Privacy Policy

1. About Badha

Badha is the property services app for Burj Al Badha in Abu Dhabi, United Arab Emirates. It connects residents, property management, landlords, authorized staff, and approved maintenance partners. This policy covers the Badha app (package and bundle identifier ae.badha.app), badha.ae, and the associated Badha property services portals.

The property management team responsible for your Badha account handles privacy requests at contact@badha.ae. Accounts are issued or authorized by management; the app does not offer public self-registration. Features and records available to you depend on your account role and assigned properties.

2. Information we handle

We handle information you provide, information supplied by property management or authorized service partners, and technical information generated when you use the service. Depending on your role and the services you use, this includes:

• Account and contact details: your name, email address, telephone number, account identifier, role, company details where applicable, profile photo if supplied, and authentication information.
• Tenancy and identity records: property and unit details, leases, occupants, renewal and termination requests, clearance records, and identity information or documents provided for tenancy administration, such as Emirates ID, passport, date of birth, and nationality.
• Financial and service records: rent and payment schedules, payment transaction records and supporting evidence, invoices, deposits, settlements, quotations, and approvals.
• Maintenance information: issue descriptions, photos, videos, supporting documents, visit times, assignments, inspection results, and service updates.
• Communications: chat messages, participants, timestamps, replies and reactions, photos, videos, voice notes, documents, and any location you choose to send; support enquiries and notification preferences.
• Technical and security information: IP address, browser or device platform, an app-generated installation identifier, session information, access timestamps, and operational or audit logs used to run and protect the service.

Not all users provide every category. A document may contain additional information you choose to include. Please share only what is relevant to the service and avoid including another person's information without authority.

3. Device permissions and local storage

• Camera and selected photos or files: used when you choose to take or attach photos, videos, documents, or a profile photo. Content selected for an upload is sent to Badha when you confirm the relevant action.
• Microphone: used when you choose to record a voice note or video with audio. Voice notes and recorded videos you send are stored as message attachments.
• Location: used with your permission when you open the location-sharing feature. You can select or obtain a location, and its coordinates and label are sent to chat participants only when you press Send. Badha does not use background location tracking.
• Biometric sign-in: Face ID, fingerprint, or other supported device authentication is optional. Your device's operating system performs the biometric check. Badha does not receive or store your face scan, fingerprint, or biometric template. Saved sign-in credentials are protected using the device's secure storage.

The app stores sign-in session information securely on your device and stores preferences such as your selected language and unsent chat drafts locally. Downloaded or shared documents may also remain on your device or in the destination you select. Web portals use session cookies to keep you signed in and support security controls.

You can revoke optional permissions in your device settings. The associated feature may then be unavailable. Signing out removes the app's saved session; remembered biometric sign-in can be removed separately in the app's settings.

4. How we use information

We use information to authenticate users and enforce access permissions; provide tenancy, payment, document, maintenance, and messaging functions; coordinate visits and approved work; deliver service notifications; answer enquiries; maintain accurate operational records; investigate errors or misuse; and meet applicable legal, accounting, and dispute-resolution obligations.

Optional features use the information you choose to provide and the permissions you grant. Where applicable law requires consent, we seek it for the relevant activity. Other processing may be necessary to provide requested services, administer a tenancy or business relationship, protect the service, or comply with legal obligations.

Badha does not sell personal information or use your personal information for targeted advertising. The current app does not include advertising or third-party advertising trackers.

5. When information is shared

Information is available to people and organizations that need it for the relevant service, according to their assigned access:

• Property management, landlords, and authorized staff: for tenancy administration, payments, document handling, maintenance, approvals, and support.
• Approved maintenance companies and their assigned teams: relevant contact, property, request, appointment, and attachment information needed to carry out assigned work.
• Chat participants: messages, attachments, and locations you send to that conversation, along with your displayed identity and message activity.
• Technical service providers: hosting, storage, infrastructure, and authorized software support providers where access is needed to operate or support Badha. Trillion App Software Design develops and supports the software.
• Communication or identity services you use: when WhatsApp notifications or linked TrillionPass sign-in are used through the portals, the relevant provider processes the information needed to deliver the message or authenticate the account. These services also have their own privacy policies.
• Legal or safety recipients: where disclosure is required by applicable law or a valid legal request, or is necessary to protect rights, investigate fraud, or address a safety issue.

If you open a location in Apple Maps or Google Maps, or share a file to another app, that provider handles the information under its own privacy policy. The iOS location picker uses Apple's mapping services. Permission to use Badha does not grant other users unrestricted access to your records.

6. Security and storage

Badha uses HTTPS for service connections, password verification against stored password hashes, authenticated sessions, and role-based access checks. Uploaded documents are accessed through protected service endpoints. Mobile session credentials use the operating system's secure storage.

Information is processed on systems used to operate and support Badha. External services may process information in the countries where they operate. Where cross-border processing is involved, applicable data-protection requirements and appropriate safeguards must be considered.

No system can guarantee absolute security. Protect your sign-in details, secure your device, and contact us promptly if you suspect unauthorized access. Files that you download or share outside Badha are subject to the security of your device and the destination service.

7. Retention and deletion

We retain personal information for as long as it is needed for the purpose for which it was collected. The period depends on the type of record, the duration of the tenancy or service relationship, applicable legal or accounting obligations, and any unresolved complaint, investigation, or dispute.

Account and session information is kept as needed to provide and secure access. Tenancy, payment, identity, maintenance, and correspondence records may need to be retained after an account closes to meet the purposes above. Information that is no longer needed is deleted or anonymized. Copies in backups may remain until those backups are replaced under the applicable backup cycle.

Deleting a message or removing app access does not automatically erase all related business records, downloaded files, or copies already held by recipients. When you request deletion, we assess the associated information and explain any records that must be retained and the reason for retention.

8. Your choices and privacy requests

You can ask to access or correct your information, request deletion of your Badha app account and associated personal information, withdraw consent for optional processing, or raise a privacy concern. Depending on applicable law, you may also have rights to restrict or object to processing and to request a portable copy of your information.

We may need to verify your identity before disclosing or deleting information. We will review your request and explain the outcome and any applicable retention requirements. Closing app access does not cancel a tenancy, remove payment obligations, or require destruction of records that must be retained for a lawful purpose.

You can manage device permissions through your phone settings and optional notification preferences through the relevant portal settings where available. You may contact the appropriate data-protection authority if you believe your concern has not been resolved.

9. Children

Badha is intended for residents and authorized adults involved in property services. It is not directed to children under 18 and does not offer public registration for children. A tenancy record may contain dependent or occupant information supplied by an authorized adult where needed for property administration. Contact us if you believe a child has provided information inappropriately.

10. Changes to this policy

We may update this policy when the service or our data-handling practices change. The updated policy will appear at this address with a revised date. Where required, we will provide additional notice or request consent for a material change.

11. Contact us

For support, privacy enquiries, corrections, or deletion requests, contact the Badha property management team: