What we collect on this site

The email address you give us, the referral code that brought you, a hashed IP for rate-limiting, and your consent record with its timestamp. The app — when it launches — has its own, fuller policy covering health data.

Why, and on what basis

To run the waitlist you asked to join (contract); to send the emails that operate it — verification, welcome and sign-in links (consent, withdrawable any time); and to keep the list honest against abuse (legitimate interest). Marketing beyond the waitlist is sent only if you tick the optional box, and stops the moment you unsubscribe.

Where your data goes — and the consent that makes it lawful

Your data is held and processed by our cloud infrastructure, hosting and email providers, located outside the UAE. The UAE has not published an adequacy list under Article 22 of the Personal Data Protection Law, so this transfer relies on Article 23: your express consent, given at signup, together with a data-processing agreement that binds each processor to PDPL-equivalent protections. You may withdraw that consent at any time — we then erase your data. To request the current list of our sub-processors, email privacy@quentta.com.

Your rights (PDPL Articles 13–18)

Access (Art. 13), portability (Art. 14), correction and erasure (Art. 15), restriction (Art. 16), stopping processing including direct marketing (Art. 17), and objection to automated processing (Art. 18). Email privacy@quentta.com — we act within 30 days. If a breach ever affects your data we notify the UAE Data Office and, where required, you.

Retention

Unverified entries are deleted after 30 days. Verified entries are kept until app launch completes the founding-cohort redemption, then minimised.