Privacy Policy

We collect the minimum data needed to run checks and generate your Conversation Playbook. We delete check results after 7 days. We don't sell your data. We only search publicly available databases: government registries, court records, business filings, and phone directories. If information about someone isn't in those public sources, we won't find it. But having verified information from public records is better than going in with none.

Safi is operated by Safi Holdings Ltd, registered in ADGM, Abu Dhabi Global Market, UAE. Safi is the data controller for your personal data.

Data Protection contact: privacy@getsafi.ai

To use Safi, we need your phone number to verify your identity via a one-time code. When you run a check, we need the name and phone number of the person you're checking, along with your use case (landlord, date, contractor, etc.) so we can tailor the results. You can optionally provide additional details like a company name to improve accuracy.

If you make a purchase, your payment is handled by our payment processor. We never see or store your card details.

We also collect standard technical data (device type, pages visited, error logs) to keep Safi running smoothly. This data is anonymised and kept for up to 90 days.

Check results are automatically deleted after 7 days. Your account information (phone number) is kept while your account is active and deleted within 30 days if you close your account.

When you run a check, we search publicly available sources including the UAE National Economic Register, phone directory listings, sanctions and watchlist databases, publicly available social media profiles, and other accessible government registries.

All of this information is already publicly available.

In the UAE, Safi operates in “ephemeral mode”: we don't show you raw data about the person you checked. We use the information to generate a Conversation Playbook: smart questions for you to ask, with guidance on how to interpret the answers. The raw data never leaves our servers and is automatically deleted after 7 days.

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45/2021), we process your data based on your consent, given when you accept our terms. Publicly available data about the person you check (government registries, business filings, and publicly posted social profiles) falls under the PDPL exemption for data “made available and known to all by an act of the data owner.”

We use your data to provide the Safi service, process payments, improve how Safi works, communicate with you about your checks, and prevent fraud and abuse.

We do NOT use your data for advertising, profiling, or selling to third parties.

We work with a small number of trusted service providers to process payments, deliver messages, generate reports, track errors, and understand how people use Safi. Each provider only receives the minimum data needed to do their job, and all are contractually required to protect your data.

We do not sell, rent, trade, or otherwise monetise your personal data. We do not share your data with data brokers or advertisers.

Under the UAE PDPL you have the right to access, correct, or delete your personal data, restrict or object to processing, receive your data in a portable format, and withdraw consent at any time. To exercise any of these rights, email privacy@getsafi.ai. We respond within 30 days.

If someone believes they have been checked on Safi, they can contact us at privacy@getsafi.ai. We will verify their identity and, if data exists within the 7-day window, provide a summary of what publicly available information we found. If data has already been deleted, we will confirm that. We will never reveal who checked them, how many times, or which use case was selected.

We use essential cookies to keep Safi working (authentication and session management) and optional analytics cookies to understand usage patterns. You can opt out of analytics cookies when you first visit. We don't use advertising or third-party tracking cookies.

Your data is encrypted in transit and at rest, protected by row-level database security, and accessible only to essential systems. Check results are automatically deleted after 7 days. If we discover a data breach, we will notify affected users and the UAE Data Office as required by applicable law.

Your data may be processed in the UAE and in countries where our service providers operate. We ensure that all transfers are protected by appropriate contractual safeguards in compliance with the PDPL.

Safi is not for anyone under 18. We don't knowingly collect data from minors.

If we make material changes, we'll notify you via WhatsApp or in-app notice at least 30 days before they take effect. Your continued use of Safi after the effective date means you accept the updated policy.

If any provision of this policy is found to be unenforceable or invalid, that provision will be limited or eliminated to the minimum extent necessary, and the remaining provisions will remain in full force and effect.

Privacy questions: privacy@getsafi.ai
General questions: hello@getsafi.ai