Tanbeehat is operated by UXUI W.L.L. (CR 124544-2), Kingdom of Bahrain ("we", "us"). Contact: tech@weuxui.com.
What Tanbeehat does
Tanbeehat stores documents you upload, uses artificial intelligence to detect their expiry dates, and reminds you before they expire.
Information we collect
- Account data: name, email address, sign-in identifiers (Sign in with Apple, Google sign-in or email/password). Passwords are handled by Firebase Authentication; we never see or store them in readable form.
- Documents you upload: images and PDFs of documents you choose to add, and the details extracted from them (document type, numbers, dates, issuing organization).
- Preferences: notification settings, theme, reminder times.
- Device data: push notification token, app version, device type.
- Usage records: an audit log of sensitive actions (upload, view, edit, delete), including the IP address they came from, kept for security.
AI processing — plain disclosure
When you upload a document, it is transmitted securely to a third-party AI provider (Anthropic) solely to extract the fields shown to you on the confirmation screen. The document is sent from our servers, not your device; the provider processes it to return the extraction and does not use your documents to train its models under our API agreement.
WhatsApp and Wallet cards
If you forward an appointment or booking message to the Tanbeehat WhatsApp number, we receive that message and your WhatsApp phone number through Meta's WhatsApp Business Platform. We read the message only to create the appointment card you asked for and reply to you. We keep your number in a protected form so we can apply the free-card limit and link it to your account if you choose.
When you add a card to Apple Wallet or Google Wallet, the card details you see (title, date and time, place, room, address and doctor or host) are sent to Apple or Google so the card can be shown and updated on your phone. A card stops updating after its event and is removed when you delete the item or your account.
We also send reminder and account emails through our email provider (Resend) and push notifications through Apple and Google.
This website loads its fonts from Google Fonts, so your browser connects to Google when you open it. It uses no cookies, analytics or trackers.
How we protect your documents
Documents are stored in private, encrypted cloud storage. They are never publicly accessible; the app retrieves them only through short-lived signed links. All traffic uses HTTPS. Access is restricted to your authenticated account — our systems enforce that you can only ever access your own documents.
What we never do
We do not sell your data. We do not show advertising. We do not share your documents with anyone except the AI provider described above and the service providers named in this policy (Google Firebase and Google Cloud; our API hosting; Meta for WhatsApp; Apple and Google for Wallet and notifications; Resend for email), each bound to process data only on our instructions.
Your controls
- Delete any document at any time — the file and its reminders are permanently removed.
- Delete your account in Profile → Delete account — all documents, files, reminders and personal data are permanently erased. See our account deletion guide.
- Disable push or email reminders at any time.
Retention
Documents and account data are kept until you delete them or your account. Backup copies are purged within 30 days of deletion. Security audit logs are kept as long as needed to protect your account and the service.
Legal basis and jurisdiction
We process your data to provide the service you request, consistent with the Kingdom of Bahrain Personal Data Protection Law (Law No. 30 of 2018). Questions or complaints: contact us at the address above.
Children
Tanbeehat is not directed at children under 16 and we do not knowingly collect their data.
Changes
We will notify you in the app of material changes to this policy.