Introduction
The Technology Innovation Institute (TII) (“we,” “our,” or “us”) respects your privacy and is committed to protecting the personal information you share when using the Falcon LLM mobile application, web app and other acess methods (the “App” or “Falcon LLM”).
This Privacy Policy, which may be amended from time to time, describes:
- The types of data we collect from you as an individual user of the App.
- How we use, store, and secure your data.
- Your rights and choices regarding your data.
This Privacy Policy is designed to comply with applicable laws, including; (i) UAE Federal Data Protection Law (Decree-Law No. 45 of 2021), (ii) Kuwait Law No. 20 of 2014 on Electronic Transactions, (iii) Bahrain Law No. 30 of 2018 on Personal Data Protection, (iv) Oman Law No. 6 of 2022 on Personal Data Protection, (v) Qatar Personal Data Protection Law No. 13 of 2016, (vi) Saudi Royal Decree No. M/19 of 9/2/1443 H (16 September 2021) issuing Personal Data Protection Law and other privacy laws relevant to the processing of your data (the “Data Protection Laws”), as well as requirements set by the Apple App Store and Google Play Store (“App Requirements”).
This Privacy Policy does not regulate processing of personal data as a part of our contractual b2b and b2g obligations. If you have any questions about how we collect and use training information to develop our language model in the App, please contact us at aidrc.mobile.apps@tii.ae.
Information We Collect
When you use Falcon LLM, we collect and process certain information about you, as described in this section.
In particular, we may collect data about you as a result of how you use the App, or when you give it to us directly (e.g., when you reach out to us). Such data includes the following:
a: Account Data
- When you create an account in any of Falcon LLM access methods, we will collect information associated with your account, including your name, contact information (email), account credentials.
b: Communication Data
- If you contact us (e.g., via email), we may process your contact details and the contents of the messages you send strictly for support purposes.
c: User Content and Input Data
- Prompts, questions, instructions or other content typed into the App.Where you use the “temporary chat” functionality within the App, none of the data you type into the chat will be stored beyond your chat session.
- Responses generated by the App may be stored temporarily for debugging, performance monitoring, or – only with your separate consent – for our language model training and improvement.
- Certain prompts, questions, or instructions that you type into Falcon LLM may contain your personal data, depending on what you include. We do not control or monitor the content of your logs. If you choose to include any personal data in your communication with the App, you do so voluntarily and at your own risk and discretion. If you do not want to provide additional personal data about you to us, please refrain from including it in your prompts, questions, instructions or content submitted in the App.
- We do not request or in any way encourage that you share any sensitive personal data with us. By “sensitive personal data” we mean personal data revealing or concerning (directly or indirectly) particularly sensitive information about you, such as about racial or ethnic origin, political opinions, religious or philosophical beliefs, criminal records, health or sex life, genetic data, biometric data or data related to security measures. Please refrain from providing us or making available to us any sensitive personal data – including directly, through input into prompts, or otherwise.
d: Technical and Device Data
- Device type (computer or mobile device), operating system, application version, and computer connection.
- IP address and related general location information (including time zone and country), operating system, browser type, dates and times of access, user agent and version connection logs, crash reports.
- Usage statistics and performance data (e.g., frequency of interactions, features used).
Cookies
Please note that we may use cookies and similar tracking technologies necessary to operate and administer the App.
How We Use Your Information
We may use your data for the following purposes:
- Core functionality: to deliver AI-generated responses in the App.
- Communication: to communicate with you, including to respond to your questions or queries, or if we need to notify you on the changes in the App or the policies on the use of the App. We will not sell your personal data or use it for any direct marketing activities. If this changes, we will notify you and will only send you such marketing communications where we obtain your express consent that you agree to us doing so.
- Performance and security: to monitor uptime, detect and prevent misuse or abuse of the App, to prevent fraud and other illegal activity, to protect the security of our systems and the App, as well as to fix technical issues in the App.
- Analytics: to better understand usage trends, to improve and develop user experience, including, for example, to develop new features or tools within the App.
- Research and development (optional): only with you separate consent (given either through the Privacy Settings of the App or otherwise in the configuration of the App), we may use your prompts to further train and improve Falcon LLM. You may withdraw your consent at any time. Without your consent, your data will only be processed transiently for generating responses and then discarded securely.
- Legal compliance: to comply with our obligations under applicable laws, including the Data Protection Laws, App Requirements, or to protect the rights, privacy, safety, or property that we are responsible for, or to respond to lawful requests.
Legal Basis for Data Processing
The Data Protection Laws require us to always have a lawful basis to collect, use, store and otherwise process your personal data. Under certain Data Protection Laws we may only process your personal data on the basis of your explicit consent – where this is the case, we will rely on consent as the legal basis for such processing. Where we are permitted to do so under Data Protection Laws, we may rely on one or more of the following grounds:
- Performance of a contract: This legal basis applies where we need to perform a contract we are about to enter into or have entered into with you.
- Legal obligation: This applies where the processing is necessary for compliance with our legal obligations in the UAE or other jurisdictions.
- Vital interest: We may also process your personal data, where such processing is necessary to protect your or another person’s vital interests (including any interests to preserve life).
- Consent: In a limited number of cases, where we cannot rely on another basis for processing your data, we will obtain your express consent to the processing of your personal data in a particular manner and/or for particular purposes. We may take reasonable measures to verify your identity when we obtain your express consent.
Data Sharing and Transfers
We may share your data with third-party vendors and contractors to facilitate the provision of the service through the App. These third parties will be acting on our behalf under strict confidentiality obligations and are required to provide the same or equal protection of your data as described in this Privacy Policy. Please see the details below:
- No Sale of Data: We do not sell your personal or usage data.
- Legal Obligations: We may disclose data if required to comply with applicable laws, regulation, or a request of a court of competent jurisdiction or a lawful authority.
- Data Transfers: We may need to transfer your data outside of your country where third party recipients (authorized third-party vendors and contractors) are based in another jurisdiction. Where we transfer your personal data to countries that have a so-called “adequate level of data protection” (as determined by competent authorities or otherwise under the Data Protection Laws), we rely on such adequacy decisions. Where a destination country does not have an adequate level of protection, we implement appropriate international transfer mechanisms, and impact assessments (where required) to ensure your data is kept safe, in accordance with applicable Data Protection Laws.
Data Retention
We only keep your personal data for as long as necessary to fulfil the purposes for which we have collected it for (as described in this Privacy Policy), or for other legitimate business purposes such as resolving disputes, safety and security reasons, or complying with our legal obligations. You can request the deletion of your data at any time by contacting us as described in this Privacy Policy, and reasonable measures may be taken to verify your identity.
Other types of data we may hold about you are retained as follows:
- Transient Data: User prompts are processed in real time.
- Training Data: If you opt in to us using your data for training purposes of Falcon LLM, selected prompts may be retained securely to improve the App.
- Logs: Technical logs are retained for a limited period (e.g., 30-90 days) before we proceed with secure deletion.
- Account Data: You can delete your App account at any time through the settings available in the App. If you would like to remove some information from your account or change it, you can do so by adjusting the relevant settings or contacting us directly at the contact details in this Privacy Policy. Please note that certain information from your account may only be amended and not removed (without deleting the whole account), as it would prevent us from making the App available to you.
Data Security
We implement appropriate technical and organizational measures to protect your data from unauthorized access, use, or disclosure.These measures include:
- Encryption of data in transit (TLS) and at rest.
- Strict access controls and monitoring.
- Secure or approved cloud hosting providers, in compliance with applicable Data Protection Laws and App Requirements.
- Regular security assessments and audits.
- Incident response procedures to address any data breaches or security incidents promptly and effectively.
Despite these safeguards and our best efforts, no system is entirely secure, and we cannot guarantee absolute protection. Therefore, you should take special care in deciding what information you provide to the App.
Children
The App is not intended for children under 18 years of age (or the minimum legal age in your jurisdiction). We do not knowingly collect information from children or allow the App to be used by children. If you have reason to believe that a child under 18 is using the App, please contact us at at aidrc.mobile.apps@tii.ae. If such information is discovered, any data processed in relation to such child’s use of the App will be deleted immediately.
User Privacy Rights
Under the applicable Data Protection Laws and relevant international principles, you may have the following rights:
- Right to Access: You have the right to request access to the personal data we hold about you and ask for clarification as to how we are processing your information.
- Right to Restrict Processing: In certain circumstances, you have the right to ask us to stop using or to restrict the processing of your personal data. Where processing is restricted, we may no longer use your personal data but may still be allowed to store it.
- Right to Object to Processing: You can object to certain types of data processing, such as to any decisions made about you that are based solely on automated processing of your personal data (where such decisions may have legal effects on you or otherwise significantly affect you), or processing for direct marketing purposes.
- Right to Withdraw Consent: You have the right to withdraw your consent for data use (opt out of processing) where we rely on consent as our sole legal basis.
- Right to Rectification: If you believe our records are inaccurate you have the right to ask for those records concerning your personal data to be updated or corrected.
- Right to Erasure: You may request the deletion of your personal data when we no longer need it for the purposes for which it was collected, subject to certain legal and regulatory retention obligations which may apply to us. Reasonable measures would be taken to verify your identity when you request for deletion of your personal data.
- Right to Data Portability: Under certain conditions, you have the right to request that we transfer the personal data we hold about you to another organization, or directly to you, in a structured, commonly used, and machine-readable format. Reasonable measures would be taken to verify your identity when you make such a request.
- Right to Lodge a Complaint: You have the right to lodge a complaint with a competent data protection authority if you have grounds to believe that the processing of your personal data is not in compliance with the applicable laws and regulations.
External Links
The App may contain links to other websites. Our Privacy Policy applies only to our App. If you click on a link to another website, you should read its privacy notice governing its collection and use of your data.
External Links
We may update this Privacy Policy from time to time, and changes will be communicated via the App or our website, or via email. The latest version will always be available at tii.ae/falcon-privacy.
Contact Information
If you have any questions or requests regarding this Privacy Policy, or your privacy rights, please contact us at:
Technology Innovation Institute (TII)
Masdar City, Abu Dhabi, UAE
at 📧 aidrc.mobile.apps@tii.ae.