AwnakPrivacy policy
Last updated: 10 November 2026
Draft for legal review. The operator’s legal name, address and privacy contact must be confirmed before these documents are finalised.
Please read these documents before using Awnak. They explain the service, its limits and how your information is handled.
1. Information you provide
Awnak stores account details and profile information you choose to provide: name, email, phone, nationality, residence emirate, gender and profile photo. It also stores conversation messages, AI replies, completed-session topics, summaries and ratings, and lawyer review requests with consent and conversation snapshots. Legal conversations may contain sensitive personal information. Avoid sharing identification numbers, unnecessary documents or other people’s details.
2. Purposes and service providers
Account and profile data support sign-in and account settings. Conversation history supports contextual replies and saved sessions. Lovable Cloud provides hosting, account services, the database and private file storage. Messages, relevant history and legal context are sent through Lovable AI Gateway to configured AI providers (currently OpenAI for chat responses; Google for retrieval embeddings). Google receives account sign-in information when you choose Google sign-in. Providers process the data necessary to deliver their services. Do not assume AI prompts are anonymous or protected by lawyer-client privilege.
3. Photos, reviews and access
Profile photos are stored privately and displayed using temporary signed links. Account data and saved conversations are owner-scoped; authorised service access may be necessary for operations or legal obligations. With your explicit review-sharing consent, a snapshot of all messages and AI replies up to submission is saved for the selected lawyer and review administrators. This is separate from using the AI; future messages are not automatically shared. Lawyer delivery is not automatic until recipient accounts are linked.
4. Browser storage and external services
Sign-in session information and your language choice are stored in your browser to keep you signed in and remember your language. Signing out clears the authentication session, not your saved account or conversation records. Fonts are loaded from Google Fonts, which receives ordinary connection information including your IP address and browser request details. Opening an official source or other external link sends you to that provider’s site and its own privacy terms. No advertising pixels were identified in the current app.
5. Visitor analytics
For every visitor to the published site, Lovable records pages visited, where visitors came from, country, browser, operating system and device type, time spent, page-load performance, errors and clicks on buttons and links. There is currently no consent banner; click tracking is enabled. Lovable’s analytics uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify visitors. Detailed data is kept for 90 days and daily summaries for a year. Lovable collects this data for us.
Lovable’s privacy policy explains how it handles this data.6. Retention and international processing
Account records, conversations, completed-session snapshots, ratings and review requests remain stored; a fixed deletion schedule has not yet been established. Closing a session locks it against editing but does not delete it. Requests for deletion must account for any lawful retention requirements and backups. Cloud and AI providers may process information outside the UAE; provider locations, transfer safeguards, contractual retention and model-training terms must be confirmed before finalisation. We do not promise UAE-only storage or zero AI-provider retention.
7. Your choices and rights
You can edit your profile, replace or remove its photo, choose whether to submit a lawyer review, and sign out. Depending on applicable law, you may request access, correction, deletion, restriction or withdrawal of consent where consent is the basis of processing, subject to lawful exceptions. Withdrawal does not undo prior lawful processing or guarantee removal of information already lawfully shared with an independent lawyer. No self-service account-deletion flow is currently provided. The operator must supply a working privacy contact and request-handling process before finalisation.
8. Security, legal basis and updates
Access controls and private photo storage help protect information, but no system can guarantee absolute security. Processing grounds, sensitive-data requirements and cross-border safeguards must be reviewed for the operator’s applicable UAE jurisdiction, including DIFC or ADGM where relevant. This notice describes current functionality; it is not a compliance certification. Material changes will be reflected in this policy with an updated date.