measures designed to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include TLS/HTTPS encryption for all data in transit, encryption at rest on Google Cloud infrastructure, secure token-based authentication via Google Firebase, strict server-side access controls, and revocable sign-in session management. While we follow industry best practices, no method of electronic transmission or storage is completely infallible, and we cannot guarantee absolute security.
9. International Data Transfers
Tali Education Foresight Research FZE is established in the United Arab Emirates. However, our cloud infrastructure and third-party service providers (such as Google Cloud, Firebase, and Microsoft) process and store data on secure servers located outside the UAE, including in Doha, Qatar (Google Cloud me-central1). Where personal data is transferred outside the UAE, we ensure appropriate safeguards are in place in accordance with the UAE PDPL, including standard contractual data protection clauses and enterprise security commitments.
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect new App features, operational changes, or legal requirements. When we make material changes, we will update the "Last Updated" date at the top of this Policy and notify you via an in-app notice or email prior to the changes taking effect. Your continued use of the App after the effective date constitutes your acceptance of the updated Privacy Policy.
11. Contact Us & Data Controller Details
If you have any questions, concerns, or requests to exercise your legal rights under this Privacy Policy, please contact us:
- Data Controller / Company: Tali Education Foresight Research FZE
- Privacy & Support Email: dr.thani@taliforesight.com
- Registered Address: Sharjah Research Technology and Innovation Park (SRTIP), Sharjah, United Arab Emirates
- Official Website: www.taliforesight.com