Effective Date: May 17, 2026 Company: Island AI Limited License No.: 07101832 Legal Type: Company Limited by Shares Registered Address: Office A, RAK DAO Business Centre, RAK BANK ROC Office, Ground Floor, Al Riffa, Sheikh Mohammed Bin Zayed Road, Ras Al Khaimah, United Arab Emirates.  Island AI Limited (“Island AI”, “we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you access or use our website islnd.ai, our digital platforms, and any services connected to our licensed activities. This Policy complies with the UAE Personal Data Protection Law (PDPL) – Federal Decree-Law No. 45 of 2021, as well as relevant practices under RAK Digital Assets Oasis (RAK DAO).  1. About Island AI Limited Island AI is the world’s first Operating System for Islands, integrating real estate, local services, hospitality, e-commerce, community interactions, AI concierge features, and data-driven insights.  Our official licensed activities include:

• Digital Platforms & Services
• AI Content Studio
• Applied Generative AI Studio 
• E-Commerce Through Websites 
• Social Automation & Brand Agents
• AI Data Analysis 
• Innovation Lab / Venture Studio 
• PropTech & Digital Property Passports  
• Public Relations and Marketing Services  
• Event Management

As part of these activities, we may process personal and non-personal data in accordance with this Privacy Policy.  2. What Data We Collect  We may collect the following categories of data:  2.1. Personal Data You Provide 

• Name, email, phone number  
• Account and login details 
• Business registration details (for listings) 
• User-generated content: photos, descriptions, reviews 
• Payment details (processed securely through external providers)

2.2. Automatically Collected Data Through cookies, AI systems, and analytics tools: 

• Device and browser information 
• IP address and approximate location 
• Usage behavior, clicks, navigation patterns 
• Interaction with listings, maps, and AI concierge 
• Session duration, traffic source, performance metrics
• Security and abuse-prevention signals, including App Check and reCAPTCHA-related signals

2.3. Account, Authentication, and Session Data When you create an account or sign in, directly or through Google, we may store your email address, display name, unique user ID, handle, role, permissions, onboarding state, profile details, avatar, and business taxonomy choices. Authentication is provided through Google Firebase. Island AI may use Firebase Authentication, Google Identity flows, client-side Firebase Auth persistence in IndexedDB or localStorage, and strictly necessary HttpOnly session cookies to keep signed-in users connected to secure and private features. A separate readable session metadata cookie contains only timing information and does not contain your user ID, email, role, or identity claims.  2.4. Business & Listing Data For companies listed on the Island AI platform:  

• Company name, logo, description 
• Business category 
• Contact details 
• Service offerings  
• Location data 

2.5. Uploaded Media If you upload images for a profile, service, listing, article, page, or other content, we store the uploaded file and may create processed versions such as display images, thumbnails, previews, cover images, or profile thumbnails. Private or incoming uploads may be used for processing, moderation, and review. Public processed media may be shown when the related content is public.  2.6. AI-Generated Behavioral Data As part of our licensed activities (AI Data Analysis, Generative AI Studio), we may process: 

• Anonymized behavioral signals 
• AI-generated insights 
• Predictive engagement modeling  
• Aggregated demographic patterns

We do not use identifiable personal information for automated decision-making without consent.  3. How We Use Your Data We use personal and non-personal data to: 

• Operate and provide Digital Platforms & Services
• Improve the AI Concierge and AI Matching Engine
• Personalize recommendations and search results
• Support e-commerce transactions
• Manage business listings
• Conduct analytics and performance monitoring
• Create AI-enhanced content (AI Content Studio)
• Conduct marketing, PR, and community engagement
• Improve PropTech tools and Digital Property Passports
• Organize events and partner activations
• Maintain security, detect misuse, and comply with legal requests
• Provide authentication, sessions, and private account features
• Support moderation, publishing, and review workflows
• Protect users, prevent fraud, and enforce access controls
• Respond to support requests

We never sell personal data.  Some aggregated anonymized data may be used for internal analytics or offered to partners as market insights (fully anonymized) 4. Legal Basis for Processing We process data based on:

• Your consent
• Performance of a contract (account, listing, event registration)
• Legitimate business interests (platform improvement, analytics)
• Compliance with UAE law 

5. Sharing Your Data We may share limited data with:

• Service providers such as hosting, analytics, and payment processors
• Partners and businesses you interact with (e.g., when contacting a listed business)
• Government authorities if legally required
• Event partners (only with consent)
• Infrastructure, authentication, database, storage, analytics, payment, security, and hosting providers, including Firebase and Google services where applicable

Google Analytics is used only after you opt in through the cookie banner or settings. If you decline analytics, Google Analytics should not load. We do not share or sell your data to third parties for advertising or unrelated purposes.  6. Data Retention We retain your data only as long as necessary for: 

• Service usage 
• Legal and regulatory compliance
• Security and fraud prevention
• You may request deletion at any time. 

7. International Transfers Your data may be stored or processed on servers inside or outside the UAE (Amazon Web Services, Microsoft Azure, Google Cloud). We ensure all transfers comply with UAE PDPL requirements. 8. Cookies and Browser Storage Island AI uses cookies and similar browser storage, such as localStorage and IndexedDB, for consent, authentication, session handling, security, App Check, reCAPTCHA, preferences, and product functionality. Google Analytics is used only after you opt in through the cookie banner or settings. If you decline analytics, Google Analytics should not load. For more information, please see our Cookie Policy. 9. Your Rights Under UAE PDPL You have the right to: 

• Access your data 
• Request correction or deletion
• Withdraw consent
• Restrict certain processing
• Object to direct marketing
• Request information about automated decision-making

To exercise these rights, email: hello@islnd.ai 10. Data Security We apply strict security measures including: 

• Encryption
• Secure cloud infrastructure
• Access controls
• Regular audits
• Anonymization of analytical data

However, no online service can guarantee absolute security. 11. AI Technologies Because Island AI operates AI Content Studio, Generative AI Studio, and AI Data Analysis:  AI-generated insights may be used to personalize your experience Behavioral data may be anonymized and processed to improve recommendations AI responses are generated algorithmically and may not always be accurate  Where available, you may opt out of certain personalized AI features or manage related preferences through account settings or platform controls. 12. Children’s Privacy Island AI does not knowingly collect data from individuals under 16 without parental consent.  13. Changes to This Policy We may update this Privacy Policy from time to time. The revised version will be posted with a new Effective Date.  14. Contact Information For questions or requests regarding your privacy, contact:  hello@islnd.ai Island AI Limited RAK DAO Business Centre, Ras Al Khaimah, UAE