Privacy & data protection

Effective 13 September 2026 · version 2 · applies to every address on uae.co and the other domains we host

UAE.com Email is an email, calendar, contacts and file service operated from the United Arab Emirates. This page says what we keep, why, who can see it, and what you can do about it - in plain words.

What we store

• Your mail, calendar, contacts and files - the content you send, receive and save, with its dates, flags and folders.
• Your account - the address, display name, recovery email, sign-in settings, app passwords and passkeys you add, and your plan.
• Recovery options - your 6-digit recovery code and the answers to your recovery questions are stored scrambled (salted hashes). Nobody at UAE.com can read them; we can only check whether what you type matches.
• Purchases - the address you bought or booked, the amounts, the references from the payment provider, and the receipt. We never store card numbers: payments are taken by Stripe or Whop on their own pages.
• Technical records - sign-ins (time, network address, device type), delivery logs and error reports, kept for security and for finding faults.

Why we process it

• To deliver, store and show your mail and files, and to sync them to your devices (IMAP, JMAP, CalDAV, CardDAV, the app).
• To sell and bill the address and the plan you chose, and to send you the receipts, reminders and links those need.
• To keep the service safe: spam and virus filtering, sign-in protection, abuse prevention, fault finding.
• To answer you when you write to support.

Who else touches your data

• Infrastructure - Amazon Web Services (Mumbai) and Google Cloud (Doha) host the service; your data is stored encrypted on both, so a failure of one does not lose it.
• Payments - Stripe and Whop process payments and see your name, email and the amount. Their privacy policies apply to what they collect on their pages.
• Delivery - mail you send to other providers travels to them; once delivered it is under their control.
• Nobody else. We do not sell data, we show no advertising, and we do not read your mail. Support opens a mailbox only when you ask for help with it, and every such access is recorded.

Importing from another account

When you import mail, contacts, calendar or files from another provider (Gmail, Outlook, Yahoo, iCloud or any IMAP server), the sign-in you give us is used for that import only, kept scrambled while it runs, and deleted when it finishes. When you sign in with Google to import, we receive an access grant from Google that you can withdraw at any time in your Google account; we use it only to copy what you selected. Google Photos are imported from a Takeout archive you place in your Drive; we never hold a permanent connection to your Google account.

Retention and deletion

• Your data stays as long as your account exists. Items you delete are removed from the trash after 30 days and from backups within 35 days.
• When an account is closed, its mailbox and files are kept for 30 days in case it was a mistake, then erased; the receipts and the record of the purchase are kept for the period the law requires.
• Sign-in and delivery logs are kept for 90 days.

Your rights

You can export everything at any time (IMAP, CalDAV, CardDAV and the built-in export), correct your details in the app, change or remove your recovery options, and close the account. Requests about your data go to technical@uae.co; we answer within 30 days. UAE law applies, including the Personal Data Protection Law (Federal Decree-Law No. 45 of 2021).

Security & protection

• Transport is encrypted (TLS 1.2 or better, MTA-STS, DANE); storage is encrypted with hardware-managed keys.
• Sign-in protection: app passwords, passkeys, a code by email for new devices, and recovery options you control. Six wrong recovery attempts lock recovery for an hour.
• Every administrative action is recorded in an audit log; the platform is monitored around the clock and failures alert the operators.
• Report a security concern to technical@uae.co; we acknowledge within one working day.

Changes

When this page changes in a way that matters, we say so in the app before it applies. The version and date at the top tell you which edition you are reading.