Privacy Policy

HIMMA COMPUTER SYSTEMS AND SOFTWARE DESIGNING - L.L.C - S.P.C (trade licence TN-6721792) ("Himma", "we") operates Himma Investments and is the controller of the personal data described here. This policy covers himma.ai, the briefs and alerts we send, and our support channels. We handle personal data in line with the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and, where it applies to you, the EU and UK GDPR.

• Account details: your email address and sign-in records.
• Your setup: holdings and quantities you enter, watchlists, alert and brief preferences, time zone and other settings.
• Channel details: if you connect Telegram or WhatsApp, the identifier we need to deliver messages there.
• Waitlist details: the email address you join with and where you signed up from.
• Usage and device data: pages viewed, features used, performance and error reports, IP address, browser and device type, and timestamps.
• Messages you send us: support requests and feedback, with anything you attach.

We do not ask for brokerage passwords, bank details or card numbers, and we do not need them to run the Service.

• to create and secure your account and sign you in;
• to personalise the Service, for example ranking news by its relevance to your holdings and writing your briefs;
• to send the briefs, alerts and account emails you have chosen or that the account needs;
• to measure, debug and improve the Service and keep it secure, including preventing abuse;
• to answer your messages and to meet legal obligations.

We rely on the contract with you to run the Service, on your consent for optional messages and analytics where consent is required, and on our legitimate interests in securing and improving the Service. We do not sell your personal data, and we do not use your holdings to trade.

We use cookies and browser storage that the Service needs: to keep you signed in, remember your time zone and preferences, and remember recent searches and which alerts you have read.

We also use Google Analytics to understand how the site is used, and Amazon CloudWatch RUM to measure page performance and catch errors. You can block or delete cookies in your browser settings; parts of the Service may stop working if you block the ones it needs.

We share personal data only with service providers who process it for us under contract, for the purposes above:

• Amazon Web Services: hosting, databases, sign-in (Amazon Cognito) and performance monitoring;
• Cloudflare: network delivery, security and bot protection (Turnstile);
• Google: Sign in with Google, if you use it, and Google Analytics;
• Anthropic: AI models that help write summaries and briefs;
• email delivery providers, and Telegram or WhatsApp if you connect them.

We may also disclose data when the law requires it, to protect our rights or users' safety, or to a buyer or successor if our business is reorganised or sold, under the same protections.

Summaries, briefs and some explanations are written with the help of AI language models. When that text is personalised, the request can include the symbols you hold or follow. We do not include your email address or other contact details in those requests, and our providers do not use them to train their models.

Some providers store or process data outside the United Arab Emirates, including in the United States and the European Union. Where we transfer personal data, we use contractual and other safeguards that applicable law requires.

We keep account data, holdings and settings while your account is open and delete them within a reasonable period after you ask us to close it, unless the law requires us to keep them longer. Sign-in codes and links expire within minutes. Logs, performance data and analytics are kept for a limited period and then deleted or aggregated.

We use encryption in transit, access controls and monitoring to protect personal data. No system is completely secure, so we cannot guarantee absolute security. If a breach affects your data, we will notify you and the authorities where the law requires it.

Depending on where you live, you can ask to access, correct, delete or receive a copy of your personal data, to restrict or object to certain processing, and to withdraw consent at any time. Email [email protected] from the address on your account and we will do our best to reply as quickly as possible, and always within 30 days.

You can change briefs, alerts and channels in Settings at any time, and every brief has an unsubscribe link.

The Service is for adults aged 18 and over. We do not knowingly collect data from anyone younger. If you think a minor has given us data, contact us and we will delete it.

We may update this policy. We will post the new version here with a new effective date and tell signed-in users about material changes in the app or by email.

For privacy questions or requests, email [email protected]. HIMMA COMPUTER SYSTEMS AND SOFTWARE DESIGNING - L.L.C - S.P.C (trade licence TN-6721792), United Arab Emirates.