Privacy Policy

Mulak Realty Portal L.L.C
Last updated: 24 August 2026

1. About us

Mulak is operated by Mulak Realty Portal L.L.C, a company registered in Dubai, United Arab Emirates.

• Commercial Licence No. 1640869
• Commercial Register No. 2915132
• Office 30-B, Port Saeed, Deira, Dubai, United Arab Emirates
• Contact: admin@mulak.app

This policy explains what personal data we collect, why we collect it, and what you can do with it. It covers mulak.app and our mobile applications.

We handle personal data in accordance with UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

2. Who can use Mulak

You need to be 18 or older to create an account. Mulak is not designed for children, and we do not knowingly collect personal data from anyone under 18.

If you look after property on behalf of a family member or another owner, the account should be registered by an adult who is responsible for it.

3. What we collect

When you sign up

• Name
• Email address
• Phone number (optional)
• Password, stored only as an encrypted hash — your actual password is never visible to us

Information you enter about your properties

• Building names, addresses and unit numbers
• Unit details such as size, type, floor, rent, service charges and purchase price
• Payment and cheque records including amounts, due dates, bank names and cheque numbers
• Maintenance records

Documents you upload

• Cheque images
• Tenancy contracts
• Property documents and off-plan payment plans

Information you enter about your tenants

• Tenant names
• Contact details
• Contract start and end dates

This is personal data belonging to other people. Section 7 explains how responsibility for it works.

Collected automatically

• Device type, operating system and app version
• IP address
• Screens visited and features used
• Approximate location from IP address, at city level only
• Error and crash reports

Payment information

Payments are processed by Stripe. Card details go directly to Stripe and are never stored on our systems. We receive only your subscription status and a customer reference.

4. Information you choose to add

The list in section 3 is what Mulak asks for. It is what the service needs in order to work.

Anything beyond that is added at your own choice and on your own initiative.

We do not request, require or expect you to enter or upload:

• Passport numbers, Emirates ID numbers or visa details
• Bank account numbers, IBANs or card details
• Salary, employment or financial standing information
• Medical or health information
• Religious, political or biometric information
• Family details or information about children
• Photographs of individuals
• Any other sensitive personal data, whether about yourself or anyone else

Please do not upload this kind of information to Mulak. The service is not designed to hold it, and it is not needed for anything Mulak does.

Notes fields, free-text boxes and document uploads exist for your convenience. What you put into them is entirely your decision. If you choose to enter or upload information that Mulak does not ask for, you do so at your own discretion and at your own risk. Such information falls outside the scope of the data we collect, and we accept no responsibility or liability for it, including for any legal consequence of that information being held, disclosed or lost.

If you have uploaded something you would rather not have, you can delete it yourself at any time in the app.

5. Why we use your data

We do not sell your personal data, and we have no plans to.

We may use anonymised and aggregated data, from which no individual can be identified, to analyse and improve the service and to publish general statistics about how the product is used.

6. How we use artificial intelligence

Mulak uses artificial intelligence to help you enter information faster.

In practice: when you upload a tenancy contract, cheque image or property document, the contents are sent to an AI service that reads the text and pulls out details such as names, dates, amounts and unit numbers, so you do not have to type them. You always see and confirm what was extracted before it is saved.

Our AI provider for this is Anthropic.

Your documents are not used to train AI models. They are processed only to return the extracted information to you.

AI extraction is a shortcut rather than an authoritative reading. It can misread, omit or misinterpret information, so please check the results before relying on them. We are not liable for loss arising from AI-extracted information, whether or not it was reviewed.

If you would rather not use this feature, you can enter everything manually. By uploading a document you are choosing to have it processed in this way.

7. Tenant data and information about other people

When you add a tenant to Mulak, you are entering personal data about someone else.

That data is yours to control and yours to be responsible for. You decide what to enter and why. We neither select it nor require it.

By entering it, you confirm that:

• You have the lawful right to collect, hold and upload that information
• You have obtained any consent or given any notice required under UAE law or any other applicable law
• The information does not infringe anyone's rights
• You will keep it accurate and remove it when it is no longer needed

We act as a processor only, handling that data on your instructions — storing it securely and using it solely to provide the service to you, never for our own purposes.

We do not verify tenant data, contact tenants, or have any relationship with them. If a tenant or other individual contacts us about their data, we will refer them to you, since you are the party who holds the relationship and made the decision to record it.

8. Who we share data with

We share data only with the providers needed to run Mulak.

Each is contractually bound to protect your data and use it only for the purpose described.

We may also disclose data where we are legally required to — for example in response to a valid order from a UAE court or regulatory authority.

This list is complete. We do not share your data with anyone not named here.

While we select providers carefully, their systems are outside our control. We are not liable for any act, omission, outage, error, security failure or data loss on the part of a third-party provider.

9. Where your data is stored

Our production database and file storage are hosted by Supabase in Tokyo, Japan. Some of our other providers operate servers in the United States and the European Union.

This means your personal data is stored and processed outside the United Arab Emirates.

Every provider we use is contractually bound to protect it, applies encryption in transit and at rest, and is subject to recognised data protection standards in its country of operation. By using Mulak, you consent to your data being transferred and processed in these locations.

10. How long we keep it

When you delete your account, your buildings, units, tenants, cheques, maintenance records and uploaded documents are permanently removed from our live systems. This happens immediately and cannot be undone.

Some records are kept longer where UAE law requires it, principally payment and invoice records for tax purposes.

11. How we protect your data

• All data is encrypted in transit using HTTPS
• Files and database contents are encrypted at rest
• Access is restricted at the database level, so no account can read another's data
• Passwords are stored as encrypted hashes and are never visible to us
• On mobile, your login session is held in your device's secure keychain
• Access to production systems is limited and monitored

We take security seriously and improve it continuously. That said, no system can be guaranteed completely secure. We cannot warrant that data will never be accessed without authorisation, lost, altered or become inaccessible, and we are not liable for such events where we have taken reasonable measures.

Keeping your own login credentials secure is your responsibility. We are not liable for loss arising from your credentials being shared, guessed or compromised, or from any action taken by someone using your account.

12. Security incidents

If we become aware of a security breach affecting your personal data, we will act to contain it, notify the UAE Data Office as required by law, and inform affected users without undue delay, explaining what happened and what data was involved.

13. Your rights and how to use them

Under UAE data protection law you have the right to access, correct, delete and export your personal data, to object to certain processing, to withdraw consent, and to complain to the UAE Data Office.

Most of these you can exercise yourself, immediately, in the app:

• Export — the export option in Settings downloads all of your data straight away
• Delete — the clear data option removes your records and documents permanently
• Correct — edit anything directly wherever it appears

For anything else, or if you have questions, contact us at admin@mulak.app.

14. Cookies

Essential cookies keep you signed in and remember your language preference. These are needed for the service to work.

Analytics cookies, set by PostHog, show us which features are used and where people run into difficulty, so we can improve the product. This is not used for advertising.

You can block cookies in your browser settings, though essential cookies are required for Mulak to function.

15. Messages we send

Service messages — cheque reminders, password resets, subscription notices and important changes. These are part of the service and continue while your account is active.

Product updates and marketing — only if you opt in, and every message includes an unsubscribe link.

Reminders are a convenience and their delivery cannot be guaranteed. Please see section 4 of our Terms of Service.

16. Changes to this policy

We may update this policy as the service develops or the law changes. The date at the top shows the current version, and we will let you know about material changes by email or in the app. Continuing to use Mulak after a change takes effect means you accept the updated policy.

17. Governing law

This policy is governed by the laws of the United Arab Emirates. Any dispute arising from it falls within the exclusive jurisdiction of the Courts of Dubai.

18. Contact us

Mulak Realty Portal L.L.C
Office 30-B, Port Saeed, Deira, Dubai, United Arab Emirates
admin@mulak.app