Privacy policy

Last updated: 7 October 2026

Who we are

Amoura (amoura.ae) is operated by DAIM SP LLC - FZ, based in Dubai, United Arab Emirates. This policy covers the Amoura web app at app.amoura.ae and the Amoura iOS app. If you have a question about it, write to hello@amoura.ae.

Who uses Amoura

Amoura is business software for medical and health distributors. The people who use it are employees of those distributor companies (admins, sales reps, managers, warehouse staff, accountants and marketing) and staff at the clinics they supply. There is no public sign-up. Your account is created by an admin at the company you work with, which we call the customer company in this policy.

Our role and your company’s role

Amoura handles two kinds of personal data, and the responsibility for each is different.

Business data. Records a customer company puts into Amoura, such as its clinics, doctor and healthcare professional contact details, orders, invoices, stock and visits. The customer company decides what goes in and is the controller of that data. Amoura processes it on the company’s behalf and only to run the service for them.
Account data. Your name, work email, phone number, and sign-in and security logs. Amoura is the controller of this data.

If your question is about business data (for example, a clinic record or an order), the customer company is usually the right place to start. We will help them answer it.

What we collect

Account details: name, work email and phone number.
Sign-in data: your password, stored only as a hash; two-factor settings if you turn them on; passkeys; device and session information; and IP addresses in security logs.
Location of field reps: precise location, collected only while the app is open and only to record visit check-ins and routes. See the section on location below.
Files you upload: photos and files such as receipts, signatures and documents.
Business records: clinics, doctor and healthcare professional contact details, orders, invoices, stock and visits entered by your company.
Push notification tokens: so the app can send you notifications.
Basic performance metrics: page speed measurements collected with Vercel Speed Insights.

How we use it

To run the service your company signed up for: ordering, stock, invoicing, field sales and reporting.
To sign you in, keep your account secure and investigate suspicious activity.
To send you emails and notifications about your work in Amoura.
To find and fix slow or broken parts of the app.

We do not show advertising, we do not track you across other apps or websites, and we do not sell personal data.

Location

Only field reps are asked for location. The app reads your precise location while it is open, to record where a visit check-in happened and the route of a day’s visits. It does not track you in the background. You can change or turn off location access at any time in iOS Settings.

Face ID

If you unlock the iOS app with Face ID, the check happens on your iPhone. Amoura never receives your face data or any other biometric data.

AI features

Some features use AI: reading receipts, Intelligence insights and drafting messages. When you use one, the data needed for that task is sent to Anthropic (the Claude API) to produce the result. The app asks for your permission before you use these features for the first time. Under Anthropic’s commercial terms, API data is not used to train their models.

A customer company can connect its own WhatsApp Business number to Amoura through Meta’s sign-up flow. Amoura then sends and receives WhatsApp messages for that company through the Meta WhatsApp Business Platform. For this, Amoura receives and stores:

Business account details from Meta: the WhatsApp Business account and phone number IDs, the number’s display name, its quality rating and messaging limit, the company’s message templates and their review status, and the message counts and costs Meta reports for the account.
An access token that lets Amoura send messages for that number. It is stored encrypted and is never shown in the app.
Messages and their status: the phone numbers and names of the people the company messages, the messages sent and received, and whether each one was delivered and read.
Opt-outs: when someone replies STOP or blocks marketing messages, Amoura records it so that number is not messaged again.

Amoura uses this data only to send, receive and report on the company’s own WhatsApp messages, and to bill the company for them. It is not used for advertising and is not shared with other customer companies. Received messages are kept for 24 months unless the company chooses a shorter period. When a company disconnects a number, Amoura deletes the stored access token straight away. How to ask for this data to be deleted is explained on the data deletion page.

Service providers

We use these companies to run Amoura:

Vercel: hosting, file storage and performance metrics.
Supabase: the database.
Anthropic: the AI features described above.
Resend: email delivery.
Meta WhatsApp Business Platform: WhatsApp messages that a customer company chooses to send through Amoura.
Apple Push Notification service: notifications on iOS.

Where data is stored

Our hosting, file storage and database run in the Singapore region, through Vercel and Supabase. This means your data is stored outside the UAE.

Security

Data travels between your device and Amoura over encrypted connections (TLS). Passwords are stored as hashes, never in plain text. Each customer company can only see its own records, and access inside a company depends on each user’s role. More detail is on our security page.

How long we keep data

We keep data for as long as the customer company’s subscription is active. When an account is deleted, we remove its personal data within 30 days. Records the customer company must keep for legal or tax reasons, such as invoices, stay with that company.

Deleting your account

You can ask for your account to be deleted in two ways:

In the app, open the account menu and choose Request account deletion.
Email hello@amoura.ae.

Your company admin removes you as a user, and we complete the deletion within 30 days. Records your company has to keep, such as invoices, stay with the company. The data deletion page covers every case, including WhatsApp data.

Your rights

Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021), you can ask to see the personal data we hold about you, have it corrected, have it deleted, or object to how it is used. Send your request to hello@amoura.ae. We reply within 30 days. For business data held on behalf of a customer company, we will work with that company to answer you.

Children

Amoura is a workplace tool and is not meant for anyone under 18.

Changes to this policy

If we change this policy, we will post the new version on this page and update the date at the top.

Contact

DAIM SP LLC - FZ (Amoura), Dubai, United Arab Emirates. Email hello@amoura.ae. For help with the app, see the support page. The terms of use cover how the service may be used.