On this page
Last updated: 6 August 2026
This policy explains what personal data Modern Living All4You Real Estate L.L.C. collects through the ML All4You mobile app and the Modern Living All4You web portal, what we do with it, and the choices you have. We have written it in plain language rather than legal boilerplate, because it is meant to be read.
1. Who we are
Modern Living All4You Real Estate L.L.C. ("we", "us", "our") is a real estate company registered in Dubai, United Arab Emirates, at Office 1503, Ontario Tower, Business Bay, Dubai, United Arab Emirates. We are the data controller for the personal data described in this policy. We operate the Modern Living All4You portal and the ML All4You mobile app, which is a companion to it.
Questions about this policy or your data go to info@modern-living.ae.
2. Who this applies to
The app is for people who already hold a Modern Living All4You portal account — our administrators and our registered agents. Accounts are created by our administrators; there is no public sign-up and the app cannot be used without an account we issue. If you are not one of our administrators or agents, the app collects nothing from you, because you cannot get past the sign-in screen.
This policy covers both the app and the portal, since they share one account and one database.
3. What we collect
Data you or your administrator provides
| Data | Detail |
|---|---|
| Identity | Your name and email address, held against your portal account. |
| Credentials | Your password, stored only as a one-way cryptographic hash. We cannot read it and neither can our staff. |
| Profile photo | Optional, and uploaded by you through the web portal. The app displays it but does not access your camera or photo library. |
| Contact number | Where you have chosen to verify a WhatsApp number in the portal, so that notifications can also reach you there. |
| Role and permissions | Whether you are an administrator or an agent, and what that entitles you to see. Set by our administrators, not by you. |
Data the app collects automatically
| Data | Detail |
|---|---|
| Push notification token | An anonymous identifier issued by Apple or Google that lets a notification reach your specific device. It is not tied to your identity by Apple or Google, and it is useless to anyone who cannot send through our account. |
| Device platform and name | Whether the device is iOS or Android, and the device name it reports (for example "Ahmed's iPhone"), so you can recognise your own devices and so we can support you. |
| Session records | An access token issued when you sign in, and the date a device last used it, so that stale sessions can be expired and revoked. |
| Notification state | Which notifications you have opened and when, so that unread counts are accurate across your devices. |
| Server logs | Standard web server and application logs, which include IP addresses and request times, kept for security and diagnostics. |
Business records shown in the app
Notifications describe the business records you already work with in the portal — deals, commissions, property listings, projects, developers and agent records. These may contain personal data about third parties such as buyers, sellers, landlords, tenants or colleagues. You see only what your role permits, and you are expected to treat that information as confidential. Where we hold personal data about a client or counterparty, we do so to perform or negotiate a property transaction and to meet the record-keeping obligations that apply to real estate brokerage in the UAE.
4. Why we use it
- To let you sign in and to keep your session valid and secure.
- To deliver notifications to your devices, and to show only the categories your role is entitled to.
- To honour your preferences, including which categories you want and whether push is on at all.
- To secure the service — detecting abuse, rate-limiting sign-in attempts, and maintaining an audit trail of significant actions.
- To support you when you contact us with a problem.
- To meet our legal and regulatory obligations as a licensed real estate business.
We process this data because it is necessary to perform our contract with you or your employer, because we have a legitimate interest in running and securing our business systems, or because the law requires us to keep certain records. Where we rely on your consent — notably for push notifications — you can withdraw it at any time without losing access to anything else.
We do not sell your personal data, and we never have. We do not share it with advertisers, data brokers or marketing networks, and we do not use it to build advertising profiles.
5. What we do not collect
The app does not request, access or transmit any of the following:
- Your location, at any level of precision. The app contains no location code and asks for no location permission.
- Your contacts, calendar, call history or messages.
- Your camera or photo library.
- Your microphone.
- Health, fitness or financial data held on the device.
- Advertising identifiers. The app contains no advertising SDK, no third-party analytics SDK and no cross-app or cross-site tracking of any kind.
6. Push notifications
Push notifications are delivered through Apple Push Notification service on iOS and Firebase Cloud Messaging (a Google service) on Android. To route a message to your phone, the relevant provider is given the device token and the content of the notification — typically a short title and summary such as the type of update and a reference number.
You are in control of this:
- Notifications are only sent after you grant the system permission.
- You can turn push off entirely in the app's Preferences screen, or in your device settings.
- You can switch individual categories on or off independently.
- Signing out removes the device's token from our records, and no further notifications are sent to it.
Turning push off does not restrict the app — notifications still appear in the app when you open it, and you continue to receive them in the portal.
7. Who we share it with
We share personal data only with the service providers that make the product work:
| Provider | What they receive, and why |
|---|---|
| Apple | Device token and notification content, to deliver push notifications to iPhones. |
| Google (Firebase Cloud Messaging) | Device token and notification content, to deliver push notifications to Android devices. |
| Our hosting provider | Hosts the portal, the database and the application servers on our behalf, under contract. |
| Our email provider | Name and email address, to deliver the notification emails and system messages you have chosen to receive. |
| WhatsApp (Meta) | Where you have verified a WhatsApp number in the portal, the number and message content, to deliver messages you have opted into. |
We may also disclose data where we are legally required to — for example to a regulator, a court, or a law enforcement authority acting under proper legal process — and to our professional advisers where necessary. If our business is sold or reorganised, data may transfer as part of that transaction; this policy continues to apply until you are told otherwise.
8. International transfers
Our servers and some of the providers above are located outside the United Arab Emirates, including in the European Union and the United States. Where personal data is transferred outside the UAE, we rely on providers that offer an adequate level of protection and that are bound by contract to protect it to the standard set out in this policy.
9. How long we keep it
- Account data — for as long as the account is active, and afterwards only where a legal or regulatory obligation requires it.
- Device tokens — removed when you sign out, when the session expires, when the device re-registers to another account, or when push is switched off.
- Notifications — retained with the business record they relate to, so the history of a transaction stays intact.
- Transaction records — retained for the period required of a licensed real estate business in the UAE, which may outlast your account.
- Server logs — kept for a short period for security and diagnostics, then rotated out.
10. Security
We protect your data with measures proportionate to its sensitivity:
- All traffic between the app and our servers travels over encrypted HTTPS connections.
- Passwords are stored only as one-way hashes and are never recoverable in plain text.
- Your session token is held in the device's secure keychain (iOS Keychain / Android Keystore), not in ordinary app storage.
- Access is enforced by role on the server, not in the app, so what your account may see cannot be changed by tampering with the device.
- Sessions can be revoked centrally by an administrator at any time — for example if a phone is lost.
- Sign-in attempts are rate limited to frustrate password guessing.
No system is perfectly secure. If a breach affects your personal data and is likely to put you at risk, we will notify you and the relevant authority as required by law.
11. Your rights
Under the UAE Personal Data Protection Law (Federal Decree-Law No. 45 of 2021) and other applicable law, you have the right to:
- ask what personal data we hold about you, and receive a copy of it;
- have inaccurate data corrected;
- ask us to delete data we no longer have a lawful reason to keep;
- object to, or ask us to restrict, certain processing;
- receive your data in a portable, machine-readable format;
- withdraw consent where we relied on it; and
- complain to the relevant supervisory authority.
To exercise any of these, email info@modern-living.ae. We respond within 30 days. We may need to verify your identity first, so that we do not disclose your data to someone else.
12. Deleting your account
You can request deletion of your account and associated personal data at any time, directly from your profile in the web portal or by emailing us. The full process, and what we are obliged to retain afterwards, is set out on the Delete Your Account page.
13. Children
The app is a business tool for our staff and registered agents and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with data, contact us and we will remove it.
14. Changes to this policy
If we change this policy we will update the "last updated" date above. Where a change materially affects how we handle your data, we will tell you through the app, the portal or by email before it takes effect. Continuing to use the app after a change takes effect means you accept the updated policy.
15. Contact us
Office 1503, Ontario Tower, Business Bay, Dubai, United Arab Emirates