Effective 2026-07-06 · Last updated 2026-07-06
This summary gives you the key points. Please read the full notice below for the detail.
Nabita FZ-LLC ("SLAN", "we", "us", "our"), a company registered in the Ras Al Khaimah Economic Zone (RAKEZ), UAE, licence no. SFFO0689, registered address Compass Building, Al Shohada Road, Al Hamra Industrial Zone-FZ, Ras Al Khaimah, UAE, is the data controller responsible for the personal data described in this notice.
Because SLAN is based in Ras Al Khaimah (RAK), UAE, and serves users internationally, more than one data-protection law applies, and we comply with each for the users it covers:
Where these laws give you similar rights, we apply a single high standard. Where they differ, the rights specific to your location apply.
Note (high-risk processing). Our AI personalisation (profiling) and AI-driven Services may constitute "High Risk Processing Activities" under UAE Federal PDPL, which can require a Data Protection Impact Assessment (DPIA), registration/notification with the UAE Data Office, and possibly a DPO.
This notice applies to two groups of users, and we identify where their treatment differs:
It applies to our website, applications, and related services (the "Services").
We do not intentionally collect special-category data (such as health, religious, or political information). Please do not submit such information to the AI assistants unless necessary, and avoid including it in materials you contribute.
Under the GDPR we must have a "lawful basis" for each use of your personal data. The table summarises our main uses.
| Purpose | Who | Data used | Lawful basis (GDPR Art. 6) |
|---|---|---|---|
| Create and manage your account | All | Identity, account data | Performance of a contract |
| Provide the Services and AI assistants | All | Account, AI interaction, usage data | Performance of a contract |
| Memory / personalisation | Learners | AI interaction data → profile summary | Consent (opt-in; withdraw any time) |
| Build and operate AI assistants from contributed knowledge | Experts | Contributed materials, profile | Performance of a contract |
| Aggregate, non-identifying analytics and reporting | All | Usage data (aggregated/anonymised) | Legitimate interests — to understand and improve the Services |
| Non-essential cookies and similar tracking | All | Cookie/usage data | Consent (opt-in via cookie banner) |
| Security, fraud prevention, and service integrity | All | Technical, usage data | Legitimate interests; legal obligation |
| Communicate with you about the Services | All | Contact data | Performance of a contract; legitimate interests |
| Comply with legal obligations | All | As required | Legal obligation |
Where we rely on legitimate interests, we have assessed that our interests do not override your rights, and you can object at any time (Section 10). Where we rely on consent, you can withdraw it at any time without affecting prior processing.
When you interact with a SLAN AI assistant, your messages and the content you submit are processed by trusted third-party AI model providers to generate responses.
We use these providers under their paid/enterprise terms. Under those terms, your prompts and the AI's responses are not used to train or improve the providers' AI models. This is consistent with the enterprise/paid policies published by major AI providers.
We do not use your personal data to train any AI model, and we do not use it to improve our AI for other users beyond the personalisation you control in Section 5.
Providers may retain content briefly to detect misuse and keep their services secure, and for legal compliance, as described in their terms.
We may change AI model providers over time as technology evolves. We will always select providers that offer comparable data-protection commitments, and we will keep this notice and our sub-processor information up to date.
We currently use Google Gemini, Anthropic (Claude), and OpenAI as our third-party AI model providers, each accessed under their paid/enterprise API terms (not free-tier), under which prompts and outputs are not used to train their models by default. If data residency ("zoning") requirements apply to your account or region, this can be arranged on request.
Memory is an optional feature that personalises your learning experience. It is off by default and only operates if you turn it on (consent).
How it works. When Memory is enabled, relevant messages from your conversations — the same messages already used to answer you — are processed by our AI model provider a second time to generate a short summary of your learning profile (for example, your goals, level, and topics of interest). That summary is stored in your account and used to make future responses more relevant to you.
Your controls. At any time you can:
Turning Memory off or deleting items does not affect the lawfulness of processing carried out before you did so. We keep Memory data only while your account is active or until you delete it (Section 11).
We design the feature to capture only learning-relevant information and not to infer sensitive personal data.
We use usage information to understand how the Services are used and to improve them.
If/when individually identifiable analytics are ever introduced, this notice will be updated and, where required, your consent obtained.
If you contribute as an Expert, we process your professional profile and the materials you submit so that we can build and operate AI learning assistants.
Intellectual-property ownership and licensing terms are governed by our Terms, not by this Privacy Notice.
We do not sell your personal data. We share it only as needed to run the Services:
A current list of our key sub-processors is available at [link / on request].
We use cookies and similar technologies to operate the Services and, with your consent, to measure usage.
For details of each cookie, its purpose, and duration, see our Cookie Policy.
Under the DIFC Data Protection Law No. 5 of 2020, you have rights that mirror those below, including the rights to access, rectify, erase, restrict, and port your data, to object to processing, and to withdraw consent. You may lodge a complaint with the DIFC Commissioner of Data Protection. To exercise your rights, contact us at privacy@slan.co.
You have the right to: access your data; rectify inaccurate data; erase data ("right to be forgotten"); restrict processing; data portability; object to processing based on legitimate interests; and not be subject to solely automated decisions with legal or similarly significant effects. You may also withdraw consent at any time where we rely on it (for example, Memory and non-essential cookies).
To exercise any right, contact us at privacy@slan.co. You also have the right to lodge a complaint with your local data protection supervisory authority. As we do not yet have an EU/EEA establishment, no single lead authority has been designated; you may complain to the supervisory authority in your own EU/EEA or UK country of residence.
Depending on your state, you may have the right to know/access, delete, correct, and opt out of certain data uses, and to be free from discrimination for exercising your rights. We do not "sell" your personal information, and we do not "share" it for cross-context behavioural advertising. To exercise these rights, contact us at privacy@slan.co.
We respond to verified requests within the timeframes required by law.
The Services are intended for adults. You must be 18 or older to use SLAN, and we do not knowingly collect personal data from anyone under 18. If we learn that we have collected data from a person under 18, we will delete it.
We use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and restrictions on internal access. Access to your Memory and personal content is limited by our access controls. No system is completely secure, but we work to protect your information and will notify you and the relevant authorities of a personal-data breach where the law requires.
We may update this notice from time to time. If we make material changes, we will notify you through the Services or by email and update the "Last updated" date above. Where a change requires your consent, we will ask for it.
Questions or requests about this notice or your personal data: